This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          zUkAoVNrSSCreJ1W59IPe08p1Z7u1mzqrV8Dhc1b+CY=
Subject key identifier:   86:6A:33:2F:CA:D4:60:FB:BD:B5:93:EB:04:2F:63:9B:98:01:88:52
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019C41A1A06EB7180524D2A97ED179E77059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          13A8
Signing time:             Mon 09 Feb 2026 09:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:37 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: aWa6KkRSxno9eaDWbynucbqg+ZW5g7DoUhspPclKsBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:a0:6e:b7:18:05:24:d2:a9:7e:d1:79:e7:70:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Feb  9 09:00:37 2026 GMT
            Not After : Feb 10 09:00:37 2026 GMT
        Subject: CN=866a332fcad460fbbdb593eb042f639b98018852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:56:65:06:eb:e7:7b:16:f2:66:a9:8c:22:
                    00:92:37:b1:6e:e4:ba:2a:d5:b2:af:d8:83:1d:93:
                    83:76:27:8c:3c:1d:c7:d7:b2:d4:4d:c2:aa:77:20:
                    48:c3:40:51:d0:75:e7:68:3f:8e:13:c5:34:93:b0:
                    75:f5:b2:d6:a1:74:45:26:5e:7c:42:6e:e1:99:6e:
                    81:5a:40:ff:2f:ae:68:cf:3d:82:bd:71:d7:4b:cd:
                    0a:7a:76:21:6d:b9:d3:e2:a3:6d:29:0b:9c:1f:ed:
                    9a:3f:46:32:e7:3b:78:37:fb:c2:a7:65:fd:02:7a:
                    96:6e:12:8c:95:51:a6:a1:6e:10:c2:bf:f6:49:a3:
                    b0:52:d7:ac:78:6d:b9:65:e8:40:46:7f:b2:e9:d8:
                    1a:21:e3:bc:06:73:ac:d7:c5:9c:4c:35:58:00:17:
                    45:06:af:b5:2c:b7:bd:70:a9:82:4d:fd:7f:c6:6d:
                    85:c6:e6:fb:65:88:2a:88:04:1e:99:15:3a:2e:a4:
                    67:ea:f0:2b:40:07:36:bb:d8:7d:4d:42:39:69:a7:
                    7c:09:0a:72:63:8b:a8:fd:fe:ff:12:a7:95:c2:1c:
                    82:44:d1:a5:0a:16:19:69:02:67:fa:bc:29:2e:92:
                    3f:8a:13:0f:14:cc:39:c6:a2:c5:8a:87:28:60:d0:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6A:33:2F:CA:D4:60:FB:BD:B5:93:EB:04:2F:63:9B:98:01:88:52
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d3:7d:34:da:8e:48:c0:56:c8:92:47:c1:b6:2a:a4:61:af:
         96:b1:ea:72:f0:08:b5:23:6f:3b:b4:90:f7:10:11:e1:e0:c1:
         b0:e8:dd:c8:d1:34:72:3d:17:a6:f6:c5:91:92:be:dc:d3:7d:
         bb:e5:a4:5b:08:31:4a:dc:26:3a:42:84:5b:80:8a:32:13:a7:
         57:bd:48:9b:07:37:ec:d9:c1:53:31:85:bb:82:38:a4:c8:55:
         be:39:67:c5:10:e6:3b:45:02:1e:73:b3:33:ce:20:91:3f:ce:
         fa:3f:7d:2c:e6:46:13:70:73:d1:1a:ab:cf:e8:be:cc:f9:76:
         31:a7:91:dc:5f:78:44:aa:5e:fc:a3:ce:d7:6b:99:47:e4:08:
         13:7d:f7:15:1c:df:46:2e:1c:44:55:ec:70:2c:95:9c:2d:da:
         06:f8:b3:55:59:9c:4e:6d:92:65:41:5f:9c:25:1d:8d:68:36:
         7d:76:43:27:f2:e6:7f:a6:67:e1:c6:fe:2c:9f:05:be:54:60:
         cc:8b:5d:a1:58:c3:94:1b:da:ef:bf:b0:c9:ac:c7:1e:51:08:
         b3:e9:87:1c:d1:6e:13:ee:45:ee:b8:78:98:87:b1:a6:33:bc:
         8b:c1:78:83:1e:68:41:fe:74:4b:98:5b:d7:33:8f:27:6e:31:
         90:9f:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:26 2026 by rpki-client