This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File:                     VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier:          YCXv77g/fiojTHovPTtfLllt4i9lwu/HK1fiUN/uzZ4=
Subject key identifier:   38:5C:A4:0D:5C:F8:AD:DD:BD:73:38:2B:5E:79:30:23:7F:54:D8:E1
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       019C420FBB2DA7ED9C38E055EA28DB574295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number:          0A0C
Signing time:             Mon 09 Feb 2026 11:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:52 +0000
Files and hashes:         1: UdpDaeZVys7LHpexLg2_ugrpKao.roa (hash: 4C4Vm/weE0RMdrsBZQ2+meAake0bVi8NxlHOyIu9Ojw=)
                          2: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: 15Qzn5ra10wYE7drG7SDAo1jhBKx2j7wcMdAzbEhxMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:bb:2d:a7:ed:9c:38:e0:55:ea:28:db:57:42:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: Feb  9 11:00:52 2026 GMT
            Not After : Feb 10 11:00:52 2026 GMT
        Subject: CN=385ca40d5cf8adddbd73382b5e7930237f54d8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:b6:50:6e:aa:09:0b:4a:70:6d:91:2c:95:
                    a8:73:0d:7d:3d:29:a7:e5:9c:31:7a:d7:64:80:d8:
                    0b:bb:39:d6:0d:eb:b5:a8:2b:f2:9c:9f:b6:fa:8c:
                    03:b9:f7:2b:7f:65:55:7d:26:3e:f6:4d:59:65:3e:
                    69:23:95:24:d9:23:58:6e:6a:c4:a0:bf:14:84:5b:
                    cc:cb:42:51:2f:76:ed:ce:01:e0:d9:cf:00:62:51:
                    79:ff:d3:d1:e8:c7:30:ec:bd:87:41:28:a2:5b:2f:
                    c6:50:fa:61:d3:24:f7:bd:4b:aa:15:18:c2:59:13:
                    62:fc:84:f3:54:f7:d3:2e:d2:45:7f:21:12:ac:1b:
                    98:db:7d:46:9e:d0:10:e2:04:28:0b:62:e0:70:ff:
                    4d:c4:9d:17:59:36:5c:e2:38:61:9e:b0:be:74:29:
                    68:aa:bb:6e:1e:77:14:d7:3a:8b:f5:18:19:d8:54:
                    3e:b2:68:ca:31:21:29:2f:78:38:f2:15:4c:65:c7:
                    f9:64:00:91:a5:87:5f:f2:26:43:30:1f:8b:73:41:
                    36:7b:2a:81:7a:ac:1e:5f:55:28:29:58:3a:c5:9a:
                    47:10:53:c5:e8:c3:7a:70:92:15:a0:81:c7:37:24:
                    a7:f2:09:74:b0:64:93:74:fe:34:27:96:f2:a2:9e:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:A4:0D:5C:F8:AD:DD:BD:73:38:2B:5E:79:30:23:7F:54:D8:E1
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:4a:24:53:87:aa:52:82:4b:9a:36:42:a6:0f:36:40:4e:
         65:c5:b6:16:bb:3a:27:63:00:85:cb:ee:ab:3a:bc:42:a2:ff:
         ac:7d:6d:84:25:e1:e2:6a:49:f7:fe:c0:4f:b3:40:61:ce:2d:
         c4:62:1b:a9:bd:5c:a1:53:40:fc:36:57:44:8d:dc:c3:b7:a1:
         a4:b1:60:ae:72:fb:70:cd:09:3a:60:13:ce:bd:0c:f9:dd:91:
         d6:ec:53:84:db:30:39:6b:42:2d:49:1f:94:3c:b1:c0:40:8a:
         1f:0f:52:44:0b:d8:c5:91:06:3d:11:a8:46:d9:4d:2d:a5:26:
         ce:00:24:96:cf:18:71:c3:ba:08:c2:d9:89:12:c7:47:06:dc:
         c6:28:5a:44:af:07:fa:2f:c7:1e:48:d1:d6:bc:ae:32:13:69:
         91:df:58:8e:ba:5e:fd:be:98:50:34:13:93:a9:72:b2:41:19:
         1f:db:ce:e2:e9:a8:79:4f:33:6a:bd:dc:e7:88:61:3a:48:3e:
         42:22:87:39:2b:7e:96:4c:5f:d5:3f:c0:0a:0e:91:90:9c:0f:
         19:ab:08:cc:38:12:57:4c:81:90:a8:62:b8:2b:45:fd:4d:9d:
         58:d5:55:2e:27:e3:22:95:cf:42:df:e1:77:3f:56:ea:91:17:
         76:9f:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:34 2026 by rpki-client