This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File:                     vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier:          mW6pvZXGDVZZKfmZarisVtDdTxNw8GuBbMR4qAeasw4=
Subject key identifier:   FB:E3:52:B7:86:14:6B:21:72:41:00:16:B3:0C:15:D6:AD:0C:9C:BC
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer:       /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial:       019C4358D9433C43EA3EC958E96A261D4995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:22 +0000
Files and hashes:         1: jZPORJn-zMgT1MPwqADqLbmQH9Q.roa (hash: TIrHPTEaopblVWB+O4jfVq2Jj9aG6C8kJTCwJAGmknU=)
                          2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: JPUb9Bb8iyltwelhUrw+oXzAMAUWTJIOnbs30eRb9xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d9:43:3c:43:ea:3e:c9:58:e9:6a:26:1d:49:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
        Validity
            Not Before: Feb  9 17:00:22 2026 GMT
            Not After : Feb 10 17:00:22 2026 GMT
        Subject: CN=fbe352b786146b2172410016b30c15d6ad0c9cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:58:1d:a2:6a:18:28:15:4e:37:99:07:9b:
                    e6:00:65:3b:d8:4d:82:35:ba:bf:1f:e9:ec:b7:d5:
                    13:96:44:bb:d5:65:53:ef:0b:a6:6e:99:2d:e4:91:
                    b7:15:c7:37:e9:8c:fd:88:6a:e8:4f:82:eb:8b:33:
                    34:9a:cc:58:84:c6:aa:1b:ca:79:21:be:83:02:4d:
                    74:b5:f4:ab:05:bb:11:f5:cd:83:17:7c:81:dd:26:
                    80:9c:92:5d:99:f3:57:f1:f8:61:59:88:b2:28:87:
                    c6:c4:d4:2b:a0:86:d9:ad:02:8e:d0:e6:45:d0:0c:
                    58:ce:1c:63:aa:01:63:3f:cb:d8:64:49:c3:ba:f0:
                    7e:b9:b6:6f:b6:af:7d:9f:fc:44:30:7b:47:9b:f9:
                    c6:ab:32:79:ca:d9:d3:86:4a:c3:ab:87:5c:5b:af:
                    c0:70:21:c0:c3:d2:f7:81:01:d5:3c:53:51:64:2d:
                    09:33:d4:b6:4e:70:a4:d0:46:44:31:35:9f:2a:92:
                    6c:73:0e:32:c0:36:14:66:b5:bb:76:f6:0d:10:54:
                    ef:82:75:09:7c:51:06:3c:c8:ab:e5:53:66:3e:cd:
                    e6:4b:70:8b:18:86:7e:76:56:2b:c3:51:2d:d4:0f:
                    42:78:fb:c5:d2:e2:ab:b0:25:21:b6:6e:2c:e7:93:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:52:B7:86:14:6B:21:72:41:00:16:B3:0C:15:D6:AD:0C:9C:BC
            X509v3 Authority Key Identifier:
                keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4f:eb:f7:18:9f:11:6a:32:c8:91:af:5b:96:11:42:61:79:
         4d:38:56:18:64:37:8a:c8:06:18:3d:35:3c:21:92:c5:bb:23:
         01:f8:47:fd:2d:b3:8a:94:37:3d:ce:fe:27:4a:b3:4b:84:46:
         f8:85:39:b8:37:74:4f:d1:3a:5f:0f:bc:27:3a:62:ae:25:e0:
         6e:b0:c9:d9:3c:f0:37:d8:df:ee:c2:2d:84:7e:20:02:4c:c8:
         66:82:40:af:76:d8:b2:d4:64:af:24:21:02:67:7a:d9:5a:3f:
         e6:d0:06:b5:b2:99:bb:73:b3:10:69:17:a5:5b:09:48:b4:50:
         6f:21:2c:04:44:9d:76:99:77:a4:b3:d9:35:b6:33:04:5e:1e:
         36:c6:39:92:ec:0e:91:11:50:bd:58:57:ba:aa:15:1d:2d:06:
         b3:13:f5:ab:e6:a6:88:f6:3e:90:c9:23:c9:ce:03:78:62:de:
         2a:3b:1a:03:2e:7f:7b:ad:f6:42:6d:1d:94:74:b3:95:37:e0:
         81:06:f4:26:98:33:f3:47:83:f2:71:04:04:be:12:c9:24:87:
         76:b4:d6:35:c1:cb:6c:de:87:55:cc:4c:e0:7a:21:1b:e7:d4:
         08:d1:8f:d4:0c:c8:e3:82:43:bc:94:fc:a0:2f:b7:d1:46:19:
         85:a6:92:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWNlDPEPqPslY6WomHUmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjBlNjRiMTg4MzFiYzk4NTI3Y2JlMGUxMDY3YzFhOTVk
MTY4N2QwHhcNMjYwMjA5MTcwMDIyWhcNMjYwMjEwMTcwMDIyWjAzMTEwLwYDVQQD
EyhmYmUzNTJiNzg2MTQ2YjIxNzI0MTAwMTZiMzBjMTVkNmFkMGM5Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hZYHaJqGCgVTjeZB5vmAGU72E2C
Nbq/H+nst9UTlkS71WVT7wumbpkt5JG3Fcc36Yz9iGroT4LrizM0msxYhMaqG8p5
Ib6DAk10tfSrBbsR9c2DF3yB3SaAnJJdmfNX8fhhWYiyKIfGxNQroIbZrQKO0OZF
0AxYzhxjqgFjP8vYZEnDuvB+ubZvtq99n/xEMHtHm/nGqzJ5ytnThkrDq4dcW6/A
cCHAw9L3gQHVPFNRZC0JM9S2TnCk0EZEMTWfKpJscw4ywDYUZrW7dvYNEFTvgnUJ
fFEGPMir5VNmPs3mS3CLGIZ+dlYrw1Et1A9CePvF0uKrsCUhtm4s55NagQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvjUreGFGshckEAFrMMFdatDJy8MB8GA1UdIwQY
MBaAFL8g5ksYgxvJhSfL4OEGfBqV0Wh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUt
MjI5YjY0MDlmMmEwLzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lYjM0MGYtODA1My00ZjVmLWEzYTUtMjI5YjY0MDlmMmEw
LzEvdnlEbVN4aURHOG1GSjh2ZzRRWjhHcFhSYUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk/r9xif
EWoyyJGvW5YRQmF5TThWGGQ3isgGGD01PCGSxbsjAfhH/S2zipQ3Pc7+J0qzS4RG
+IU5uDd0T9E6Xw+8JzpiriXgbrDJ2TzwN9jf7sIthH4gAkzIZoJAr3bYstRkryQh
Amd62Vo/5tAGtbKZu3OzEGkXpVsJSLRQbyEsBESddpl3pLPZNbYzBF4eNsY5kuwO
kRFQvVhXuqoVHS0GsxP1q+amiPY+kMkjyc4DeGLeKjsaAy5/e632Qm0dlHSzlTfg
gQb0Jpgz80eD8nEEBL4SySSHdrTWNcHLbN6HVcxM4HohG+fUCNGP1AzI44JDvJT8
oC+30UYZhaaS3A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:51 2026 by rpki-client