This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          EhH3TnRqqqBj7zFPdlmYBxwhXBTTmC/E/z6QgzPEijg=
Subject key identifier:   0C:2F:36:09:04:7E:BA:69:99:BD:F1:D7:26:25:0E:91:53:38:D5:52
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       019C42B43303071F6A53F2B494E88366E1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          17A1
Signing time:             Mon 09 Feb 2026 14:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:31 +0000
Files and hashes:         1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: Qa0r52nPPX0OjZvoZHmpa3k5m5QM4QTSrp15qX4KA+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:33:03:07:1f:6a:53:f2:b4:94:e8:83:66:e1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Feb  9 14:00:31 2026 GMT
            Not After : Feb 10 14:00:31 2026 GMT
        Subject: CN=0c2f3609047eba6999bdf1d726250e915338d552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:2b:e7:1c:16:2f:2a:e5:d0:92:cf:89:d9:
                    22:93:3a:71:6d:04:e3:1b:f1:a6:dc:f9:b0:cb:44:
                    78:23:06:61:97:92:15:2c:46:bc:7c:11:49:a9:85:
                    13:97:e5:9d:42:db:89:e1:fd:03:18:7e:7f:42:e6:
                    10:05:0c:52:a3:3a:96:0e:b4:1d:2f:b5:a2:03:54:
                    d3:21:0b:75:d6:c9:8a:48:89:0c:5e:65:4c:a4:91:
                    76:fa:47:bb:c7:70:ba:6b:97:5b:c0:d1:2b:e2:55:
                    99:e7:ad:ba:77:d1:84:43:a8:5e:b2:7f:dc:d0:33:
                    d5:ee:fd:e0:15:d0:1e:3a:cf:7f:07:58:d2:e0:30:
                    e5:e8:13:22:8b:e9:75:40:c9:23:2a:09:f0:d6:96:
                    f5:82:8e:e9:60:7c:a5:54:79:53:35:0f:59:a2:61:
                    cf:b3:ec:c9:aa:48:31:91:42:ce:e1:ba:f1:21:3c:
                    6d:af:c9:69:03:75:08:68:e8:81:d1:15:d8:00:fe:
                    65:c8:48:da:a2:bb:d4:5f:c5:9c:17:ca:22:65:30:
                    0e:58:45:d4:45:65:13:3f:cc:ee:7f:d8:94:f6:a9:
                    02:c6:5b:fb:0c:4d:48:0b:c4:6f:f2:a4:1f:8a:ec:
                    e3:24:48:4b:35:ce:fd:40:5c:3c:47:87:4a:6f:71:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2F:36:09:04:7E:BA:69:99:BD:F1:D7:26:25:0E:91:53:38:D5:52
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:c0:ad:ec:42:df:30:61:83:5a:51:52:7b:69:5d:a3:16:
         c5:12:b1:7a:e9:2d:2f:63:1b:24:b4:81:7a:d9:3c:c5:2f:c2:
         9a:64:0e:11:0d:5e:3e:f0:a4:fa:41:57:36:61:03:79:76:0d:
         21:f5:8a:1b:39:72:fe:c6:04:c5:28:da:77:10:92:62:69:6b:
         03:24:74:d9:87:14:ec:07:18:fc:8e:3b:4e:a6:a6:05:2e:b2:
         cc:b2:3e:2a:a5:e6:59:0d:51:48:31:69:de:73:5c:c5:3f:d2:
         c6:d7:a7:f3:24:b9:d5:1c:bf:4a:95:cb:01:bd:8f:a7:33:fa:
         e4:f3:90:6e:b4:82:32:91:5d:16:e0:f5:e4:60:f8:44:07:89:
         94:d8:83:5b:e9:38:46:72:a9:59:d7:a4:7e:39:a2:28:50:25:
         a5:86:fb:aa:27:c3:12:1b:02:4b:0a:36:48:48:64:ef:ea:ff:
         8b:59:6e:4d:fb:37:fd:dd:e9:45:ff:00:89:92:87:4c:ff:f3:
         08:98:96:0e:2e:32:21:4d:10:b3:4a:90:c5:91:bc:dc:bf:89:
         b9:03:3e:44:4f:6e:84:54:5e:01:e5:07:2f:1d:52:ef:d6:3e:
         5f:9f:73:55:10:fe:73:87:74:b3:c2:5b:51:dd:7f:e9:f5:ec:
         8e:ff:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:29 2026 by rpki-client