This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File:                     VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier:          9NWV241s3oLOQuxfL9DOOUrtDPKh+p/OSsPdaC71QWc=
Subject key identifier:   B4:2C:E2:5A:30:FF:1F:C4:81:90:82:46:33:C7:8B:46:CF:E1:90:C0
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer:       /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial:       019C435901B1910BD663BC8FACF89DAB2F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number:          04B6
Signing time:             Mon 09 Feb 2026 17:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:32 +0000
Files and hashes:         1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: SxlZGi0sCv0uSX1oGWauGkSDIwurArxCpqig99MnTnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:01:b1:91:0b:d6:63:bc:8f:ac:f8:9d:ab:2f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
        Validity
            Not Before: Feb  9 17:00:32 2026 GMT
            Not After : Feb 10 17:00:32 2026 GMT
        Subject: CN=b42ce25a30ff1fc48190824633c78b46cfe190c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:f5:31:be:99:f4:de:b4:ec:a8:63:5c:69:
                    3c:6c:ca:43:a2:fb:96:2d:63:5c:c6:81:f5:29:85:
                    01:98:25:e7:d1:56:05:30:79:c5:06:ef:ec:d2:36:
                    a4:40:94:e7:3e:b5:1d:b7:00:ca:2e:1a:94:29:fe:
                    a7:b3:36:a6:31:80:a5:6d:62:1d:92:65:e0:6b:e3:
                    22:48:e9:1a:2c:9a:d9:ea:68:c4:7c:43:5d:b1:7b:
                    cd:9a:48:b0:2d:b9:92:c2:fd:a1:fb:44:3e:a9:cb:
                    5e:7d:74:91:c3:32:3c:6a:48:36:a9:fb:a6:38:be:
                    89:1c:f7:79:86:93:0f:2f:04:f4:44:56:36:cc:33:
                    82:a5:28:3d:e3:47:73:4d:c5:ef:74:a8:fe:9f:88:
                    50:4c:f9:e0:73:29:2b:f2:70:cb:db:f3:cf:37:f4:
                    37:83:f3:a6:ee:d8:3c:3c:f4:b2:af:25:ce:53:3e:
                    1a:18:59:17:3d:e7:3d:ad:96:33:37:b7:1c:da:f1:
                    87:87:b1:e3:14:d2:d0:9c:0b:9f:3e:3f:ec:f5:2c:
                    37:de:e9:39:92:ee:2a:37:03:3f:ac:60:3f:f8:d6:
                    1c:be:8c:b0:cf:6d:5a:df:d7:30:48:cf:1e:0e:a6:
                    91:a6:40:0d:a8:f1:31:26:1d:3b:1d:a3:74:91:74:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:E2:5A:30:FF:1F:C4:81:90:82:46:33:C7:8B:46:CF:E1:90:C0
            X509v3 Authority Key Identifier:
                keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:85:50:0c:ec:90:0e:f7:6c:27:d8:88:13:49:93:3a:d3:26:
         22:4b:c2:92:ce:2d:97:00:b0:c0:d0:84:c1:10:73:dd:88:02:
         13:b4:33:69:30:26:bb:6d:7c:c2:87:8e:6b:3f:c4:36:bc:15:
         91:43:7f:f8:e4:0d:6a:71:46:1c:86:67:55:64:1e:fa:60:01:
         15:cc:bc:2d:32:27:45:53:c5:04:f4:fb:7b:55:ac:9c:11:f5:
         75:36:b9:d7:d9:c4:23:07:18:13:9b:e4:8c:62:28:d7:06:d0:
         41:34:8a:98:bc:c5:31:56:cf:cb:4a:2a:33:77:c3:32:18:f6:
         d4:ac:c0:de:d0:cc:32:0f:ab:61:1b:1b:6d:98:58:34:b7:fe:
         3d:a7:38:41:d0:e5:de:36:3e:f4:70:3c:e5:36:dc:5a:37:d5:
         5d:55:69:84:a6:c5:aa:d0:96:57:c4:4e:7f:52:a3:e4:48:b7:
         e1:86:5e:59:d6:5d:65:0c:74:b1:12:aa:97:20:43:87:cb:a3:
         8e:f1:7d:dd:ad:b6:d4:70:61:fa:89:ed:6f:d6:20:45:24:63:
         bb:1f:f0:2b:3b:50:fa:85:54:8d:cd:4e:c1:bc:c5:0c:95:52:
         08:83:42:64:5f:42:63:8d:54:cc:49:8a:7f:0e:58:b0:40:65:
         f3:74:f5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWQGxkQvWY7yPrPidqy8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTBjZGI5YmFlMGI5MzJjNzlhMjlmOGQ5NzkyZDMwOWY3
YWQ3YjcwHhcNMjYwMjA5MTcwMDMyWhcNMjYwMjEwMTcwMDMyWjAzMTEwLwYDVQQD
EyhiNDJjZTI1YTMwZmYxZmM0ODE5MDgyNDYzM2M3OGI0NmNmZTE5MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ir1Mb6Z9N607KhjXGk8bMpDovuW
LWNcxoH1KYUBmCXn0VYFMHnFBu/s0jakQJTnPrUdtwDKLhqUKf6nszamMYClbWId
kmXga+MiSOkaLJrZ6mjEfENdsXvNmkiwLbmSwv2h+0Q+qctefXSRwzI8akg2qfum
OL6JHPd5hpMPLwT0RFY2zDOCpSg940dzTcXvdKj+n4hQTPngcykr8nDL2/PPN/Q3
g/Om7tg8PPSyryXOUz4aGFkXPec9rZYzN7cc2vGHh7HjFNLQnAufPj/s9Sw33uk5
ku4qNwM/rGA/+NYcvoywz21a39cwSM8eDqaRpkANqPExJh07HaN0kXQliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQs4low/x/EgZCCRjPHi0bP4ZDAMB8GA1UdIwQY
MBaAFFUQzbm64Lkyx5op+Nl5LTCfete3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQt
ZGY1OTAyMDEzY2RmLzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQtZGY1OTAyMDEzY2Rm
LzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIVQDOyQ
DvdsJ9iIE0mTOtMmIkvCks4tlwCwwNCEwRBz3YgCE7QzaTAmu218woeOaz/ENrwV
kUN/+OQNanFGHIZnVWQe+mABFcy8LTInRVPFBPT7e1WsnBH1dTa519nEIwcYE5vk
jGIo1wbQQTSKmLzFMVbPy0oqM3fDMhj21KzA3tDMMg+rYRsbbZhYNLf+Pac4QdDl
3jY+9HA85TbcWjfVXVVphKbFqtCWV8ROf1Kj5Ei34YZeWdZdZQx0sRKqlyBDh8uj
jvF93a221HBh+ontb9YgRSRjux/wKztQ+oVUjc1OwbzFDJVSCINCZF9CY41UzEmK
fw5YsEBl83T18A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:51 2026 by rpki-client