This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          zZEsI65IpCw8SvIbfg2u4GgVdSBNP3Ro6ss4IzMiV04=
Subject key identifier:   D2:AD:F3:F0:CE:F5:51:49:94:FE:EA:16:FB:2A:58:04:38:5C:43:3E
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       019C4390729BB166B5D1EF63135DF81B4C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:05 +0000
Files and hashes:         1: Q56vED3-1_h936Q-ifWJs53c2GY.roa (hash: OY22bFuEd/zv+11Gst6hYDrj07QiCcY3HPOcMh0b7Ks=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: QjIit3QYsCA0To9/4iuOFVCHwg0f/l4R0Z6H+khPSTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:72:9b:b1:66:b5:d1:ef:63:13:5d:f8:1b:4c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: Feb  9 18:01:05 2026 GMT
            Not After : Feb 10 18:01:05 2026 GMT
        Subject: CN=d2adf3f0cef5514994feea16fb2a5804385c433e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:2b:88:e8:03:85:a1:e6:df:61:8b:64:00:
                    46:2b:36:05:0f:c0:2c:a7:3e:11:62:2d:a2:da:d6:
                    3e:02:1b:82:fa:76:a5:a1:53:4c:67:a9:2d:0d:7b:
                    b7:1b:d6:03:c2:1d:41:1f:81:3b:2b:d5:77:d6:b8:
                    1e:6b:1a:d2:bb:c8:29:b2:a8:7b:6f:1f:21:59:b1:
                    35:ca:05:6f:ed:4e:b8:7a:77:14:99:3e:80:f4:1e:
                    de:bb:25:3b:e2:2b:6c:6c:7a:7d:f4:a7:dd:e0:fd:
                    59:40:9b:85:16:00:29:54:80:b2:4e:04:22:3d:de:
                    c7:65:31:41:e1:6b:07:bf:4d:ca:3e:36:e0:6a:be:
                    7c:83:b1:3d:b6:c5:8f:d3:fe:04:f3:b2:94:3e:a1:
                    ed:15:0b:c6:1f:63:7c:5c:7f:9e:49:bc:97:43:f4:
                    08:7f:a1:03:3b:19:82:2f:31:a2:9d:10:53:9f:61:
                    40:10:16:89:26:9e:48:cd:70:d6:d8:b9:5a:bf:5e:
                    be:c1:83:e6:b9:1e:4e:83:9d:f0:22:3b:dd:c1:29:
                    e5:4d:91:77:06:35:fc:dc:59:20:16:92:78:5d:1c:
                    c6:47:22:b5:f1:3a:56:28:bf:39:cd:a2:34:54:3b:
                    f4:a2:16:6b:22:b0:eb:76:2b:3f:c4:30:cf:97:75:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:F3:F0:CE:F5:51:49:94:FE:EA:16:FB:2A:58:04:38:5C:43:3E
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a1:37:47:42:89:5c:42:43:aa:68:a6:fe:69:90:a2:32:f0:
         48:07:c7:7e:8b:f7:c3:87:39:09:d8:e1:f1:53:f8:5c:5c:d8:
         4a:1e:80:83:7a:74:d3:48:c0:3a:90:f3:13:52:96:99:e6:b3:
         c2:0b:6b:12:db:fa:b5:6e:09:b6:4e:7a:52:c2:66:97:61:fe:
         bf:ed:c3:9f:28:cb:92:c4:fb:01:b4:c9:84:f6:ab:4f:73:b9:
         ca:a3:e2:02:5d:59:a0:47:77:4b:8e:bd:80:40:12:dd:1d:35:
         98:6a:53:ce:5c:f4:45:f0:29:54:e1:f4:6f:2f:60:08:b3:f6:
         cd:1c:14:47:6f:c8:b2:ca:b3:ec:e5:93:25:d7:0a:a0:37:ab:
         bc:66:9c:88:04:55:a1:de:b4:6a:a6:0c:33:20:2d:e8:10:f0:
         83:7d:97:a5:d9:4d:77:70:65:a0:b1:7d:0c:bd:1b:ef:67:79:
         ac:f1:d9:61:0c:39:b4:53:70:d6:22:2a:db:3e:39:75:5e:95:
         8e:48:41:b5:99:5a:40:57:78:12:3d:ca:ca:0a:24:ee:4d:9d:
         57:3b:be:2a:f4:40:31:54:22:54:95:26:e6:90:2c:e7:15:10:
         ba:e8:43:d3:62:67:8a:0f:84:5d:f0:40:81:f3:4d:28:c3:b6:
         d6:e4:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:19 2026 by rpki-client