This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File:                     v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier:          g8MkLpaJRJK8IDYISnkHM8uUiuyut5BnBzXqSFzuPfI=
Subject key identifier:   A4:D2:80:0E:C6:7C:46:2B:21:FA:27:E2:FD:B3:A5:BB:EB:CA:90:7C
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer:       /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial:       019C457EEEDFA08152AD4906B5A795F54EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number:          1810
Signing time:             Tue 10 Feb 2026 03:01:12 +0000
Manifest this update:     Tue 10 Feb 2026 03:01:12 +0000
Manifest next update:     Wed 11 Feb 2026 03:01:12 +0000
Files and hashes:         1: 0jpOewhs5al4i2Un15buYjMlNLI.roa (hash: YIUbzKo2xMv9/Z1KjRiKTWnIZ7BfndO4Gvu0b8SDWI0=)
                          2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: YlApAMTPouC/ki0rcXbFt7t7iO8JPGuSlHPyjJUP0NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:7e:ee:df:a0:81:52:ad:49:06:b5:a7:95:f5:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
        Validity
            Not Before: Feb 10 03:01:12 2026 GMT
            Not After : Feb 11 03:01:12 2026 GMT
        Subject: CN=a4d2800ec67c462b21fa27e2fdb3a5bbebca907c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:1b:b8:f7:4b:fc:9f:da:51:54:85:c5:fe:
                    7c:b5:88:cb:24:16:0d:c1:87:54:e5:5c:2a:c5:38:
                    ed:d3:42:c3:39:ed:dc:87:33:be:15:57:d0:f3:0b:
                    6a:01:44:29:79:90:e3:ee:5c:5f:b0:09:54:2a:d0:
                    5c:57:ee:c5:c4:99:27:77:ff:78:60:8d:ce:b7:97:
                    7c:3a:bc:ff:ff:e0:2b:85:6c:76:1e:11:fa:d0:c4:
                    5e:df:58:d0:8a:4f:2b:52:5d:69:7a:44:be:2f:5a:
                    91:28:e7:64:80:bc:ef:6c:a6:9c:90:01:0b:e1:91:
                    f6:50:84:fe:24:76:d9:04:4c:78:5a:24:a0:eb:19:
                    40:c2:a5:51:2f:e3:11:53:af:29:bf:05:c0:b4:86:
                    d5:90:31:62:2c:97:50:08:77:a2:f3:18:49:14:b4:
                    2f:2b:bf:58:08:37:61:57:9e:4a:92:27:c8:cf:82:
                    26:08:1a:8f:6a:2e:64:d1:1d:50:16:b2:5a:fa:32:
                    b9:aa:55:e6:fb:20:cd:82:6e:b7:51:47:e4:b6:f8:
                    3f:07:8f:40:b9:54:cb:71:4d:3f:5c:45:80:a5:fa:
                    dc:63:59:aa:fa:7f:bb:c4:d3:03:be:a0:6c:35:a5:
                    2d:b9:bc:64:35:8a:c6:ea:b6:6a:4c:b1:e3:cc:4b:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:80:0E:C6:7C:46:2B:21:FA:27:E2:FD:B3:A5:BB:EB:CA:90:7C
            X509v3 Authority Key Identifier:
                keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:27:ad:40:45:72:a5:49:ef:91:0e:06:54:e0:2a:ba:d8:1a:
         2d:29:db:f9:b7:e0:73:89:ce:05:7f:f9:97:c1:c7:2b:eb:12:
         e4:37:7d:bc:d3:4c:ac:73:30:20:c0:32:e8:e0:05:94:69:5f:
         ca:03:ab:39:59:58:32:25:87:67:99:ab:76:72:f3:3f:ea:a3:
         85:0f:7e:6f:c1:cd:5f:3e:ab:3a:71:4a:a4:91:ce:e0:99:2c:
         a6:bb:ea:a3:03:53:2c:3c:ac:97:ba:88:4f:e3:64:87:b7:33:
         01:8d:28:a8:fe:76:b6:49:fd:13:56:14:b5:d3:62:1d:b4:eb:
         df:51:7d:da:74:be:55:0c:c9:8e:95:ff:0a:8e:2e:e5:b0:04:
         ff:f5:b6:e0:80:58:11:35:6b:a9:88:d7:1a:21:8f:c1:e1:64:
         40:d4:d0:a2:35:15:8d:7c:4b:f6:94:b0:ef:ec:33:59:38:42:
         ca:77:6a:4b:4a:e7:4f:a6:9d:10:55:8a:a4:5b:90:fb:99:5f:
         ff:cd:ca:96:61:a8:9e:01:a3:85:e9:f9:df:96:88:df:e7:ae:
         b8:6f:d0:a2:b4:d4:ef:d2:ed:01:5e:46:a8:7f:91:4f:33:a4:
         ec:fa:fa:70:1c:87:01:65:50:57:01:c1:73:62:38:46:b1:35:
         8b:15:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:27 2026 by rpki-client