This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File:                     VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier:          eM2CRF6pt+0hRY/fJe02MNvOYWa6HLlhhdgwFP2RqME=
Subject key identifier:   93:A1:05:CC:1F:DC:23:21:E4:CF:94:B8:27:7E:25:E5:32:7A:A2:BB
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer:       /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial:       019C420F9F262822966F08F94DBD33D4AED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number:          07EE
Signing time:             Mon 09 Feb 2026 11:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:45 +0000
Files and hashes:         1: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: n+y+JtvOyrN9/caiwHzMw/ng/DoX4JF5Tn9CPiQtkVo=)
                          2: uH1OFQK-y6nSA9ln1NEz-DHjkYM.roa (hash: gklS8iQwBkuF3RBvorQ4lbNpw7pGXOz/cK6thzC+bvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:9f:26:28:22:96:6f:08:f9:4d:bd:33:d4:ae:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
        Validity
            Not Before: Feb  9 11:00:45 2026 GMT
            Not After : Feb 10 11:00:45 2026 GMT
        Subject: CN=93a105cc1fdc2321e4cf94b8277e25e5327aa2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:21:eb:e8:86:85:3c:6e:8a:67:99:cf:f2:
                    e5:25:5e:24:7c:91:66:7a:59:b2:f9:71:e4:4e:56:
                    5b:57:f8:21:13:3f:fe:1b:6a:3d:1f:a2:c5:55:e3:
                    3e:8c:78:2e:de:a1:b8:1b:3d:45:9e:f1:64:05:be:
                    0d:0c:d2:87:b5:d8:be:3c:49:e0:84:46:0d:6d:69:
                    4d:0a:dd:99:c1:e4:d2:dc:05:13:14:60:6d:7d:64:
                    36:45:c7:77:f5:65:94:2e:2d:7a:01:7b:cb:d0:0a:
                    cd:34:dd:39:fa:1b:09:ee:d8:75:72:d4:ee:be:f2:
                    e2:cf:52:4a:2e:87:af:34:b0:65:0f:a1:3a:2d:1a:
                    8e:10:b9:ff:68:93:e2:bc:15:61:6b:6f:bf:a4:f5:
                    58:58:5f:c8:27:ac:fb:ec:9d:16:59:d2:31:03:06:
                    1e:77:26:f3:b0:38:d4:ed:97:51:80:91:46:12:00:
                    e3:e3:b0:7f:12:c0:f1:e1:d1:1b:3d:ef:23:e5:39:
                    46:f3:58:e4:c4:bf:4f:e3:26:8d:af:3f:c3:93:3c:
                    0a:db:2b:b3:6e:91:a9:dc:10:71:30:d8:ee:7a:25:
                    b0:c5:d0:aa:40:88:34:5c:04:b4:cb:f7:d9:ad:c5:
                    78:79:9d:4b:5c:02:59:73:1b:6e:4f:e1:d2:f7:16:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:05:CC:1F:DC:23:21:E4:CF:94:B8:27:7E:25:E5:32:7A:A2:BB
            X509v3 Authority Key Identifier:
                keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:90:9e:ab:71:d4:13:79:28:b6:a2:ce:0d:cc:f2:82:6d:
         2d:0b:b1:42:32:d8:03:57:60:88:3c:1c:c3:6c:d3:1c:5c:17:
         36:63:80:2d:76:d6:34:c4:52:53:3a:be:da:05:bc:55:f9:de:
         02:3c:a0:a6:b7:f4:f7:67:3c:18:76:14:30:04:bc:ba:98:cd:
         d8:20:4e:e3:fc:cb:43:40:b8:2c:3e:56:3e:34:ad:3a:35:0f:
         37:d7:00:18:f2:eb:ad:d6:cc:d7:38:a1:2f:09:0f:6d:03:29:
         21:a6:13:0a:71:67:c7:2e:ed:6f:52:45:48:0e:16:24:0c:58:
         63:3a:4a:f5:ea:34:e5:7d:26:67:8f:ae:d2:d9:0f:d5:1f:d5:
         bb:60:94:c8:88:73:4d:83:52:f6:80:2c:e2:68:e0:e9:b4:f2:
         61:a8:8f:06:47:cc:e8:12:b3:74:b8:d7:91:9a:6e:a2:b3:6d:
         e3:11:ba:0e:4f:d0:50:db:e9:f2:28:ed:1e:c9:a4:ca:fd:0a:
         93:c0:4a:9f:3c:eb:46:5a:ca:3e:61:49:ce:4d:5e:f8:55:7d:
         38:fe:d5:c6:9c:35:30:a1:8c:40:5a:42:6b:a3:d2:3c:83:be:
         76:0b:a5:fe:01:16:c8:8b:07:77:30:f7:bd:63:85:b7:0c:8f:
         33:5f:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:43 2026 by rpki-client