This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File:                     VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier:          Jul/H2AAotmv2Oz4SXbr6m2zfghUNdInBUYRmeNX8EU=
Subject key identifier:   35:9B:3D:54:F6:46:A9:C4:09:5A:BD:EF:5A:88:36:62:C7:92:BB:1E
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer:       /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial:       019C435926970D81A6B81E73E4EA86AB2D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number:          12E6
Signing time:             Mon 09 Feb 2026 17:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:41 +0000
Files and hashes:         1: IihrDiOMMogMysZiqLuZCTGW7ps.roa (hash: 27NO7W1ghNU5VtJT3vvPiTMqw3X03DbaQcQd4NemsmM=)
                          2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: RlQ0Dm+zSWFirRd6Q4eoDDdqW37dY4zS7g0zy7cH0Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:26:97:0d:81:a6:b8:1e:73:e4:ea:86:ab:2d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
        Validity
            Not Before: Feb  9 17:00:41 2026 GMT
            Not After : Feb 10 17:00:41 2026 GMT
        Subject: CN=359b3d54f646a9c4095abdef5a883662c792bb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:8c:3a:e3:2a:e4:7f:c4:b7:e8:2c:98:f6:
                    36:b1:c5:4b:ef:8a:18:4f:3b:cb:40:60:9e:32:7d:
                    45:e9:fd:e8:d2:08:35:21:ec:8b:ec:27:2e:68:76:
                    2f:a5:1a:25:5a:fc:a8:97:f0:59:21:d0:ee:23:3b:
                    5a:e3:63:a1:ed:3c:2f:55:dd:99:66:5f:c7:4c:ce:
                    5d:e8:cd:5c:54:57:8e:25:d5:e1:7f:ee:d2:bf:8b:
                    75:ce:82:bd:6c:d0:18:2e:c6:bb:3a:f7:b3:8c:4d:
                    00:59:3f:85:87:be:32:b5:e7:5c:77:93:bb:9d:30:
                    75:df:5f:c9:30:4e:0f:ff:ba:97:c1:6f:ad:9f:0c:
                    9f:57:e3:d3:1d:ac:88:23:29:4a:9a:8b:11:25:d9:
                    2e:0f:50:76:77:df:46:79:05:ad:e5:43:48:9a:9e:
                    31:36:e0:e5:f6:9c:5d:0a:51:d6:de:68:72:db:95:
                    34:99:d3:66:2a:b6:c5:89:2e:80:ab:ce:96:6f:46:
                    c7:44:d7:ab:b4:82:a5:89:f2:a1:e8:be:19:8a:7e:
                    d2:a3:79:67:b6:96:ac:ed:99:15:18:b8:d0:6c:8e:
                    7f:0f:9f:07:f0:2f:99:09:d4:3a:f5:5d:cf:55:a7:
                    09:74:14:7e:18:1e:d5:57:f1:db:0c:ea:76:91:0a:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:3D:54:F6:46:A9:C4:09:5A:BD:EF:5A:88:36:62:C7:92:BB:1E
            X509v3 Authority Key Identifier:
                keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:7c:be:8d:35:24:f8:02:55:43:40:c1:57:f5:db:e7:54:
         60:1b:3b:d4:17:51:ae:98:0f:30:9e:1f:db:3e:92:d9:8c:ed:
         8d:bd:a9:a9:39:c8:37:d7:16:49:aa:9d:0b:55:04:e4:92:07:
         59:5c:ce:1c:87:7c:af:69:6c:5e:4c:fb:58:84:9a:6d:26:87:
         b1:65:70:65:fc:5f:b3:c1:32:cc:ac:96:8a:f1:df:ea:03:83:
         ac:27:4b:d0:73:11:73:85:45:50:a6:40:07:af:98:23:0e:c8:
         5c:e8:fd:d9:31:9c:ae:7f:e1:31:88:59:0c:00:23:48:ba:ab:
         fe:8a:e5:23:de:13:c6:a4:04:9c:bb:a3:16:e6:75:35:98:3b:
         ca:f1:8f:86:2f:33:80:7e:b3:37:c4:d1:2a:2e:17:e4:dd:fd:
         18:04:39:89:56:3c:01:8e:20:16:3f:7e:dc:f6:a0:79:c7:a6:
         bc:33:11:34:ed:89:44:08:e8:d0:a6:2c:42:2e:d4:53:9d:ae:
         bc:03:4e:01:0a:4e:46:69:14:fb:c5:d8:e4:a3:c9:cf:e2:07:
         0b:48:f9:10:81:2a:ad:e0:c3:70:17:65:6a:3a:25:18:64:47:
         c4:27:4e:80:e5:45:43:9d:96:1e:96:2f:aa:50:fa:c4:6a:f1:
         51:bf:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:35 2026 by rpki-client