This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          kwQsuM3PvawV1sejWcFHlvbJ2X4jw6UcAI7b5L8Ul5Q=
Subject key identifier:   24:14:15:83:40:A3:14:AD:B5:3B:B3:AB:5C:1C:A2:9B:E3:FA:92:F0
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       019C3008FC1A344B10A761C119DA817C206D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          0CFD
Signing time:             Thu 05 Feb 2026 23:00:21 +0000
Manifest this update:     Thu 05 Feb 2026 23:00:21 +0000
Manifest next update:     Fri 06 Feb 2026 23:00:21 +0000
Files and hashes:         1: EgvxwX18F988dQqkK9XKl7B803U.roa (hash: LbApliZ16bFCZoVrhnEezKbFE+rVBexY2nPAOQAYD/U=)
                          2: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: L8sNMPjJTTKunJ7scsajSvrIpM7/18+tKVHlL3b4L3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 21:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:30:08:fc:1a:34:4b:10:a7:61:c1:19:da:81:7c:20:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: Feb  5 23:00:21 2026 GMT
            Not After : Feb  6 23:00:21 2026 GMT
        Subject: CN=2414158340a314adb53bb3ab5c1ca29be3fa92f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:22:62:68:e9:c9:e5:0d:33:b6:61:0b:4b:
                    74:25:fc:10:c8:c9:f7:ba:d7:09:99:55:38:db:d8:
                    3d:ed:1b:7b:99:43:e0:6c:3e:3f:36:d0:cd:a4:89:
                    f2:63:10:81:b3:22:d0:4e:68:27:a0:44:ad:d0:96:
                    e3:ab:0b:7a:0a:6a:dc:9b:a2:36:31:71:e2:21:76:
                    fe:c9:36:7d:f7:4d:e3:ce:04:25:0e:42:86:76:bf:
                    d5:af:e4:5b:89:c2:cd:75:fb:39:3e:84:fd:90:2d:
                    83:b2:e9:81:86:68:97:7e:0f:af:00:b4:da:e9:7c:
                    95:d1:9e:a0:63:13:60:c8:a6:72:c6:33:e3:c7:76:
                    f9:5f:51:5c:e1:67:75:49:63:b6:74:7b:57:68:3a:
                    1a:6d:e2:f8:12:e7:92:78:80:14:70:36:d5:33:27:
                    a5:0e:03:b3:c7:30:8c:ab:da:3f:ac:7d:7d:61:66:
                    a8:34:55:76:1c:34:79:6c:ed:1d:45:b5:56:d1:54:
                    fb:44:3c:4f:30:09:bf:a2:56:50:ee:7f:69:c2:5c:
                    99:e8:dc:8c:84:d1:20:4d:0c:25:3d:46:99:d1:52:
                    94:86:03:f5:96:17:da:93:4a:1d:f0:95:b0:61:4b:
                    0d:f3:85:68:8f:d2:2f:55:bc:63:02:72:2a:f0:cc:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:15:83:40:A3:14:AD:B5:3B:B3:AB:5C:1C:A2:9B:E3:FA:92:F0
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:03:e3:6b:f3:65:1b:3b:28:7a:48:09:d2:cb:52:26:9a:
         d0:55:b7:c3:f0:08:20:b3:6a:3f:bd:57:06:0e:e5:6f:15:07:
         66:bc:89:e3:7b:36:6e:0e:bc:1f:7a:cd:93:ae:2f:af:ed:d4:
         65:12:20:fe:3f:a3:80:9f:67:c6:00:f2:e2:8c:1e:08:ad:83:
         34:57:1e:a8:20:de:b0:1e:b6:68:4f:9c:01:22:f8:b2:c8:fb:
         b5:ac:a7:7a:68:a2:c3:64:8f:cf:aa:de:f9:17:31:0c:82:cf:
         2c:88:14:1c:54:69:45:26:f5:80:a4:72:50:fd:33:e3:de:53:
         4c:56:b0:b7:b2:ca:e8:69:7e:20:27:8f:f4:b7:29:87:a8:e0:
         4a:45:3c:c5:9a:52:b8:44:0f:76:f8:23:c7:bc:0a:b1:eb:42:
         2a:49:08:a4:42:c9:c4:a3:23:e6:f0:8c:f2:61:ec:91:26:19:
         22:cb:a7:d6:bf:82:ef:4e:26:ec:45:3e:35:1c:45:30:a2:c4:
         ed:a0:68:78:dc:f9:78:83:f3:7e:fb:07:93:0f:80:cc:48:80:
         0e:5e:96:ad:49:45:f0:ed:d6:f6:4b:9a:99:75:ee:93:d0:44:
         f9:6c:6d:a0:34:d7:f4:5d:db:7c:8f:e6:b1:c5:58:15:9d:a1:
         1a:4d:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 03:16:43 2026 by rpki-client