This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File:                     VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier:          KXR/i2xvXiDm1j3eZSJfc8Uxz5e7cVEHlp2SkDkQJZg=
Subject key identifier:   6B:31:7E:39:23:CD:67:8E:EB:B0:CF:C3:43:03:96:D1:E8:F9:BB:F6
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer:       /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial:       019C4322391D787A086A1425483A25608C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number:          0C1E
Signing time:             Mon 09 Feb 2026 16:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:42 +0000
Files and hashes:         1: 4tnEl1SMuQMQMWTOXvpKPQW7cfw.roa (hash: kx51H4YiIMkrkv3bmKTZf2aC2hnzQeWD1CDbPstHJs0=)
                          2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: uFEb85DEuXbqc2PkLzHrB6t7VeIgps4uCw/5O8VhSTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:39:1d:78:7a:08:6a:14:25:48:3a:25:60:8c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
        Validity
            Not Before: Feb  9 16:00:42 2026 GMT
            Not After : Feb 10 16:00:42 2026 GMT
        Subject: CN=6b317e3923cd678eebb0cfc3430396d1e8f9bbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:fd:ba:30:f0:40:67:a7:7c:4c:a7:bc:09:
                    27:db:40:58:19:20:53:ae:19:84:44:81:27:62:f8:
                    c5:a7:03:49:55:4b:e5:84:4c:ee:4c:38:a3:af:e8:
                    af:98:23:d6:99:9a:86:aa:58:0d:5d:70:17:0a:85:
                    c7:bb:25:fa:b3:c9:58:20:88:4b:df:ce:95:bb:95:
                    34:8f:b4:f3:85:cb:04:ea:f2:6e:d5:c7:02:7a:c2:
                    94:50:82:2e:ba:23:0d:44:73:97:db:79:15:25:b0:
                    04:c0:4c:1c:d7:e9:35:72:8e:ac:1b:5d:7a:49:dc:
                    86:63:07:77:52:e5:32:fe:e4:80:d9:08:ff:37:ab:
                    1e:5e:93:7e:6f:d6:a7:d9:a0:46:b6:4f:9b:67:87:
                    f7:f6:1c:52:c8:89:3b:17:d5:7e:f3:3a:24:12:e8:
                    b9:63:92:4b:70:45:ec:18:77:1a:fa:de:ca:98:dc:
                    83:e3:a5:56:67:52:60:7e:6d:56:81:f8:0a:9a:47:
                    8c:0a:47:ce:e1:53:b6:cc:79:08:6d:e4:64:4b:53:
                    9b:59:99:09:b8:14:63:a6:4d:6c:c6:a5:13:5b:e2:
                    12:76:9c:96:dd:a2:da:88:02:95:57:17:b7:0f:a7:
                    62:7f:28:8d:f4:7c:ab:f9:e7:49:39:93:aa:4a:e8:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:31:7E:39:23:CD:67:8E:EB:B0:CF:C3:43:03:96:D1:E8:F9:BB:F6
            X509v3 Authority Key Identifier:
                keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:b1:eb:a2:ed:0b:5e:a0:08:21:96:24:b3:d1:4c:28:00:
         0a:39:97:46:dd:1e:d3:77:e5:63:63:fc:be:d2:e5:51:65:12:
         a2:41:7e:84:cb:6d:2b:f1:b4:34:45:21:5d:e8:9c:99:cc:10:
         e0:91:e3:d3:08:61:84:f6:9d:f8:35:67:7a:0c:97:30:cc:62:
         98:78:9c:33:08:ea:ac:69:40:95:c7:0c:66:d9:05:97:50:74:
         81:4e:5c:17:f4:88:d3:f4:2f:76:ea:6e:5e:be:3e:60:ab:3e:
         a2:44:3a:43:a8:49:99:8c:7e:96:d5:2c:65:09:f5:98:79:ec:
         78:77:fc:28:ba:99:78:bb:c8:db:32:64:07:b9:90:ac:16:4f:
         e4:af:fd:f3:15:a8:f4:b4:56:0f:84:1e:80:34:98:0f:79:8c:
         44:6f:9f:19:1f:29:1a:ce:ac:e8:00:0e:55:82:f1:fe:de:47:
         90:f0:92:d6:f0:61:4e:c9:72:58:d4:2f:94:16:a4:82:51:c6:
         f6:c4:a8:1b:d5:90:b0:0a:fb:8e:8e:6f:b4:a9:be:d1:2d:a8:
         99:86:ea:37:22:87:ab:8d:c8:7a:47:f4:6d:3d:05:d2:5d:09:
         69:30:ab:a0:34:4f:4b:fd:9b:1a:d0:4d:07:b2:95:f8:bf:19:
         21:fd:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:14 2026 by rpki-client