This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File:                     vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier:          i+11AL+X7S8Z8pg0vMAd5h31n51w5SzdRvbH+iT1QjI=
Subject key identifier:   27:1F:61:3F:05:B7:26:14:D6:F8:5C:DC:92:AC:14:86:2E:80:76:5C
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       019C42EB68377FCDC7F585CFD21CF5C2DE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 15:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:49 +0000
Files and hashes:         1: j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (hash: TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=)
                          2: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (hash: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=)
                          3: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (hash: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg=)
                          4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: KwXqAE86RX++fXz5lWKjZEi2cnWLA37OJvqQKd+M7dI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:68:37:7f:cd:c7:f5:85:cf:d2:1c:f5:c2:de:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Feb  9 15:00:49 2026 GMT
            Not After : Feb 10 15:00:49 2026 GMT
        Subject: CN=271f613f05b72614d6f85cdc92ac14862e80765c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:81:f5:1f:04:66:5e:88:35:f8:ef:5b:65:
                    71:9d:28:7d:84:7a:cd:88:49:27:47:5f:13:f2:22:
                    6a:c6:e7:a8:33:89:9a:99:4f:37:ab:05:3f:4a:f4:
                    30:9e:b3:72:88:1c:fb:ae:8f:10:ab:07:61:49:ef:
                    c8:a5:36:74:7f:21:92:37:80:91:3b:52:18:fb:75:
                    47:e4:91:3a:57:33:f9:ea:64:73:a1:91:5f:a0:28:
                    b0:6c:4e:cf:98:d2:f1:6d:69:a9:53:ee:12:63:23:
                    5a:dc:da:ef:7c:0d:a9:b6:d0:ec:44:7a:26:53:c4:
                    5a:d1:b8:8e:c6:82:fa:96:04:d9:28:d5:dc:ca:e3:
                    9c:ef:7b:b9:13:93:92:49:52:a2:98:3e:ee:77:b4:
                    68:8b:85:2c:29:39:1f:8a:e2:46:fe:8e:58:1b:c1:
                    41:71:a5:6d:62:97:55:37:36:72:52:ea:d4:8e:61:
                    4b:fa:ed:0a:e6:63:4e:52:04:f9:5a:be:8e:e6:4e:
                    ce:b6:2e:c0:52:8e:d6:e8:f1:2f:f2:2e:ac:c2:e7:
                    4c:4b:ac:02:98:3f:1f:73:6b:b8:5a:ed:84:d7:35:
                    67:d6:a2:e0:1d:d0:42:41:0e:dc:83:f1:2a:7b:bd:
                    73:0e:c4:28:c2:19:f1:91:30:69:98:29:33:62:c2:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:61:3F:05:B7:26:14:D6:F8:5C:DC:92:AC:14:86:2E:80:76:5C
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:24:15:20:96:70:35:30:a1:80:37:3f:46:d2:4d:74:48:
         ad:e6:d7:e6:0b:67:68:9d:ce:72:f4:84:95:ea:d6:f0:f1:b2:
         a4:61:ae:0a:66:0b:ed:06:00:1f:6a:08:a9:d0:2f:dc:b1:e1:
         89:e0:66:8f:86:d3:af:12:48:19:1f:0f:1d:5d:c6:2f:ec:d4:
         85:4c:79:e4:5f:6c:13:84:e0:87:32:cb:87:6e:2a:82:84:77:
         7e:9c:4a:db:d5:48:1e:8c:2f:8b:99:6e:5b:42:4c:eb:92:91:
         da:45:b6:ba:b2:15:85:f7:8d:e2:ac:bc:47:e1:86:b1:4d:15:
         85:f9:16:c6:5e:8b:fd:eb:c1:18:b3:75:d9:2e:56:8d:99:0f:
         ef:7a:af:dd:53:c9:69:66:4c:91:6b:c7:c6:1a:2c:bb:47:8c:
         37:44:2a:e4:7c:a2:d7:8d:8d:de:7a:a4:5c:75:c4:57:77:66:
         9e:4c:f2:4c:e5:77:53:41:cb:fb:23:96:5a:f5:eb:1e:d2:bc:
         a7:ae:bf:a9:92:f5:85:07:d7:a0:58:c1:d7:f1:36:09:77:48:
         a6:f4:fb:dc:a5:a9:00:eb:3c:2b:1f:be:52:d2:38:e1:79:b4:
         51:49:8d:26:b2:b3:c2:2d:45:14:1f:f1:36:ac:1d:1a:b9:4f:
         88:25:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:58:45 2026 by rpki-client