This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File:                     vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier:          UUL2y5jTBEYnP1Kcv19JbJ64hEDokDtab6lRxUk8CNg=
Subject key identifier:   5C:4A:87:C9:9C:46:07:2A:C3:AA:72:27:27:79:72:CA:A0:F6:F9:AD
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer:       /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial:       019C42B44A98F2610C5D4D228DAB43C1B54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number:          1352
Signing time:             Mon 09 Feb 2026 14:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:37 +0000
Files and hashes:         1: hYLp43OSPXsL4JxLswilkc5UtXM.roa (hash: rqjG85ikI7yDLzBtgViqukIp7fUAhh1OKd6HYF2+ojM=)
                          2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: cme2lKkQ+hXAHhIungMhINgxaNQCTmEKabMdVlwkvmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:4a:98:f2:61:0c:5d:4d:22:8d:ab:43:c1:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
        Validity
            Not Before: Feb  9 14:00:37 2026 GMT
            Not After : Feb 10 14:00:37 2026 GMT
        Subject: CN=5c4a87c99c46072ac3aa7227277972caa0f6f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:5c:0a:54:bf:d0:b0:cc:7a:d7:7e:9e:55:
                    34:1b:cb:45:e1:e5:89:b0:2c:15:bb:45:c8:f3:16:
                    8b:42:29:9d:4b:7c:48:10:54:5c:e0:d0:c8:30:d4:
                    0c:19:b9:4a:38:1c:52:86:e3:57:a0:a9:03:ba:a6:
                    7d:b5:d3:1d:82:a4:a0:5e:d9:f2:17:dd:b9:fd:29:
                    3d:04:1c:39:10:7b:37:1a:db:45:3a:9d:53:d9:bc:
                    ca:f2:16:8b:3a:77:27:30:ec:54:11:9b:ed:a7:7e:
                    58:a8:c3:0b:1c:13:47:45:2b:3d:84:ba:15:fb:b3:
                    58:41:12:b1:0f:03:9b:45:2a:2e:b6:51:f7:0c:2a:
                    21:76:cf:f3:91:8e:fa:6e:5c:8e:88:e1:d3:44:45:
                    94:c6:af:1e:47:6b:39:2c:dc:d8:00:ae:67:58:85:
                    e8:d1:23:66:3b:2c:a5:ab:bc:fa:ea:91:04:43:ca:
                    26:60:86:c9:ef:5f:93:41:e1:35:d4:3d:02:9b:cd:
                    97:53:e0:b3:dd:ab:fd:a9:41:7e:f2:94:ce:10:2f:
                    dd:89:8e:10:60:84:77:6a:44:1c:15:e3:8a:8c:9c:
                    bc:a0:41:2e:d0:0f:fb:ed:0a:2e:45:4e:c0:f0:96:
                    6b:bf:2b:d4:51:6e:32:e0:d8:76:3d:08:54:46:cf:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:87:C9:9C:46:07:2A:C3:AA:72:27:27:79:72:CA:A0:F6:F9:AD
            X509v3 Authority Key Identifier:
                keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:26:41:4f:fd:b0:7b:41:ad:cd:ba:82:f6:ca:4c:2c:ea:
         99:e1:8d:1c:57:d9:67:a3:35:31:8f:be:7a:b1:53:d4:54:35:
         f6:90:57:2f:19:a8:e7:af:e0:07:d5:85:84:e7:d5:5d:00:8b:
         50:9a:aa:5f:e7:d6:2a:29:17:7c:53:1e:82:31:97:b6:f7:66:
         c5:86:00:a2:14:0b:62:e4:b0:af:a7:65:c8:d9:f1:31:0e:5e:
         01:af:93:32:83:42:d3:d6:25:17:a4:3f:03:1a:06:4c:53:ba:
         7d:ed:87:c8:f6:ba:65:51:5c:3a:cd:a4:16:6a:f2:f6:af:35:
         f7:cf:45:55:a1:be:a9:09:fa:6d:ae:d4:a6:60:17:2b:5f:32:
         d5:94:08:a5:6c:e6:08:cb:6c:35:ba:f1:5f:a4:b5:3e:0b:cf:
         22:c8:b1:d9:8d:d2:d9:59:b0:ca:fa:90:e1:9c:79:ec:56:db:
         34:5a:87:93:7e:43:70:e9:f1:fb:d9:2c:68:82:b5:07:b1:df:
         ca:7f:3b:22:f5:b5:06:e6:4b:d9:a5:71:a2:29:da:3e:43:fc:
         58:f9:12:a7:d0:8b:7a:08:d6:6f:ea:90:74:75:90:3f:07:6f:
         5d:f5:d6:22:4f:0d:da:04:bb:2a:aa:ee:3d:e0:c3:79:f0:27:
         86:3e:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:12 2026 by rpki-client