This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File:                     vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier:          lURZEwNjaxAlvyXqVTiM8eDmqWa6wOdUYExKsZisNAg=
Subject key identifier:   C6:FF:28:B0:08:88:22:DE:AD:87:76:CD:7E:DF:72:72:F6:A9:0E:D1
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer:       /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial:       019C41D8CE25468B35BBD503008A711EDF40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number:          074F
Signing time:             Mon 09 Feb 2026 10:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:53 +0000
Files and hashes:         1: QVPA9s4tMBXLDCjD1TGmG3LpMQ0.roa (hash: cGmcjeeQyG7f4OMZt/MKW/jCa9uPzECH8kzxaZlj2k4=)
                          2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: MzMDf3mHEeEYhaKHdPa3KsMREcEdZGOT8/J0GVQH38U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:ce:25:46:8b:35:bb:d5:03:00:8a:71:1e:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
        Validity
            Not Before: Feb  9 10:00:53 2026 GMT
            Not After : Feb 10 10:00:53 2026 GMT
        Subject: CN=c6ff28b0088822dead8776cd7edf7272f6a90ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:38:3b:85:14:38:51:8a:b9:e9:67:40:66:
                    e3:dc:22:11:51:36:7d:89:6c:87:19:88:f0:9f:41:
                    fd:89:79:9d:0b:56:77:04:9c:5a:d3:c6:aa:b6:22:
                    c4:6f:0d:b0:2e:91:a4:1c:4d:49:8c:35:0d:10:58:
                    1d:d4:73:dd:c4:5e:c6:40:d8:13:53:61:8f:ee:94:
                    5a:e6:e7:af:24:59:f5:c0:c3:52:75:b2:71:45:44:
                    fd:3e:a7:5b:27:94:cd:37:3c:51:0c:42:c6:f7:5f:
                    fc:14:79:3e:d7:e4:1e:80:92:b3:2c:1e:e5:13:9c:
                    1d:90:c5:6f:17:ae:d7:5e:6d:d2:d9:6b:43:40:4a:
                    d1:59:4e:bf:59:6b:a4:4d:f3:7b:c2:5c:1d:1d:50:
                    58:81:2a:d7:3d:a3:da:e2:9c:31:d3:3b:dc:68:42:
                    36:ed:62:f8:fa:d7:71:3c:e7:28:c6:7f:aa:b1:b7:
                    ff:c4:4d:5a:81:3f:5c:ed:1a:fd:b0:3c:a0:b0:0e:
                    5f:c8:57:e8:31:66:39:19:25:b3:36:66:19:4b:3a:
                    a6:62:1e:68:b6:a5:14:51:64:ca:72:f2:b4:76:ba:
                    8b:a0:54:d8:b2:80:53:cf:92:7c:54:56:8c:1a:f7:
                    12:3f:10:c0:e4:f1:89:a1:58:5d:76:37:a8:97:45:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FF:28:B0:08:88:22:DE:AD:87:76:CD:7E:DF:72:72:F6:A9:0E:D1
            X509v3 Authority Key Identifier:
                keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:83:20:cd:d3:91:c0:ec:0f:d1:4d:22:f3:e9:28:11:a7:
         6f:5d:5d:6c:58:68:b8:51:c3:44:f5:12:60:c2:0c:2b:a8:51:
         46:82:54:b7:2f:b1:14:87:36:88:45:fe:6f:b3:09:59:f0:9f:
         8a:ce:b0:26:6b:3a:15:b5:f8:69:d9:c1:d1:4f:c5:82:5b:c8:
         b9:a5:5c:ba:52:6e:bd:31:05:2c:2f:bb:0f:7a:33:df:8b:6a:
         60:d9:6f:46:99:ea:ec:ae:be:ae:ca:b0:af:d3:1c:d4:3e:76:
         e7:dd:98:76:2d:32:6d:00:a3:68:e8:6f:ed:0b:67:6a:c6:b8:
         e8:d9:a4:43:1b:ad:64:95:5b:8d:af:9b:ae:ae:7d:6e:fd:3c:
         8d:79:0e:66:c2:e3:f8:b1:22:b6:52:20:3d:27:d6:71:93:0d:
         9b:07:d8:ed:0a:d5:74:ea:3c:67:86:d7:5e:17:a2:c0:68:81:
         b8:e7:14:f2:bf:66:3b:8c:d3:4f:2e:48:f3:a6:4d:b3:b3:24:
         b9:3b:e9:bc:3c:80:a3:ce:68:f5:61:1c:8c:9b:6f:b8:7b:26:
         10:b8:3b:01:25:ec:bb:c6:70:99:9a:c9:18:b9:bb:72:05:8f:
         89:72:00:ea:14:14:fd:70:ea:1f:e0:82:eb:dd:11:ff:49:b7:
         d5:75:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:21 2026 by rpki-client