This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
File:                     vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json)
Hash identifier:          6DZ/KQWAHJ8yg2PKJDStpz+4tMC0i3SqM19Yi0kZAbI=
Subject key identifier:   4F:D2:21:6C:62:D2:61:CA:02:BE:02:1C:A5:22:4F:38:03:00:E8:BE
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Certificate issuer:       /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial:       019C43903809FAB476F914D205D67270AF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:50 +0000
Files and hashes:         1: D-LoIPh4w6ZRPr6EB3oORu8b_qM.roa (hash: IJEKqU/hmkuGGlwqmZo6DWM0XWvE4LTwDePizqu7MS0=)
                          2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: WDhpySS7KUQNdX1UtsW5Y/gVGi5SAaBYQuC20y7VJgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:38:09:fa:b4:76:f9:14:d2:05:d6:72:70:af:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be370733b8db614daa760a002c24048028300e2d
        Validity
            Not Before: Feb  9 18:00:50 2026 GMT
            Not After : Feb 10 18:00:50 2026 GMT
        Subject: CN=4fd2216c62d261ca02be021ca5224f380300e8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:d0:70:62:8d:fc:98:79:5d:54:5e:ed:2d:
                    3b:71:bf:75:5e:2e:9e:39:06:b2:25:95:41:c2:b1:
                    b1:e8:31:55:d8:f2:62:42:18:6d:fd:b3:cf:bf:99:
                    57:7a:04:85:b1:6e:a5:98:cb:4f:a5:3f:ba:71:b3:
                    9a:c2:7a:76:86:d5:e3:77:ba:8c:53:cd:67:69:e5:
                    62:b4:03:84:7c:dc:34:45:1d:c3:cc:ba:7b:90:13:
                    85:f9:e7:40:cb:0d:92:10:70:cc:c3:6a:8e:ea:1c:
                    11:d9:76:58:0d:e6:ba:52:bc:fe:df:97:e7:11:8b:
                    8a:24:55:36:90:00:e2:23:65:da:28:44:0e:5b:05:
                    b2:c4:78:50:d8:ec:60:fb:be:90:3e:d6:b5:02:93:
                    4d:99:e9:22:53:7d:38:84:db:46:69:d8:24:1b:62:
                    6f:e9:21:cd:cd:b2:52:01:c3:d8:f3:ec:61:6a:83:
                    a2:04:63:76:08:a6:e6:91:69:53:43:c7:3d:56:fb:
                    28:c5:b3:c7:6e:25:de:a3:d6:39:76:d5:07:6a:d1:
                    ad:8d:e5:a2:0e:0a:04:f0:bb:5d:a6:24:be:4b:8f:
                    83:38:d5:80:87:bc:aa:07:30:74:65:8b:66:4c:36:
                    68:82:b5:3c:de:45:0f:2f:00:11:06:5e:08:35:ea:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:21:6C:62:D2:61:CA:02:BE:02:1C:A5:22:4F:38:03:00:E8:BE
            X509v3 Authority Key Identifier:
                keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:63:0f:a3:f9:e5:fd:cf:4c:75:08:10:d7:5b:db:73:0e:f9:
         b5:8f:13:28:19:8e:00:be:aa:99:21:41:6f:5f:a7:db:66:d9:
         47:1d:72:33:7a:b1:fb:7d:63:1b:35:89:b2:cd:7b:5d:ad:43:
         57:b9:67:06:6d:0f:13:78:1f:59:47:f8:bb:10:f9:92:74:69:
         c9:86:be:c9:db:73:96:74:6b:cc:29:06:09:ca:15:e0:de:62:
         a0:96:9f:1e:13:ce:5a:f7:11:37:fa:25:6f:ad:b1:1f:c4:7b:
         bf:a7:d5:20:60:77:a4:e3:c3:c9:0c:16:f4:d3:2d:54:5f:5e:
         c9:74:67:a6:df:49:9a:6b:ff:31:58:60:b1:07:6d:08:1b:5f:
         d4:1b:12:c8:ee:eb:16:ab:25:a0:8b:1e:f4:d8:a0:02:cc:ea:
         36:43:43:6c:b2:8a:66:20:c5:bf:5b:7d:3f:10:c0:4c:34:ed:
         0c:35:9b:d8:e9:f1:ea:ef:fd:36:77:0d:52:97:dc:9d:2e:74:
         14:7d:42:71:bb:0e:18:45:77:5d:c0:14:5c:29:99:d5:c1:48:
         af:8e:15:ba:fb:ac:13:c5:0c:89:21:a0:e0:33:91:37:a1:75:
         22:d9:71:cc:3d:ad:d8:7b:d1:42:d4:bf:eb:2f:7d:e5:96:93:
         3a:8c:b8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:44 2026 by rpki-client