This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File:                     vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier:          TGGkcH6l+xWtrxjh06EBwFHoz70z8xD/ov1yn+fRiPQ=
Subject key identifier:   32:7A:40:1E:95:F1:53:AE:D0:36:21:36:7A:A4:C0:39:55:B8:FF:AF
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer:       /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial:       019C420FAF09EF7F9287E2FEB2578DEE4CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number:          0A5B
Signing time:             Mon 09 Feb 2026 11:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:49 +0000
Files and hashes:         1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
                          2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
                          3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
                          4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: G/BKAUfI2EzBntqRu9vZ2g78HkikWDltXHXg8opD0eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:af:09:ef:7f:92:87:e2:fe:b2:57:8d:ee:4c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
        Validity
            Not Before: Feb  9 11:00:49 2026 GMT
            Not After : Feb 10 11:00:49 2026 GMT
        Subject: CN=327a401e95f153aed03621367aa4c03955b8ffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:85:7f:8e:d9:b6:b2:ae:0c:77:ad:cd:e0:
                    c8:b3:ea:55:e8:28:44:b7:a4:19:0c:c1:a7:5b:69:
                    ed:d9:dc:6c:57:0c:10:08:e7:d8:5d:b6:a2:9a:ef:
                    1a:27:e7:ab:f3:fb:f4:56:3b:43:5c:cf:12:6b:a9:
                    23:ff:ea:fc:36:67:97:75:76:0c:8c:4e:21:d4:98:
                    5b:c4:27:30:6a:e5:cc:59:b1:94:e1:0b:f1:5f:14:
                    d4:6f:98:0f:78:d7:6d:02:2b:aa:e1:47:25:6f:f5:
                    8b:1a:a8:c1:35:bc:13:d6:06:16:9f:34:83:b9:83:
                    d5:d0:d9:e5:90:f2:b8:c9:b7:14:6d:fd:5c:16:04:
                    0b:86:c4:1c:4a:30:6b:02:ae:30:16:9e:e2:6c:a5:
                    2d:7a:44:fc:d3:7c:c0:07:ea:29:35:42:f9:1a:a9:
                    9e:c8:81:56:6f:d6:28:0a:3f:db:46:4c:5a:ea:f7:
                    bd:a4:9e:94:07:e7:00:a2:57:d8:26:8d:3e:25:8f:
                    a9:ea:2f:27:c3:86:31:d1:89:d0:f5:ce:57:23:b4:
                    6a:78:cf:0f:fa:a0:00:a2:b7:c5:c5:f5:fe:fa:eb:
                    af:b7:13:ee:66:76:05:c2:39:05:fc:a5:95:e7:60:
                    bd:0c:74:82:5a:75:0b:a1:34:ef:4e:bf:6a:a4:cf:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:40:1E:95:F1:53:AE:D0:36:21:36:7A:A4:C0:39:55:B8:FF:AF
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:eb:19:c7:d3:9e:ce:2f:f3:be:0b:68:68:28:dc:77:00:8d:
         5e:e1:1f:43:e6:08:39:f7:84:08:3e:71:74:e1:c8:84:6c:a9:
         4a:9f:26:84:e8:74:26:f1:aa:59:bd:b4:6e:b6:81:42:66:09:
         4e:13:c1:61:78:7a:2c:3b:1a:05:d4:3b:3b:15:d7:5b:89:64:
         27:6c:a9:6e:66:2a:7b:b3:b9:9e:d4:38:cf:45:ca:e9:16:0f:
         af:db:9a:e4:ca:88:8d:98:48:e2:f5:90:5c:b6:07:66:98:39:
         41:61:53:b7:22:8c:cc:1f:70:7a:ac:8a:9e:34:c7:41:f8:f7:
         db:4e:0d:4c:fa:44:31:b6:29:4b:73:8c:cd:09:10:41:c1:23:
         ac:a9:82:19:a5:12:ac:e3:eb:28:62:2e:a7:e0:c2:c6:1e:f8:
         3b:83:8d:7e:d3:08:53:0a:b8:b2:cc:3f:11:a5:5e:a0:b2:c8:
         58:25:26:b2:e5:61:6f:5a:3f:09:bb:69:94:4a:b0:ab:8e:c3:
         0a:df:0a:35:fd:b4:6e:9d:18:d2:4a:63:75:aa:b7:82:bb:aa:
         7b:94:ad:3c:47:a1:e7:26:c3:3a:9d:4f:a5:06:36:f4:5e:02:
         8b:38:70:90:f6:22:61:1b:de:a5:5f:11:3f:00:74:f3:1d:a2:
         23:97:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:11 2026 by rpki-client