This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File:                     vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier:          NiTxp+MmmfZrRZ7DZY4Dev8QG7uLt+VkDSD2vKIn5LU=
Subject key identifier:   3B:71:47:CF:C5:F8:C7:AA:8F:F6:98:A1:7B:F9:1E:98:D4:D8:CF:3B
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer:       /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial:       019C43909132D39C06EEB039CFD7DA9AD895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number:          15ED
Signing time:             Mon 09 Feb 2026 18:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:13 +0000
Files and hashes:         1: smH8IDaU7mi6eo7ubYIhaO6o_IM.roa (hash: zUmgtKSpqk5n2lEgS4LMSnmGpaSRvnHOfoCAI5v+7/g=)
                          2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: Si9Tyh220avpnrMc6nD7ZmtM/FtQfkNuApjKN5Hjf54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:91:32:d3:9c:06:ee:b0:39:cf:d7:da:9a:d8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
        Validity
            Not Before: Feb  9 18:01:13 2026 GMT
            Not After : Feb 10 18:01:13 2026 GMT
        Subject: CN=3b7147cfc5f8c7aa8ff698a17bf91e98d4d8cf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:32:e4:aa:10:e9:e8:94:51:7d:04:48:1f:
                    84:fd:9c:47:4a:9a:39:f7:99:d8:28:cc:7e:8c:b8:
                    d8:29:53:8c:e0:6f:a1:9f:9b:48:9d:8d:4e:27:e7:
                    52:b9:29:10:36:6c:ee:5b:cb:f1:bd:fd:4d:e2:22:
                    8c:45:28:2d:c5:e5:ef:71:e3:7d:41:b8:83:6a:28:
                    a2:e4:b2:49:62:5c:d7:f7:f3:0e:28:e7:03:e2:3b:
                    e2:1f:6d:58:29:80:08:02:89:66:c6:c8:92:c4:ab:
                    9c:82:0d:fb:c3:5b:61:a2:8c:35:b0:fc:f0:77:81:
                    f5:18:9b:24:f2:3c:18:2e:70:0f:4d:5d:83:bf:de:
                    2f:a6:71:11:73:cf:21:89:09:f1:f9:26:a2:43:98:
                    fe:31:c0:51:e0:95:34:55:5f:da:68:0f:2f:42:c8:
                    78:14:32:45:a2:5b:0c:51:a2:1f:e8:cd:4d:13:b7:
                    83:84:7a:ee:e6:72:89:90:53:39:22:00:2c:76:b9:
                    3d:e7:09:e7:67:29:96:6e:cc:7c:9d:a8:aa:67:a9:
                    11:e2:a0:0b:66:b2:88:3d:dd:4a:62:69:65:08:72:
                    be:ae:9d:e2:1d:16:8c:6d:0b:2a:1d:f7:b7:e5:d6:
                    af:28:c2:58:76:ff:0d:3b:aa:9d:89:2c:de:13:1e:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:71:47:CF:C5:F8:C7:AA:8F:F6:98:A1:7B:F9:1E:98:D4:D8:CF:3B
            X509v3 Authority Key Identifier:
                keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e0:9b:b0:5c:af:35:45:5d:33:00:bc:c4:dd:d6:83:55:d1:
         14:00:a9:1f:d2:e9:4b:89:38:b1:c7:7e:ac:37:63:d2:2c:39:
         0d:54:1d:fe:30:fb:7b:bd:05:d4:90:9c:e8:21:c3:25:2e:35:
         a3:22:bc:c3:26:c9:6b:ad:3c:b6:38:8d:fe:39:21:3e:f0:4b:
         90:44:96:17:33:7b:fa:d6:0a:a2:97:93:e3:31:a3:2f:1c:bd:
         e1:2a:46:f0:7e:41:e7:15:b4:5b:99:c7:6d:c9:c2:79:e1:ef:
         d8:e0:c8:63:a6:fa:04:12:93:be:39:2e:c6:ea:82:0c:17:13:
         6d:7d:76:57:d1:05:45:25:32:06:ee:93:24:6e:24:ff:72:49:
         39:3c:f1:b8:46:96:e7:32:a2:35:2f:4a:60:76:8e:25:40:87:
         d1:92:08:0c:30:5a:88:88:15:73:26:d1:ba:5a:c5:45:0b:a6:
         4d:01:ac:23:32:e3:9a:6b:96:61:29:a5:40:1c:63:16:d3:7f:
         a7:90:9e:a5:59:92:1a:52:f1:31:58:93:3a:0f:59:97:d4:9c:
         b8:c2:fd:f8:fa:c1:3b:21:43:39:50:42:12:a3:2e:35:6c:ba:
         6c:38:73:c7:e3:43:ed:58:42:65:ab:cb:49:06:15:46:40:5b:
         e8:8c:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:20 2026 by rpki-client