This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File:                     vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier:          Cyg0FzgmYwAIUaNq/zNA33YXOE1Keuh3WdJpnGknwVk=
Subject key identifier:   22:DA:E1:2C:99:DD:C1:C2:DC:4B:D5:6A:28:B7:38:8A:F3:1B:83:7A
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer:       /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial:       019C4390BFA2889F246EE4E65C72E03C6D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number:          0647
Signing time:             Mon 09 Feb 2026 18:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:25 +0000
Files and hashes:         1: oj97Ng3JgLvsyAIw1yTVTtpM69s.roa (hash: vIQENoGSkGXr7OaQKpDZcQK7eabU4UndqxZJRNZu8JU=)
                          2: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
                          3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: XGjOyw0AvgB85YOR/ZxfY+2YMnsvoHis2E80obSHrhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:bf:a2:88:9f:24:6e:e4:e6:5c:72:e0:3c:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
        Validity
            Not Before: Feb  9 18:01:25 2026 GMT
            Not After : Feb 10 18:01:25 2026 GMT
        Subject: CN=22dae12c99ddc1c2dc4bd56a28b7388af31b837a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:e3:75:ed:de:fd:38:a0:48:43:16:f6:5d:
                    62:e3:62:73:17:fd:8a:13:ab:7a:97:8c:a1:66:71:
                    5a:76:94:a6:33:2c:32:b7:6a:6a:50:0d:26:2e:c8:
                    9f:bd:c4:3c:89:ad:83:81:48:bc:0c:c6:3b:88:72:
                    b5:b6:56:dd:d1:ed:6d:68:cd:bb:6b:ee:71:db:1b:
                    a6:9e:9b:07:fe:41:08:ad:c1:3d:bc:f7:b7:79:92:
                    0d:7b:37:cb:ad:dd:e9:3e:10:b0:89:e3:74:37:b1:
                    42:5e:12:4a:b0:e6:9c:4e:30:78:ff:04:f5:2d:fa:
                    59:a6:c0:1a:42:48:27:72:b4:87:c9:f1:dd:50:93:
                    7c:8f:2d:6a:74:7a:eb:cc:d3:07:f4:bc:d7:fc:71:
                    a0:5d:ee:c9:e2:4b:78:2f:74:ca:74:f5:65:24:cf:
                    8c:03:a3:02:91:7d:b2:d7:3f:af:c3:c7:01:69:aa:
                    bf:f5:8b:f6:f6:e9:22:0e:f0:8c:88:d6:0b:7a:d2:
                    88:1d:10:db:c4:65:df:3d:44:d9:35:8f:49:e8:ec:
                    98:41:72:c0:a4:d6:b5:fb:64:6a:cb:15:85:80:93:
                    33:9c:4d:15:43:be:d4:4c:99:32:0d:fc:ab:2d:87:
                    d8:9f:65:2a:4e:a3:7d:60:92:28:a1:80:5f:22:4d:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:E1:2C:99:DD:C1:C2:DC:4B:D5:6A:28:B7:38:8A:F3:1B:83:7A
            X509v3 Authority Key Identifier:
                keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:70:06:0b:5f:d0:6f:74:aa:e3:f0:5b:8d:89:29:a3:53:
         6f:c7:e5:4f:02:71:73:1e:7e:98:56:ea:b9:81:42:46:c8:78:
         d2:ca:33:f3:05:a1:ed:0b:aa:72:c5:42:e7:f6:3b:1e:0b:14:
         dc:ee:f4:b4:65:6b:cb:5c:52:ed:eb:72:b2:e9:fb:bc:43:af:
         b3:87:6b:2c:ef:24:c0:e4:b8:77:59:8e:9b:85:f7:92:b5:74:
         ba:6a:d6:d9:52:4f:23:ef:b4:38:da:67:e5:4a:b2:33:c2:b8:
         17:c6:b7:35:6a:fc:50:9a:00:e1:93:76:5c:05:02:6c:91:e0:
         29:0b:d0:1c:b5:bc:af:88:34:a2:f8:de:1a:2a:71:f7:40:43:
         e4:da:53:da:02:f8:2f:5b:34:b4:48:f0:ba:9e:e5:76:2b:26:
         c6:e5:b4:d4:73:10:75:d3:85:18:1f:39:ac:7b:aa:7b:82:9b:
         93:1f:79:35:21:ba:27:e5:00:74:bc:05:f7:e2:43:e2:75:a3:
         ff:15:d9:61:49:aa:58:6d:98:42:00:40:d3:e5:1c:c9:25:46:
         0a:ce:7c:18:8f:83:42:b9:a1:7b:35:ca:d6:e0:fe:11:06:9d:
         34:68:a7:08:09:0a:b4:0e:59:09:2f:42:ef:13:0f:18:3d:e8:
         e1:e1:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:23 2026 by rpki-client