This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File:                     vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier:          qwpuYlh4X+7TNgbz+wjq4qRAJOxHC1C8HCdrh4w/iwE=
Subject key identifier:   B6:93:7F:70:2E:C2:22:AE:05:BE:2F:25:8A:2B:32:89:03:A5:4D:75
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer:       /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial:       019C420F82C77218FA4A3C0CF8A7D6FF1DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 11:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:38 +0000
Files and hashes:         1: bbUvQcBL8PFNw2iTLVczp7F8xLg.roa (hash: roBeIpW3t+PPAB0V8G5Pbdujfwh3PQz2ybcfRM5Trps=)
                          2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: qJZvGkCGC0266Q+IHruePqvV6Xkt5jucP3OkOx7e8Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:82:c7:72:18:fa:4a:3c:0c:f8:a7:d6:ff:1d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
        Validity
            Not Before: Feb  9 11:00:38 2026 GMT
            Not After : Feb 10 11:00:38 2026 GMT
        Subject: CN=b6937f702ec222ae05be2f258a2b328903a54d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:eb:72:d3:74:96:98:b2:0d:e9:68:57:64:
                    53:75:1a:bb:11:69:98:26:fd:f5:ea:a3:35:bd:f4:
                    d1:46:34:af:75:25:46:de:e0:c3:0c:aa:08:08:fe:
                    48:af:76:9b:74:e7:ed:4d:bc:bd:a7:96:46:e9:f7:
                    9e:ae:90:1b:b2:66:c7:8e:c5:9a:eb:51:16:10:03:
                    63:91:f9:04:33:b3:94:a3:e2:8a:80:fa:77:09:ac:
                    50:2b:56:4d:6a:5e:b5:87:ef:2e:22:4f:7b:22:fd:
                    c5:d2:7f:dd:f8:c8:b1:e5:ac:1d:fe:b8:17:71:a9:
                    d4:62:ff:e9:a5:a8:ce:29:5b:59:2c:5a:87:97:cd:
                    2d:1f:34:6b:8b:6e:d4:0f:85:c4:d3:c5:cc:ac:5e:
                    d6:56:6d:a9:35:9e:3c:fb:d5:1b:dc:af:5f:bf:a9:
                    98:95:65:47:d5:23:19:ea:1f:52:47:8b:ba:56:af:
                    31:18:08:c7:12:b2:6a:fd:9a:2e:38:2d:a8:96:7c:
                    a1:8b:8c:fa:ab:4f:55:0f:8a:33:43:e4:dd:5a:63:
                    47:89:c1:97:5d:6f:df:ab:81:8b:84:91:7a:c4:ee:
                    dd:60:42:7b:6b:3d:5d:8b:80:7f:67:10:f0:42:f4:
                    18:87:a6:bd:5e:2b:98:bf:84:4b:b8:63:7f:3b:c2:
                    7e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:93:7F:70:2E:C2:22:AE:05:BE:2F:25:8A:2B:32:89:03:A5:4D:75
            X509v3 Authority Key Identifier:
                keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:64:7b:5a:df:c6:da:b6:ad:ff:46:14:ed:7c:43:a9:eb:13:
         31:6a:de:58:46:a0:cc:17:f7:6f:b0:4d:20:68:4a:fe:9c:52:
         4f:52:5d:bc:4e:cd:9b:89:b0:c9:f3:ec:9d:df:4b:a7:c9:9d:
         51:eb:67:25:e9:15:89:0d:68:0c:58:4b:5a:82:e8:b2:2a:d7:
         88:6c:ae:19:3b:fb:4f:3d:d2:38:1d:a0:ef:41:a2:a7:f6:2c:
         90:a3:87:00:cb:51:8d:57:d2:94:61:05:24:2a:35:5d:0b:49:
         8c:5a:31:5b:ae:a2:72:5a:01:6e:0c:18:77:e8:be:f4:e0:ea:
         13:74:5a:6f:45:33:83:d3:d1:2e:fe:f3:0b:54:a6:81:cc:39:
         96:d2:72:73:fc:2e:2e:c3:50:29:af:ca:f4:11:cf:a3:4a:30:
         57:53:4d:5b:2e:ca:36:4d:17:23:31:f6:9a:09:8d:fe:b1:19:
         36:a1:18:75:d8:99:fa:12:46:94:42:de:a4:29:51:a5:aa:c5:
         50:02:88:39:4a:8e:a8:ef:e3:a3:10:f5:26:7f:25:31:9f:cd:
         ba:8d:8c:f9:b0:24:9c:58:a5:58:aa:f7:61:fd:74:60:ef:a7:
         cb:ea:7e:42:1a:7c:7b:54:e3:7d:4e:3d:81:f0:92:b4:ec:bf:
         d9:4b:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:11 2026 by rpki-client