This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
File:                     vlSo6uJa4PaLNFLEaF2UOefRxf0.mft (raw, json)
Hash identifier:          ps86UTWIXHpNeAgPczzGC2uz2VKFo+Te7bmGULxV6Fs=
Subject key identifier:   48:4D:A4:CE:B7:43:15:07:33:F3:71:E7:69:D5:01:D5:69:00:5D:93
Authority key identifier: BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD
Certificate issuer:       /CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd
Certificate serial:       019C435929EDC8DF62EF4723856BB102D522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
Manifest number:          F7
Signing time:             Mon 09 Feb 2026 17:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:42 +0000
Files and hashes:         1: _PItdQNrcNm4PTVCBKFfHD-HVBk.roa (hash: 00+ux3tcX9ZjPok2cc22xATkEP1ejAcZkRKoEuUA304=)
                          2: vlSo6uJa4PaLNFLEaF2UOefRxf0.crl (hash: PgGCNotnTO5FeTPy/GsZuWaGjs67kPXSLpx022DzJrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:29:ed:c8:df:62:ef:47:23:85:6b:b1:02:d5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd
        Validity
            Not Before: Feb  9 17:00:42 2026 GMT
            Not After : Feb 10 17:00:42 2026 GMT
        Subject: CN=484da4ceb743150733f371e769d501d569005d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:c1:c4:86:65:3b:8b:c8:88:74:eb:cf:a0:
                    5f:80:1c:a5:61:95:23:0a:e8:2a:9c:d1:49:2d:2e:
                    4c:01:63:ad:79:7a:12:88:b2:98:a4:0b:fb:ac:85:
                    5f:53:d0:57:5e:0c:8e:08:76:f7:f4:e0:a5:0a:92:
                    81:11:03:56:09:b6:87:e9:88:bc:cf:6b:46:89:f8:
                    55:83:ca:6f:bf:72:da:3c:ee:d7:3b:bc:f1:14:1b:
                    23:c3:5a:30:b9:c5:9e:04:97:b1:a0:f8:10:f3:06:
                    91:f2:5e:df:0a:b3:c8:a6:73:55:33:c5:c3:ea:b2:
                    0d:9a:06:98:06:af:07:21:3b:4a:a4:aa:54:26:59:
                    b5:87:4e:aa:ee:84:f9:b5:70:76:29:80:04:97:d4:
                    42:19:cf:ec:14:94:fe:71:0a:16:ba:20:3a:bc:45:
                    ac:15:6b:04:5c:c9:24:c9:fc:7e:59:64:6b:6b:b9:
                    73:97:e0:25:cc:d8:3d:b7:b5:bf:b1:d5:2c:b7:86:
                    4f:f9:55:64:85:1e:67:eb:bf:d1:d5:6d:4c:31:61:
                    92:bd:da:eb:ae:f8:28:25:d4:37:0f:de:af:27:ff:
                    34:57:e0:fe:ca:86:24:33:e2:00:c6:e2:60:9f:a8:
                    5f:ff:a8:61:c5:96:2c:88:54:be:c2:82:ba:3b:53:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:A4:CE:B7:43:15:07:33:F3:71:E7:69:D5:01:D5:69:00:5D:93
            X509v3 Authority Key Identifier:
                keyid:BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:96:29:29:fa:68:a0:b4:30:53:b5:90:f5:8a:1f:30:c3:f2:
         9c:f6:eb:82:3d:1c:78:40:14:01:84:89:46:16:95:39:2b:25:
         95:e9:36:6e:3c:50:eb:e7:ab:b0:15:3b:37:32:77:90:c0:8f:
         4e:c0:0f:c4:fc:5e:4e:67:9f:65:e4:6a:70:e0:3f:61:7f:e1:
         01:bd:ac:47:26:65:37:32:77:43:85:14:13:e6:4f:08:3e:11:
         86:50:63:c8:e6:36:ed:21:75:3e:5f:7b:48:00:3c:18:0a:f8:
         07:0e:96:77:7e:97:4f:d8:a7:3c:80:99:2a:32:82:76:92:88:
         85:c2:dc:60:b6:0f:a4:c4:e0:92:24:32:a4:5b:bb:1b:7c:0a:
         39:12:bd:b2:7e:ef:15:86:bf:91:f0:53:96:fc:85:c1:d9:5e:
         b3:44:94:22:3e:ee:f2:ae:40:c0:a6:6d:fa:9d:96:53:ff:4f:
         e4:e0:12:ac:4c:e7:e9:b7:00:4e:b5:46:34:dc:fc:fa:09:d6:
         9f:f0:32:52:c9:20:7b:81:eb:79:ff:49:0d:f5:13:c0:e9:49:
         59:be:b2:96:43:6a:63:1e:8c:c5:9a:06:ba:05:98:5b:02:35:
         a1:72:01:b9:41:f6:6a:1c:c7:c2:b0:2c:df:4a:61:4a:6c:e0:
         bc:07:aa:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWSntyN9i70cjhWuxAtUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTRhOGVhZTI1YWUwZjY4YjM0NTJjNDY4NWQ5NDM5ZTdk
MWM1ZmQwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD
Eyg0ODRkYTRjZWI3NDMxNTA3MzNmMzcxZTc2OWQ1MDFkNTY5MDA1ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcLBxIZlO4vIiHTrz6BfgBylYZUj
CugqnNFJLS5MAWOteXoSiLKYpAv7rIVfU9BXXgyOCHb39OClCpKBEQNWCbaH6Yi8
z2tGifhVg8pvv3LaPO7XO7zxFBsjw1owucWeBJexoPgQ8waR8l7fCrPIpnNVM8XD
6rINmgaYBq8HITtKpKpUJlm1h06q7oT5tXB2KYAEl9RCGc/sFJT+cQoWuiA6vEWs
FWsEXMkkyfx+WWRra7lzl+AlzNg9t7W/sdUst4ZP+VVkhR5n67/R1W1MMWGSvdrr
rvgoJdQ3D96vJ/80V+D+yoYkM+IAxuJgn6hf/6hhxZYsiFS+woK6O1NsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhNpM63QxUHM/Nx52nVAdVpAF2TMB8GA1UdIwQY
MBaAFL5UqOriWuD2izRSxGhdlDnn0cX9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYt
MTJiZjkwZTNkZTQ3LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYtMTJiZjkwZTNkZTQ3
LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZYpKfpo
oLQwU7WQ9YofMMPynPbrgj0ceEAUAYSJRhaVOSsllek2bjxQ6+ersBU7NzJ3kMCP
TsAPxPxeTmefZeRqcOA/YX/hAb2sRyZlNzJ3Q4UUE+ZPCD4RhlBjyOY27SF1Pl97
SAA8GAr4Bw6Wd36XT9inPICZKjKCdpKIhcLcYLYPpMTgkiQypFu7G3wKORK9sn7v
FYa/kfBTlvyFwdles0SUIj7u8q5AwKZt+p2WU/9P5OASrEzn6bcATrVGNNz8+gnW
n/AyUskge4Href9JDfUTwOlJWb6ylkNqYx6MxZoGugWYWwI1oXIBuUH2ahzHwrAs
30phSmzgvAeqyA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:28 2026 by rpki-client