This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File:                     vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier:          Gx7I2FxPoeP31TF5eKNv7BAq+T6f/t/i8O3eHVnpGVo=
Subject key identifier:   4C:02:35:3B:44:0E:1D:D6:43:1C:46:40:0A:29:AF:D5:B3:AE:69:0C
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer:       /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial:       019C43FE72628FEB6B52544B31547FBE3FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number:          083C
Signing time:             Mon 09 Feb 2026 20:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:14 +0000
Files and hashes:         1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: T+mTG2z1lrK1ZMt/P6cEYtcyZktnGhlReyU4it4yNrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:72:62:8f:eb:6b:52:54:4b:31:54:7f:be:3f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
        Validity
            Not Before: Feb  9 20:01:14 2026 GMT
            Not After : Feb 10 20:01:14 2026 GMT
        Subject: CN=4c02353b440e1dd6431c46400a29afd5b3ae690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:9e:07:87:c2:72:38:89:64:12:12:89:3c:
                    a0:3f:c9:a0:aa:92:34:ae:c3:62:4e:82:86:69:41:
                    ab:0e:a4:a0:60:a0:73:27:67:54:53:4e:9b:b9:28:
                    ce:bd:68:cc:43:47:0a:a8:4e:88:ab:91:10:15:9d:
                    f2:39:84:67:72:a3:8e:3f:c3:40:72:56:20:ab:e0:
                    06:fb:ba:5e:f3:57:c9:81:db:43:f5:41:49:ff:a2:
                    14:36:f6:7f:7f:d6:3e:05:52:1e:f2:9b:99:44:39:
                    6c:74:8f:d6:74:a5:4a:50:8c:5f:17:01:ff:fc:36:
                    2a:ba:9f:a3:a6:e7:a5:cc:f6:01:3f:03:3c:ad:c5:
                    41:39:7b:f1:30:15:1f:d3:f5:e6:2b:02:f8:b0:05:
                    38:32:99:7f:ea:81:6a:bc:b4:32:d8:64:3f:b2:f2:
                    e4:5b:c4:6a:90:21:7d:3a:dc:d7:90:0a:d7:72:89:
                    74:ce:a0:9e:9c:36:a7:f6:3e:36:75:98:55:f6:c8:
                    3b:4d:f0:13:17:c6:2e:aa:53:8d:db:46:ac:e2:5a:
                    92:df:f5:80:16:6d:44:e6:7e:cb:48:b6:49:86:e8:
                    17:c4:78:ad:d7:d2:16:76:e3:02:29:d4:c9:82:39:
                    7d:34:c6:28:e6:fe:48:76:1e:9d:bc:de:86:1f:27:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:35:3B:44:0E:1D:D6:43:1C:46:40:0A:29:AF:D5:B3:AE:69:0C
            X509v3 Authority Key Identifier:
                keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:99:03:48:23:a7:c7:d2:05:14:9a:92:34:38:5e:ed:34:
         89:ef:e8:e8:16:5c:dd:85:56:3b:1d:c3:73:5e:35:1c:b3:d0:
         f3:22:88:12:68:fc:2f:90:29:c3:68:4c:3a:5c:b7:15:fa:72:
         64:ca:49:c5:a6:f0:a5:3b:5f:2a:5c:9e:0e:88:84:46:8c:64:
         71:02:77:e1:44:0d:5f:b5:84:7a:7f:a8:ac:3b:6d:00:c9:59:
         9a:78:7b:75:db:97:e8:85:43:d3:17:70:93:92:0c:4d:06:b7:
         1b:af:da:96:0b:2d:b3:98:14:0f:92:7d:25:65:44:fd:4a:c0:
         eb:1b:f7:7c:4e:3b:88:5e:5e:71:fd:b1:e4:ef:16:f6:c1:e6:
         2b:32:b8:3f:bd:7c:58:32:bd:7b:b8:fa:f7:c5:53:08:7a:67:
         10:75:0c:c1:39:a5:48:24:0b:7a:c7:a1:69:a6:36:72:c2:cc:
         52:c4:15:f1:0c:5d:96:32:ba:dc:9f:1b:e0:81:74:73:7c:c3:
         bb:da:fb:9f:1a:17:eb:39:aa:ed:ac:9d:59:93:f6:1b:b0:c3:
         dc:3d:9a:08:e5:9e:57:2a:99:19:2c:26:13:e4:89:d9:90:4e:
         1a:18:a9:82:bf:f5:d7:a2:2f:6a:4c:e7:e3:82:de:6a:28:d8:
         51:d1:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:21 2026 by rpki-client