This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File:                     ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier:          sssuMdZD9Ns/ev89eLIVBaFJIxeepWgDghtYoK3AzR0=
Subject key identifier:   BB:B0:6A:22:CF:C0:9D:EA:E7:72:4F:75:D0:58:93:ED:50:25:EE:F9
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer:       /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial:       019C42465D7992D22CF688B2FBB1D2711829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number:          1298
Signing time:             Mon 09 Feb 2026 12:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:33 +0000
Files and hashes:         1: dlqROMdfCCOUh5UHb5fE0VDhtw4.roa (hash: HsyhNJLABKhY0BJRKl4WOTqYOZ/p/2IS1Tc+avRiuXo=)
                          2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: KHIgZ6FLZrRyDsxjevEJI+zOFVx04RHe1Jo9cb1jOro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:5d:79:92:d2:2c:f6:88:b2:fb:b1:d2:71:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
        Validity
            Not Before: Feb  9 12:00:33 2026 GMT
            Not After : Feb 10 12:00:33 2026 GMT
        Subject: CN=bbb06a22cfc09deae7724f75d05893ed5025eef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:44:c6:e0:f8:e4:d9:e0:03:f2:c9:44:a9:
                    99:7c:75:79:d7:89:a9:7f:a1:69:47:f1:53:19:f3:
                    9b:54:e9:1f:f3:6e:b3:11:f9:13:23:26:4e:46:8b:
                    39:32:3e:c8:10:0c:07:ef:cf:e7:d1:36:a4:c9:73:
                    29:d1:22:84:59:3c:1c:70:e1:53:08:86:df:25:34:
                    da:bd:5c:31:b5:4b:c9:05:83:33:6f:63:02:b9:47:
                    8e:7a:b0:3f:c2:11:ec:7f:74:df:38:89:91:07:70:
                    e9:c0:cd:ce:2c:ba:7d:ce:f2:aa:80:93:f6:e4:ff:
                    3d:cd:4c:c9:18:9f:8b:25:8c:c6:e1:01:9d:5c:28:
                    08:cb:b3:62:46:47:52:03:79:87:16:b4:cb:d5:b5:
                    46:b7:64:70:2d:af:1e:6f:be:80:fb:45:a3:31:e7:
                    34:f6:3d:4c:8d:b1:58:63:c2:ae:23:02:9d:bb:5b:
                    65:0c:38:0f:44:ab:b1:24:63:dd:ba:77:a4:64:be:
                    92:2a:0f:40:66:bf:14:12:27:56:79:4a:45:73:7e:
                    e3:83:3d:c7:48:92:7b:69:86:8f:d4:00:1b:33:00:
                    88:11:bb:ee:70:ae:19:da:94:8a:f8:12:96:1a:c6:
                    8a:ad:be:fc:15:92:cb:c9:dd:0c:49:7a:46:b1:60:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:6A:22:CF:C0:9D:EA:E7:72:4F:75:D0:58:93:ED:50:25:EE:F9
            X509v3 Authority Key Identifier:
                keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:32:69:15:f6:89:2e:19:2a:ef:40:59:c7:eb:0b:61:f6:60:
         cb:4e:d0:e8:ba:5f:da:43:cd:1b:e9:85:58:19:e2:14:0e:2f:
         37:d1:5d:b6:44:4a:b1:59:9e:bd:eb:d3:c7:27:30:0f:47:d6:
         b5:3b:dd:fe:79:4a:de:3b:11:f1:58:40:7d:0a:9a:9b:aa:a4:
         67:dc:b2:e2:0b:41:a9:b1:bf:56:3a:0f:3f:43:e1:ec:bc:25:
         72:c9:a3:ce:27:c0:bd:52:19:6b:15:67:e4:b5:a2:3a:66:7e:
         99:45:9e:10:ea:cb:69:de:88:99:25:56:da:8f:42:e3:31:d5:
         49:b4:07:7c:51:ae:87:b5:5a:0a:d2:e6:e5:e1:33:bb:40:c7:
         b9:66:b0:8e:38:4b:8e:ad:04:73:8a:2d:a9:8d:db:3a:ed:00:
         1c:dd:a8:11:56:71:40:74:ea:75:46:24:85:c6:df:00:37:41:
         4d:ff:ff:0e:0a:a3:c8:d8:1c:bb:48:9d:0e:6e:30:17:50:a1:
         28:7d:8f:11:ee:c4:65:6d:e5:28:7e:3a:0d:77:ca:c1:95:ed:
         e7:61:fa:99:eb:2f:cf:95:fa:ca:e3:4f:36:13:24:8e:67:a8:
         28:d0:cd:aa:c3:70:61:36:0c:92:90:d2:67:b6:1a:03:6a:8e:
         07:f2:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:26 2026 by rpki-client