This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File:                     vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier:          m8t6KxdNkcAAU8FaXnl9/KKsN8xi50x4y6lGylKyqUc=
Subject key identifier:   86:8B:2A:B8:F8:8F:3E:55:4D:B0:BD:5A:47:74:B3:64:3E:FC:00:85
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer:       /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial:       019C42EB7DCC2DB45F48B80221CC52D44E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number:          0841
Signing time:             Mon 09 Feb 2026 15:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:55 +0000
Files and hashes:         1: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
                          2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: 3kRByQnAk8Zx1B2QZdGUKF0uEmMOtt/dh42cljzIDOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:7d:cc:2d:b4:5f:48:b8:02:21:cc:52:d4:4e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
        Validity
            Not Before: Feb  9 15:00:55 2026 GMT
            Not After : Feb 10 15:00:55 2026 GMT
        Subject: CN=868b2ab8f88f3e554db0bd5a4774b3643efc0085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:15:a5:24:f5:50:a2:2a:c1:59:ea:eb:42:
                    02:49:38:61:5a:c4:dc:91:25:08:61:e4:29:8b:fb:
                    59:70:a4:80:e8:62:8e:15:72:45:8f:93:0d:4c:e8:
                    4f:55:c8:a2:2a:1e:8e:73:15:47:96:c2:76:15:32:
                    4c:b2:9b:36:2f:d8:22:3e:01:f4:32:2b:73:00:51:
                    66:2f:0f:13:6a:1a:85:d4:70:8f:34:87:6d:21:1f:
                    1a:53:da:cc:35:10:ad:8c:2c:d2:9f:b8:a9:b6:8f:
                    c0:f4:51:cf:d1:36:d1:4f:95:f2:f8:6d:89:b6:d9:
                    52:85:68:c2:08:01:a5:62:0d:f1:a3:33:ac:8e:c6:
                    2e:db:0e:06:9f:3a:f5:af:ee:c3:4c:c3:15:cf:ab:
                    a8:68:f5:59:6d:e0:4c:d7:0e:2d:95:b0:29:75:b1:
                    36:d3:a6:3f:d2:c4:14:b6:42:6c:66:d8:a6:61:67:
                    e0:98:e6:bf:0c:c5:5e:5c:05:27:33:53:d7:ff:f2:
                    df:ad:5d:af:94:f3:29:f0:40:c9:89:a8:9b:59:0e:
                    4b:c7:56:30:ec:ba:cb:02:ec:0f:9d:13:57:76:e8:
                    d5:fb:0a:5c:05:46:bd:81:51:78:fa:0f:77:4a:b1:
                    34:7b:e6:ee:92:30:09:58:8a:22:39:52:a4:dd:f4:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:2A:B8:F8:8F:3E:55:4D:B0:BD:5A:47:74:B3:64:3E:FC:00:85
            X509v3 Authority Key Identifier:
                keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:8e:f5:25:fc:61:2e:14:42:9a:30:d2:ed:a9:50:7e:f1:
         33:39:c1:e0:d2:1c:8d:4c:ac:80:18:e4:4b:9f:4e:be:94:be:
         3b:00:79:88:8a:31:3b:6d:83:60:fc:d2:ee:9d:b6:a6:5d:ab:
         c7:45:5a:64:d8:b6:36:d7:b9:0d:67:98:08:d5:04:6c:60:af:
         78:50:e2:53:61:1b:3d:9d:1e:fb:cf:5a:6d:73:34:a5:78:4c:
         32:81:6e:12:6e:11:b0:c9:a4:cc:16:8c:0c:7f:13:41:b7:57:
         25:1c:df:be:cd:c3:ff:05:ac:8e:f7:65:b9:f3:3b:e9:49:c5:
         a6:7e:fc:07:3c:af:40:c5:ce:63:9a:24:be:c9:86:49:b4:57:
         5b:13:9d:ae:be:cd:47:29:98:98:9d:37:4b:56:6b:d7:21:4a:
         c0:0f:75:36:32:7f:05:35:28:36:c5:90:e9:0d:cb:80:9a:c2:
         f5:a4:d9:d0:5a:2d:91:05:4f:a2:d9:e1:8a:f6:a2:af:3f:05:
         4d:91:b2:19:fa:53:91:23:2a:cc:c8:bd:b2:7b:9a:f8:86:c5:
         f1:03:ef:ae:ac:24:19:6c:d5:12:ce:06:75:47:8a:6c:b2:e3:
         96:dc:aa:c2:da:7f:6b:db:4c:5d:57:fe:3f:55:9d:90:9e:1e:
         df:51:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:45 2026 by rpki-client