This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File:                     vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier:          QYBTmjPb/HvIfBbwpiT1pYuZjPLFiA15eEV9aHIrWBQ=
Subject key identifier:   F1:F8:68:13:34:0A:ED:27:27:93:AD:48:8C:D7:7C:10:C7:B5:E6:01
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer:       /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial:       019C43228EAFD7809942CDED08329F286F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number:          0B06
Signing time:             Mon 09 Feb 2026 16:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:04 +0000
Files and hashes:         1: Lxg1J8cwURTY9_JQsifitMf5y7A.roa (hash: u1s6RVg6iJ41ZyF0RLUZtYyTUMW/RJjsSfzM2NLlGNs=)
                          2: Ve6c2IT4Y4KWt1y8vOlimM_P9Vo.roa (hash: JZ/bRjpJCHl5nEUS59KBB6ePkjyLJVz3d6ZPz9DGR/E=)
                          3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: 7BE1tIkLwWflSaq7feynr/zreLBJqmx4xR4ernyIbhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:8e:af:d7:80:99:42:cd:ed:08:32:9f:28:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
        Validity
            Not Before: Feb  9 16:01:04 2026 GMT
            Not After : Feb 10 16:01:04 2026 GMT
        Subject: CN=f1f86813340aed272793ad488cd77c10c7b5e601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:d9:88:c3:04:b8:a7:f2:6a:82:32:da:80:
                    07:67:3d:a5:b7:f4:04:39:4f:32:86:c8:9b:db:6e:
                    2c:7b:79:3d:57:7a:71:2d:81:dd:89:e9:e4:71:b5:
                    6d:fc:2f:91:a0:b2:a8:4e:56:a7:fe:55:06:60:7d:
                    35:a0:70:00:06:bd:29:73:77:ca:e2:54:5c:26:7d:
                    af:42:7f:41:e6:99:aa:df:07:13:7f:95:7c:86:53:
                    77:ca:fd:cb:02:99:1b:19:a1:ac:7a:f5:4d:1b:76:
                    fc:ce:d4:ef:29:38:e1:ae:12:c2:30:ba:6e:5c:c0:
                    0b:5a:b6:e5:9e:25:b4:ec:96:27:01:05:5f:cc:a6:
                    59:25:43:f0:c4:7b:89:29:9b:d8:48:e5:4c:fa:5a:
                    e9:00:87:54:fd:88:ee:b1:3e:9b:bc:4d:ba:8b:94:
                    5a:c7:ec:ec:75:ee:6b:e4:d3:0e:08:fb:ae:9f:67:
                    5c:2b:bf:dc:1e:3b:51:0e:07:e5:61:ec:0f:2f:d7:
                    62:01:e9:85:92:51:64:54:ff:78:33:37:f2:a2:eb:
                    8f:44:39:d8:3e:48:fb:50:76:44:2c:32:76:cf:f3:
                    1f:8d:5b:dd:87:2b:8e:ec:af:15:72:f1:57:3d:a7:
                    11:04:bf:43:cf:84:0a:44:99:84:d4:10:fc:92:28:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:68:13:34:0A:ED:27:27:93:AD:48:8C:D7:7C:10:C7:B5:E6:01
            X509v3 Authority Key Identifier:
                keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:3e:66:fc:ad:c4:fc:d0:c1:b9:85:69:09:78:47:f0:fe:
         a8:95:24:52:e4:f4:5e:6d:d7:4e:3a:9a:74:aa:c9:b7:d4:a1:
         ee:38:92:08:8a:b8:b4:89:70:b3:17:5c:23:f5:b3:40:6f:0f:
         8f:ed:53:1c:c3:ec:03:b1:0b:f2:ca:f6:e2:c8:51:e3:88:6a:
         3e:60:74:74:2f:6e:43:ec:e2:fb:2e:2f:4a:c4:04:f9:70:63:
         a5:e8:87:dd:cd:b3:bd:15:30:da:e4:47:dc:fb:1b:74:d1:c1:
         dc:86:6b:4d:11:88:ce:d2:e7:35:49:f8:86:c7:3c:06:9e:bb:
         42:9d:4e:b8:57:e2:5b:17:d2:04:bd:40:12:26:fb:ce:6b:3b:
         f0:11:bc:77:35:8b:e1:1c:11:17:16:93:94:aa:16:10:df:26:
         26:bb:eb:ec:87:34:98:94:d5:3f:ca:0b:81:84:80:82:97:a1:
         5b:40:d9:18:22:f8:9d:c2:56:b5:2b:b3:00:76:e4:c6:6d:9d:
         8f:d3:9f:fa:9c:a4:6f:d4:34:49:93:7d:90:6e:71:c7:a2:36:
         81:01:26:97:73:df:1b:78:58:d5:e2:1d:94:12:19:c6:23:41:
         1e:de:6b:eb:4f:92:e5:9d:76:a5:9f:7b:49:1f:f2:30:8b:21:
         22:0f:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:46 2026 by rpki-client