This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File:                     vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier:          a/NMkKkmaPbsSnMv8s8+RB+VoXJgCt9MQ+DlmbzjHqM=
Subject key identifier:   13:B0:D1:9F:2D:9B:27:BB:75:72:B0:72:21:98:75:34:07:4A:72:19
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer:       /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial:       019C1F1629D9190A9E925297665F8A1A01E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number:          17FF
Signing time:             Mon 02 Feb 2026 16:01:11 +0000
Manifest this update:     Mon 02 Feb 2026 16:01:11 +0000
Manifest next update:     Tue 03 Feb 2026 16:01:11 +0000
Files and hashes:         1: hBfOWNz8aB-uKsUJCSf2XACnmmc.roa (hash: 5Y5YLQETtQumGJBT9gG5Cwrp98Yqiy17fOUfKzajf7c=)
                          2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: jrpcDhJtdHZp/J/g9h4+17vaXSbTW92sfsITD61xrsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:16:29:d9:19:0a:9e:92:52:97:66:5f:8a:1a:01:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
        Validity
            Not Before: Feb  2 16:01:11 2026 GMT
            Not After : Feb  3 16:01:11 2026 GMT
        Subject: CN=13b0d19f2d9b27bb7572b07221987534074a7219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:87:ff:50:2c:bc:ba:da:1b:f7:a1:59:9f:
                    aa:df:24:f5:bf:76:94:54:c4:32:e0:60:fe:81:6c:
                    ae:f1:02:6a:bf:f3:38:6e:a5:7d:70:a2:96:c0:f6:
                    76:33:e2:c6:21:60:82:9c:9c:64:ed:39:6a:c6:11:
                    52:48:be:dc:ec:76:18:48:20:3d:79:77:f5:79:d2:
                    59:58:41:a4:d5:f1:02:7a:bd:db:db:f7:1b:7e:8d:
                    88:69:09:d3:90:23:dd:e0:97:84:ec:c3:b6:3a:60:
                    25:8d:87:e1:53:44:b3:cd:af:94:cf:96:1b:f6:a3:
                    6c:9c:89:ea:e4:9b:d6:db:ad:b0:c2:c7:f4:87:af:
                    0b:f5:63:c3:28:fe:bb:a3:07:8c:a3:ab:a8:8e:c0:
                    30:fa:2c:c4:53:b8:86:e4:d1:69:c8:b6:24:68:8e:
                    c8:de:62:75:35:1a:80:0b:ed:a6:c7:22:46:18:c5:
                    9b:51:df:33:ea:59:74:17:7c:c0:63:d9:69:fa:03:
                    5d:4b:4e:fe:f7:1a:f0:92:2a:8b:fe:5a:1f:8d:4f:
                    8b:64:c4:f2:d0:60:67:f1:52:1e:10:e6:dd:dc:e8:
                    38:66:1f:82:2c:35:02:86:37:34:39:2f:b7:cf:3b:
                    7b:09:5f:25:3d:88:db:c0:a7:aa:fe:e9:04:d1:44:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B0:D1:9F:2D:9B:27:BB:75:72:B0:72:21:98:75:34:07:4A:72:19
            X509v3 Authority Key Identifier:
                keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:24:cc:30:89:e6:39:a1:a5:a7:c0:5a:ee:ed:d8:93:13:
         e5:76:c7:0d:1a:e5:67:3f:55:c7:7e:92:3e:d7:21:3b:e3:80:
         3d:56:bd:af:b0:bb:bd:0c:89:8e:29:5a:75:fd:7e:54:30:5e:
         83:31:e1:e8:b3:17:b2:b9:3c:d4:6a:b1:fa:a3:58:75:76:d4:
         de:f8:90:11:66:01:36:1e:29:e5:20:1d:26:95:aa:95:69:ae:
         a1:cd:55:62:e2:c6:1d:2f:b0:4a:58:27:7e:6b:67:e9:14:ff:
         9b:f6:68:1c:5a:e5:63:70:02:17:3b:67:14:d3:8c:8e:1c:d2:
         4d:7b:22:e9:25:b6:e2:95:22:31:4d:2f:1b:14:dd:3d:d9:a4:
         3b:0e:7b:aa:cc:50:81:db:8e:2d:08:96:42:14:2e:5a:36:b6:
         23:d2:e4:eb:ce:07:1e:76:56:11:1d:78:87:b9:f4:36:6a:fa:
         94:db:2a:74:0f:cd:81:24:5e:05:bd:d3:40:41:40:17:7a:ce:
         85:26:55:d9:73:cf:11:37:8f:84:47:c9:e7:26:61:3c:76:40:
         b6:38:e1:3f:cc:09:a8:d4:ec:1c:08:37:0e:be:4f:59:ca:dc:
         48:f0:f8:d5:8a:bf:bc:d9:ae:6b:e3:66:a2:39:dc:fa:df:5a:
         72:44:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:44:48 2026 by rpki-client