This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File:                     cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier:          SzdpG3NU8JXJLcxL4S7iIDWkXwz0pE4sw8Z8ahv1BKA=
Subject key identifier:   D7:CC:57:A3:55:0B:2D:AD:9B:BF:2E:1A:DF:7A:97:A9:63:52:8A:69
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer:       /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial:       019C42EB9A8E8262197B117992EEEC4310DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number:          08D3
Signing time:             Mon 09 Feb 2026 15:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:02 +0000
Files and hashes:         1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: +xXRx4YusMAyj1+ME5Dcrk8HBeb1ljvGwLe8FaEJDgw=)
                          2: deQ3iUYI2zhDS5WVofbw_0r7MdU.roa (hash: aWouu4WFuntFUTMgXaNZBkCjMzZT9CqQafzXFsbJDvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:9a:8e:82:62:19:7b:11:79:92:ee:ec:43:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
        Validity
            Not Before: Feb  9 15:01:02 2026 GMT
            Not After : Feb 10 15:01:02 2026 GMT
        Subject: CN=d7cc57a3550b2dad9bbf2e1adf7a97a963528a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:90:0c:8d:78:a8:46:aa:9e:fc:bb:f5:c9:
                    03:08:d1:82:8b:4d:c1:38:11:06:fc:09:ca:e3:82:
                    43:9c:db:7c:15:a8:45:af:a8:57:e0:af:df:2f:47:
                    f4:b1:c1:b3:19:09:f8:37:a5:31:bd:c6:9b:8b:bf:
                    17:44:8c:c3:b9:48:36:7a:01:eb:fd:4d:fe:ea:52:
                    07:1e:e7:d7:ae:ce:fd:25:9b:b6:89:8c:10:1c:bf:
                    e9:ac:aa:0f:09:bc:cd:03:0a:89:bd:41:bd:22:be:
                    1d:89:7f:2b:58:1b:39:7f:54:b6:62:f8:53:4b:6f:
                    e5:ce:18:09:5c:b2:3d:36:82:a6:fa:04:cf:e8:f6:
                    15:37:9f:16:1a:7e:cc:31:13:27:cb:a5:c9:f5:67:
                    8c:7c:49:9a:fe:7c:af:d2:59:50:16:fb:ef:20:ed:
                    7a:ad:9e:e7:24:7b:e4:19:15:8e:bb:51:27:83:4e:
                    6d:2b:5c:70:8f:b4:f9:67:44:2a:c5:84:70:e8:53:
                    3b:60:40:6b:fb:2f:28:2f:ef:d5:8a:7d:ce:70:79:
                    c8:91:55:93:bf:da:10:09:eb:c9:52:58:a9:22:a7:
                    af:45:6f:49:60:f6:48:98:8b:cb:58:08:db:9f:85:
                    fa:ba:7c:b7:0f:90:27:02:67:dd:16:04:a7:38:3e:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CC:57:A3:55:0B:2D:AD:9B:BF:2E:1A:DF:7A:97:A9:63:52:8A:69
            X509v3 Authority Key Identifier:
                keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:0f:3e:ac:06:c7:e8:9f:99:9d:b8:08:6f:8f:72:7d:2e:
         24:7b:ef:3d:44:e1:41:35:15:5f:60:b8:61:72:32:5b:5d:4b:
         36:1e:00:40:43:b5:b3:b7:12:b5:02:05:16:6c:31:47:a4:ac:
         8f:bc:e1:4b:ab:fc:39:ea:03:1b:5b:fa:89:09:11:5d:99:8c:
         87:8f:a9:e6:a4:46:3a:a0:80:ad:78:14:1f:6b:84:03:85:e1:
         72:28:28:1b:21:20:1f:fd:79:14:98:51:99:ce:64:68:75:f4:
         29:48:ad:78:dd:be:5a:60:36:2e:b4:d7:37:2e:1b:2a:81:04:
         d0:cb:53:9a:bc:ec:63:2f:bc:f8:23:67:cf:9d:2f:41:e7:c9:
         40:fc:f9:79:cd:9d:e7:99:70:7b:3e:c0:48:cc:17:fd:cc:64:
         2f:9b:d2:68:48:bb:31:eb:cf:e6:79:df:29:05:e0:23:5d:90:
         ab:96:be:9d:09:dc:9a:a7:73:bb:57:c9:07:3d:4b:1e:c4:c4:
         6a:8d:dc:b9:b6:c9:c7:51:b8:39:b7:c8:41:4b:12:5c:93:3a:
         6f:66:64:17:c5:09:14:97:47:3a:05:af:9f:76:6b:b2:9a:26:
         71:1c:5f:04:28:c5:51:1a:57:36:8a:88:8c:a8:95:22:4b:5e:
         9a:5d:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:29 2026 by rpki-client