This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File:                     zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier:          bRtkt0Vq7z0/S1y9BgOKCyl2Tlg2QHOtzg4RzljXIVU=
Subject key identifier:   68:F9:2C:90:D9:C2:6F:16:25:04:A4:17:CC:64:52:6A:1E:4A:90:64
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer:       /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial:       019C416ABC12C32F9ACE808D7EB112C9A57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number:          076B
Signing time:             Mon 09 Feb 2026 08:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:39 +0000
Files and hashes:         1: 46wXiqms5HpiGBoK15ocXo29pM4.roa (hash: oBJWgh+2jPc8gknL0v2rnOXcYX3sL1PfoR3y8FKwdXQ=)
                          2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: M78r4iNo04l66D1CfIHRXHGNoH3v9e/OqSIjfX6cZNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:bc:12:c3:2f:9a:ce:80:8d:7e:b1:12:c9:a5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
        Validity
            Not Before: Feb  9 08:00:39 2026 GMT
            Not After : Feb 10 08:00:39 2026 GMT
        Subject: CN=68f92c90d9c26f162504a417cc64526a1e4a9064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:b7:4c:1e:45:7a:96:70:a1:8b:01:fc:9a:
                    65:e4:d7:dc:bd:58:9e:0a:22:81:b9:8b:ed:fb:0d:
                    e1:c6:57:b7:fb:84:e7:6e:8d:3b:0b:a9:ef:41:bb:
                    90:b6:14:ae:04:de:3f:50:9d:9e:fd:cd:bb:a9:ca:
                    49:d5:33:fc:d7:34:2b:8c:1d:cb:77:b0:d3:02:2d:
                    3d:99:7f:b3:83:8b:db:66:6f:7c:67:0d:5a:f3:ca:
                    5e:c6:00:b6:09:ca:63:2c:9f:00:3d:64:42:2f:f4:
                    96:81:45:f1:c4:38:14:ba:7d:83:88:a2:6d:3d:98:
                    37:2e:70:b5:bb:96:5d:9a:4b:6b:78:95:a4:2f:06:
                    d1:26:44:ac:5e:7a:d6:9d:1e:60:9a:61:8f:64:c1:
                    eb:17:9f:3b:4d:f6:6d:90:ae:b5:2f:05:d0:fa:cc:
                    97:88:3e:a6:d1:a2:eb:93:1c:0a:36:57:c7:36:52:
                    65:5a:34:7b:62:47:ae:dd:f0:1a:d5:77:8c:f0:43:
                    7d:84:7e:dc:6c:24:7f:99:27:e3:47:76:00:a7:0a:
                    af:aa:90:da:b5:e7:6a:25:dc:09:2b:78:81:b9:40:
                    4f:46:18:6c:0f:d7:ff:68:1d:a9:aa:53:1f:72:6b:
                    f8:85:9e:c1:12:59:38:24:aa:dc:8a:9a:09:d5:cf:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:2C:90:D9:C2:6F:16:25:04:A4:17:CC:64:52:6A:1E:4A:90:64
            X509v3 Authority Key Identifier:
                keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:98:33:5d:b5:a9:40:15:a0:f8:1d:c2:ce:81:f6:78:01:
         9e:7c:d0:94:69:77:53:22:9c:35:c2:48:a9:36:0a:16:3e:6e:
         06:da:50:6f:25:19:5a:d6:0e:a3:d2:2b:9a:47:9d:a3:5d:a5:
         96:26:a2:6b:31:3a:88:de:33:08:a9:c8:06:7b:71:a2:39:0c:
         df:5b:07:bf:74:97:42:7f:2a:3f:e5:37:f9:a2:c4:42:18:80:
         e3:46:7f:5e:cc:2a:41:06:ef:60:5e:38:d1:a9:6b:93:9c:25:
         a9:15:e2:42:a4:0e:02:fc:d9:1c:ad:a5:6c:65:63:b9:f1:d8:
         5c:4c:93:c6:c5:61:cf:21:4a:3a:85:51:8a:d1:b9:eb:c0:d2:
         41:82:7e:2a:03:58:e0:2f:be:f3:0b:29:5e:6e:de:7b:2d:d1:
         ae:51:72:14:52:fe:0f:ac:7b:a4:cb:8b:d1:f2:98:0d:18:55:
         eb:b5:79:c9:71:04:8e:b1:9a:f9:f6:03:f0:e8:c3:12:f5:4d:
         9a:d3:aa:df:6f:83:f5:9b:80:0f:ed:f6:a8:81:68:b8:d3:c8:
         e4:49:15:1e:95:90:dc:03:2b:50:b1:1a:6a:9d:f8:c4:24:30:
         ac:b3:fb:c2:da:84:4d:ad:56:23:66:24:20:9b:8b:45:79:71:
         9b:61:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:35 2026 by rpki-client