This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File:                     ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier:          3S2armpi1EcLGZdTEvS5XapboykZCFDoZhxOE8HXNp0=
Subject key identifier:   BD:3F:00:80:BB:73:61:4A:98:35:06:F0:32:59:73:08:6E:38:1F:E8
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer:       /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial:       019C427DB1D122AD2759E4F3F18631B051C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number:          0DCE
Signing time:             Mon 09 Feb 2026 13:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:59 +0000
Files and hashes:         1: 1zk3At_CW_6MtNUlvcs7PWL_MSY.roa (hash: Wx50m0MeMkdSzmVTbDYeihjHelr2/WxDpsYDzzYan64=)
                          2: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: woClkEn0c7LjfelMJDgMFkQdmvQsLnae3MPxns2pcGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b1:d1:22:ad:27:59:e4:f3:f1:86:31:b0:51:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
        Validity
            Not Before: Feb  9 13:00:59 2026 GMT
            Not After : Feb 10 13:00:59 2026 GMT
        Subject: CN=bd3f0080bb73614a983506f0325973086e381fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:b6:3c:72:34:b6:dc:8d:34:4f:3f:fc:aa:
                    9d:22:47:46:bb:ba:6e:d0:82:2b:d1:4a:92:ef:0a:
                    e8:a5:bf:d3:5d:bb:c5:27:d7:80:a9:23:37:81:15:
                    10:c5:2a:e4:9b:54:98:3d:ed:46:9b:90:96:1d:9d:
                    1d:8a:af:06:09:3a:3f:3f:ff:db:a1:37:b4:31:a9:
                    47:08:cf:71:6d:4f:57:f9:1d:83:1b:01:35:5a:e2:
                    7d:db:72:5e:4e:1a:6a:dd:c3:ea:4d:f7:e0:40:fa:
                    3a:1d:23:e0:01:a5:91:ea:72:4d:d5:21:4c:3b:cc:
                    24:e0:c5:35:e6:7f:85:75:b2:99:fe:b6:4e:78:6c:
                    68:c2:84:6a:b5:a7:e6:71:31:75:22:61:45:73:8d:
                    e3:14:0b:4f:84:79:4e:5d:d6:00:a2:4a:33:4e:ec:
                    46:b5:8d:09:81:66:d6:99:3b:df:86:9e:81:c6:30:
                    26:2a:e9:c0:b2:1b:5d:40:cb:62:7c:5d:4b:94:e5:
                    f6:78:e3:34:c0:6b:a2:ad:2e:1e:f0:2a:a6:4b:92:
                    ae:fb:31:e0:63:3e:7b:f9:bb:d4:55:80:6e:0b:43:
                    68:07:52:f4:9c:44:a1:d6:96:ed:80:4e:17:d1:de:
                    1b:fd:33:44:ed:8a:82:71:c7:a8:2a:ed:eb:29:f5:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:00:80:BB:73:61:4A:98:35:06:F0:32:59:73:08:6E:38:1F:E8
            X509v3 Authority Key Identifier:
                keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:56:78:50:95:e3:2a:41:7f:24:dd:8a:b0:7b:2d:cb:17:f4:
         cd:bf:2c:f8:03:a7:be:41:21:b2:79:43:7f:79:08:95:ea:2d:
         55:51:b2:1c:52:c2:81:f9:68:90:df:b4:1e:9f:d8:2b:a3:a4:
         90:2b:d0:95:89:a5:c3:96:da:ca:7c:15:6a:35:03:01:c6:80:
         5b:cd:b5:81:23:d9:cb:13:7c:5b:df:ef:02:e2:01:d6:d9:ea:
         b5:3a:26:31:d0:fb:67:d6:90:ab:25:83:b9:e8:4d:b1:e8:23:
         56:e5:91:cb:11:1e:8e:2f:12:e1:28:0d:8c:75:03:fb:3d:19:
         68:9f:16:aa:0d:b8:36:b6:05:65:85:d4:63:d6:93:ec:c9:ab:
         ba:21:fe:70:c0:6d:40:98:5e:10:19:35:1a:24:54:d0:31:dc:
         7b:f5:94:a5:83:33:c4:01:73:30:02:f9:b1:64:0c:13:f0:67:
         7d:8d:cb:c7:89:83:a0:b7:7f:c7:ff:b8:f6:fd:25:0f:e7:fc:
         36:3a:51:82:72:f7:60:2d:a9:e4:db:03:24:f5:22:0f:74:fe:
         3c:77:cc:14:db:84:78:77:56:72:7a:1f:9e:3d:49:80:83:08:
         fb:5e:ce:50:32:01:45:e6:31:08:dd:a2:54:e0:ef:83:22:53:
         79:33:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client