This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File:                     ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier:          J0EiQIv/lsGzw4OQ+wYzti+n2ki/2F9ukr3hMW3Jvkg=
Subject key identifier:   6D:A6:19:4F:5A:E8:07:A0:5E:34:61:DC:70:78:E7:0C:41:69:B1:BC
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer:       /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial:       019C43FD963AFC09598F5BC820CAFCDFD4D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number:          05F8
Signing time:             Mon 09 Feb 2026 20:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:18 +0000
Files and hashes:         1: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: 7+8t71NbRyQeEsNJaqfDck79vhbfnckntmuswappD6c=)
                          2: u8CFwQAgI9Z_ArKZcryQPx48tlg.roa (hash: ouz1fG+C7TUSgfVu4kqpK6uPFZhg0Hf+lpBxVtrxN4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:96:3a:fc:09:59:8f:5b:c8:20:ca:fc:df:d4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
        Validity
            Not Before: Feb  9 20:00:18 2026 GMT
            Not After : Feb 10 20:00:18 2026 GMT
        Subject: CN=6da6194f5ae807a05e3461dc7078e70c4169b1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:f7:7c:b4:97:fd:f1:c2:d8:c1:5b:e5:37:
                    c6:79:e2:20:00:43:0a:63:c5:86:ea:96:0b:4d:df:
                    5c:03:90:c5:66:93:f5:4c:bc:c3:1e:50:a7:01:1d:
                    f6:6c:61:2b:18:d4:31:c9:e6:d9:af:db:6d:2e:7f:
                    7a:04:27:bb:a3:a3:9d:78:bc:8d:84:4d:88:1f:6a:
                    4e:bb:5c:ce:5e:6a:10:23:93:a6:13:7e:b6:7d:49:
                    7d:7f:0f:a5:9a:ef:57:39:c2:b5:c4:43:60:e2:33:
                    7f:ff:0d:9c:de:49:a0:fb:d0:33:7f:18:07:b4:ac:
                    6e:e7:cb:0d:7e:0e:7c:f2:cc:cc:37:d9:71:9a:44:
                    28:16:d4:28:a4:4d:71:46:27:e7:85:1d:49:25:bf:
                    b1:e5:55:f2:1e:7f:d4:a7:e6:5d:d6:cb:52:6e:cd:
                    3d:4f:60:83:5b:cd:4e:4b:8f:d2:30:7b:d9:ed:e6:
                    97:35:08:cf:31:4f:d4:ce:ba:ae:cf:7b:27:48:50:
                    c2:d8:a9:0b:fe:8e:7a:d7:94:f1:36:5a:9c:7f:c5:
                    d2:70:76:7b:0c:27:f0:4d:12:19:9a:f2:da:f6:3c:
                    ef:c6:dc:c6:3f:06:21:76:b3:99:13:52:ec:3c:0a:
                    ee:79:be:cc:26:8f:94:96:dd:df:f9:83:8b:14:29:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:19:4F:5A:E8:07:A0:5E:34:61:DC:70:78:E7:0C:41:69:B1:BC
            X509v3 Authority Key Identifier:
                keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:56:c4:ec:a7:b7:a1:75:6c:01:89:34:81:21:a9:8e:eb:
         3f:01:f6:a5:b7:5b:1e:6f:78:c6:fa:4f:27:f4:1f:17:90:4e:
         6b:e7:52:d3:55:c9:10:2b:4e:16:3d:13:33:72:63:85:34:39:
         2c:33:3b:5c:72:b7:9c:2c:4e:8d:61:2c:48:79:d2:66:c0:ed:
         43:57:d3:52:76:2b:07:5f:9e:15:1d:3e:7f:63:e9:8c:06:d7:
         a9:30:37:c1:79:c6:d2:04:2b:a7:f5:26:3a:a6:1a:e7:40:66:
         dc:82:b4:5b:09:49:74:ce:54:da:dd:24:3c:4b:48:41:23:75:
         0b:09:7b:36:f3:5e:71:48:46:e7:a7:4b:1d:79:a0:61:a0:85:
         54:3e:5a:7a:de:06:c2:82:83:f3:5d:76:ed:a8:09:df:88:b3:
         b1:83:b2:42:78:f4:67:c8:eb:3a:65:98:ef:a4:2a:9c:bd:d2:
         07:83:12:fe:4e:3d:ad:5f:bd:ea:a0:15:60:31:20:a7:6a:ff:
         90:45:54:1f:a4:31:64:7e:3a:60:42:76:9f:04:02:f7:a4:7c:
         3a:d1:62:48:7a:bb:68:21:08:b0:2b:03:82:00:20:e4:e6:18:
         5d:92:f8:c7:33:21:71:85:f1:89:a9:98:d0:27:15:7f:0a:37:
         90:41:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:44 2026 by rpki-client