This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          LqN+JLnN5Xo0rHflExzDRtazJR3vbSOTIO/DrUDnx30=
Subject key identifier:   CA:78:AA:0D:88:89:BC:D3:71:65:A1:E2:CB:77:23:33:90:5B:49:AD
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019C1E7110EA1F5229E87835135EAE60B602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          082B
Signing time:             Mon 02 Feb 2026 13:00:52 +0000
Manifest this update:     Mon 02 Feb 2026 13:00:52 +0000
Manifest next update:     Tue 03 Feb 2026 13:00:52 +0000
Files and hashes:         1: 4idHKr8iidN9-yQyhnGqDfiW9q8.roa (hash: nh/szdSdvcCkYbqwsZX9wdA0trtKQJhpXMJXZCoPXVw=)
                          2: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (hash: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8=)
                          3: RuPHE7oDax0LZ7QwIWaSeo3i7Jw.roa (hash: XqmTRgeYBpKi+R9MtbM6hui7gHIH9RIwhXh6Z4pFfDQ=)
                          4: YpXIWUZYxQ98drfBokf4OSWCVN4.roa (hash: 4V0PfujjXl7BaeSUm1JTVRoIczgBAb6s4HyeVzfISvk=)
                          5: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: ue3frU/TbtZPbQiERSs5m3DwIsZWHCWtzuToxCqlnu0=)
                          6: tDCU6ZgNXedbQkRlGgvKQfQ0bkA.roa (hash: ykQgW4xkDJKWChMwCNu3fS7+mAyaTQKGalisZpyZIPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:71:10:ea:1f:52:29:e8:78:35:13:5e:ae:60:b6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Feb  2 13:00:52 2026 GMT
            Not After : Feb  3 13:00:52 2026 GMT
        Subject: CN=ca78aa0d8889bcd37165a1e2cb772333905b49ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:10:8d:04:76:f8:d8:24:89:0b:fd:1d:e6:
                    0b:6b:10:4e:50:70:cf:85:90:0f:1b:82:83:fe:a4:
                    08:a3:95:a1:39:ba:87:fa:d7:f3:92:8d:45:e7:6a:
                    c7:50:5a:0c:19:1f:51:3a:e3:03:6f:3d:0b:88:dd:
                    35:8d:0f:4c:12:11:32:dc:41:36:8f:f6:91:e8:9d:
                    7c:e4:1e:84:3e:30:46:f9:d0:d1:63:c2:69:88:09:
                    b4:5d:e6:3c:ee:a1:e0:d5:42:a4:31:9b:f7:39:78:
                    40:f3:8b:80:ca:75:d7:64:f8:ec:10:19:54:36:dc:
                    f4:2b:d2:5d:b6:94:4c:2b:ec:30:1b:37:07:86:ca:
                    62:fd:8b:2f:38:84:fd:eb:56:33:ba:22:12:7e:3d:
                    99:01:66:65:b4:d5:10:68:c0:e1:e6:69:9a:bf:75:
                    8c:e8:86:75:aa:23:e9:af:4d:ca:1b:c1:3d:72:af:
                    76:8f:bd:ee:d0:21:87:ae:38:80:97:7d:82:98:39:
                    a8:88:1d:44:97:14:ca:df:f4:18:5f:2e:9b:84:91:
                    4d:68:f8:c6:4d:7e:ef:5c:24:f0:4c:48:01:43:de:
                    70:cb:46:b8:d4:0c:69:16:b4:fc:f3:32:4e:d4:76:
                    5e:70:8c:2b:9f:7d:71:f7:8c:43:7d:ef:60:92:9a:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:78:AA:0D:88:89:BC:D3:71:65:A1:E2:CB:77:23:33:90:5B:49:AD
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:34:03:cf:19:a1:42:1c:6c:ec:ff:18:95:75:1d:99:16:
         e2:58:cf:ce:a6:9c:31:8a:ff:27:89:42:15:a1:26:f1:04:b0:
         83:e5:16:f8:06:7c:f5:fe:25:fa:a8:c5:d0:32:65:f7:35:61:
         50:71:a4:ab:eb:bf:e7:c6:1c:ca:e2:eb:bf:04:e6:4d:24:8a:
         66:85:89:bd:f1:bf:5d:07:72:b7:c6:37:8b:28:9a:c5:3f:2b:
         48:43:90:42:55:81:04:e4:64:5b:e6:20:89:b8:6f:99:f0:51:
         6d:35:59:cd:24:13:e9:5a:ca:6d:86:23:30:b9:f1:fc:d9:11:
         d1:42:06:1a:83:44:72:79:a2:f0:cc:c7:9f:d4:71:5f:59:3f:
         4d:c0:5c:f3:16:36:68:3d:11:fb:01:79:d2:e5:30:ec:80:60:
         29:22:6e:3d:2d:37:ab:fe:e3:a7:7f:4e:65:cb:ae:50:f3:a4:
         61:d1:21:73:b5:f5:16:01:09:bb:e3:85:21:63:c4:74:7a:ac:
         18:b3:1e:77:78:c2:4f:1d:71:b0:df:96:bc:d2:a8:c5:d9:8b:
         f7:dc:ce:25:61:b6:c9:e8:da:8e:3c:ec:5b:ce:e2:f0:33:1e:
         9d:f4:3a:06:cf:11:ba:de:69:e5:22:9c:e1:9f:65:f9:a5:95:
         fd:57:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:46 2026 by rpki-client