This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File:                     zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier:          xc/4DiPCM7JdvzqNMFUPzaleLSXC0TV56tBFl3FV+a8=
Subject key identifier:   69:3F:B9:63:76:77:EA:60:DB:77:B0:9F:0C:97:D6:77:07:47:BF:DA
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer:       /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial:       019C438FC5FB63F900F2E66E6BCE1F37BCF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:21 +0000
Files and hashes:         1: 3GOUf5zM72xHW-KizqGmfejZI-I.roa (hash: 7Jjry34OgvJlCQgmEgxo8SwsDK8ifphC6Z5s0sCqAbk=)
                          2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: spJZTvtBb6D8TCiadAAXB7NACfavBDds+fzrDZontY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c5:fb:63:f9:00:f2:e6:6e:6b:ce:1f:37:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
        Validity
            Not Before: Feb  9 18:00:21 2026 GMT
            Not After : Feb 10 18:00:21 2026 GMT
        Subject: CN=693fb9637677ea60db77b09f0c97d6770747bfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:43:04:cf:f5:81:42:a6:9f:ff:db:67:52:
                    8c:01:5b:24:70:d4:55:05:32:c1:55:06:a4:21:3d:
                    ba:d2:ee:0f:46:66:c6:54:fc:2f:30:7f:94:48:2c:
                    69:44:ec:24:ac:d4:99:3c:db:1e:c0:b1:f5:e5:1c:
                    93:33:1d:89:c7:48:0b:ec:a3:e1:8a:7b:31:0e:a6:
                    c6:73:31:c0:b5:58:3f:e0:06:28:9b:77:7a:59:15:
                    f0:d2:23:d6:21:d7:5f:39:14:50:b4:51:82:79:93:
                    98:37:8b:fb:c2:b6:fb:ba:38:59:5a:00:1c:5a:2b:
                    d4:84:12:78:0b:f0:dd:d7:b7:e9:83:41:ab:33:4a:
                    ac:ac:d6:99:78:fc:c0:b8:31:be:84:22:aa:c9:85:
                    e3:32:01:cf:de:88:d6:31:a2:36:56:a9:1d:fb:8f:
                    65:e2:ca:6e:c3:d8:34:fe:d8:56:9f:a4:50:fa:3c:
                    0f:d3:a1:6d:e0:d5:32:0f:1b:bd:33:c1:12:96:a7:
                    a3:43:4d:a4:b4:97:33:54:1f:a4:1a:26:31:3c:f8:
                    48:55:dc:d0:e6:c1:ea:a2:67:b6:b1:7c:3e:12:34:
                    51:1e:d2:41:4b:d6:47:33:b4:36:69:12:0a:87:e8:
                    3e:e7:fc:70:c0:c0:ef:68:d6:9d:9b:32:29:10:06:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:B9:63:76:77:EA:60:DB:77:B0:9F:0C:97:D6:77:07:47:BF:DA
            X509v3 Authority Key Identifier:
                keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fa:30:c7:f9:33:12:a5:35:f2:27:c2:f7:76:40:01:0d:ba:
         2a:8c:7b:50:1b:2c:b5:c5:02:74:b7:3b:43:33:1e:ba:d5:a2:
         d8:21:e4:34:55:3d:94:f3:7a:b6:0c:79:74:e3:ed:60:f9:68:
         0c:3d:8a:e9:4f:b5:1c:cc:2e:08:91:dd:c1:cd:e1:82:00:21:
         98:d4:84:0c:56:88:1f:9f:bd:0f:b6:84:69:15:66:1e:ed:19:
         ba:6f:fa:8e:f3:5d:93:6c:6c:3e:45:a2:87:f2:14:56:3d:f3:
         e9:d1:c3:74:1d:43:4b:4b:be:76:61:07:97:b4:ad:28:5b:0c:
         90:28:e6:cd:fe:ec:f1:36:78:2f:f2:1d:37:6e:45:45:3e:c2:
         d0:f3:4d:b3:0b:3e:cc:fd:a3:d9:99:cf:4d:da:aa:97:84:27:
         70:c7:8f:7c:ec:3a:a0:eb:38:f3:ba:22:c7:0e:db:f9:50:29:
         b4:1e:42:ca:20:15:38:e9:e2:9e:68:d4:30:ea:b7:be:ae:5b:
         92:83:c9:46:12:65:be:91:05:ef:84:95:f9:b8:eb:16:9c:e9:
         40:9e:76:a5:82:70:23:a2:47:76:a5:86:1f:51:6c:28:25:da:
         4f:e4:0c:3c:6f:09:d9:ed:87:ea:b7:7e:81:07:5e:8c:25:2b:
         cc:b4:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:37 2026 by rpki-client