This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File:                     ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier:          TzbnC1mUGZU58aRnLL/lkjrHl8QSBMttGwGIsn0JfKw=
Subject key identifier:   2D:D7:63:CE:03:83:65:19:E6:59:76:18:E9:8F:CD:DE:FC:7F:A4:A2
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       019C4390A9C2CFA125C61A08F42F8A4A9A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:19 +0000
Files and hashes:         1: Egb0qlOT0QYai7Ud1j-6AktXpaQ.roa (hash: t3ML12+oYwBxBwu00YHixrtLa2iYcj7/LDeiT9PozG0=)
                          2: HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa (hash: oZWuIu54uOtv30XUphqHrr6wzKAadRn0thnex/98uK4=)
                          3: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: kCng89unGd11tC5XHob4M941zHGYBvMx9+BGSyU2sOQ=)
                          4: a27qVn_k5d7rFpyZQYzwTiZkhY0.roa (hash: yXSZOhjfWxv0LjskprohS30KlvIJQI3hLL3gKXTjDOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:a9:c2:cf:a1:25:c6:1a:08:f4:2f:8a:4a:9a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: Feb  9 18:01:19 2026 GMT
            Not After : Feb 10 18:01:19 2026 GMT
        Subject: CN=2dd763ce03836519e6597618e98fcddefc7fa4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:cd:06:7d:f1:6f:7d:5d:5b:6f:e9:e9:54:
                    7d:81:41:69:19:40:27:2f:9d:68:6b:d6:41:80:ad:
                    1f:41:d1:af:68:ca:b9:78:3a:8d:c9:a2:4e:d4:27:
                    8f:ba:00:c2:34:b9:b3:7e:7c:de:17:08:38:13:25:
                    3b:fa:0d:19:23:b4:6b:18:93:ee:2e:45:6a:91:d1:
                    1e:b5:6f:ea:7f:21:a0:ce:de:38:67:c3:02:e6:14:
                    d0:3d:2e:ed:7a:f6:de:d0:38:61:f1:8a:21:42:ed:
                    bd:26:2f:41:67:f6:95:a7:85:24:65:8a:43:21:2d:
                    e9:26:69:37:c6:90:6a:4b:0c:67:33:61:d1:1e:b5:
                    7b:74:34:a4:2a:fc:70:68:37:fd:c5:03:c2:ac:34:
                    00:dc:27:f0:05:b2:4b:c3:6f:2e:da:ab:42:d5:49:
                    e9:33:51:b3:c3:6f:3d:fd:69:8f:91:c9:87:23:ee:
                    c0:b8:93:44:00:15:8e:85:bc:e3:65:06:5c:e1:e2:
                    3a:41:f2:c8:97:49:b0:5a:21:64:fa:06:67:36:3e:
                    3e:9d:f1:d5:c4:09:4b:7d:9f:c3:8f:9c:86:20:f3:
                    ec:82:87:8c:de:bf:dc:fb:14:0f:0a:56:31:28:6e:
                    ee:dd:ae:41:30:76:ef:22:af:ed:11:62:1e:fb:c4:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D7:63:CE:03:83:65:19:E6:59:76:18:E9:8F:CD:DE:FC:7F:A4:A2
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0e:f7:1f:70:86:c9:17:b1:e0:53:e5:64:5e:3e:bc:c0:af:
         51:fe:75:a1:14:6b:1c:6b:45:76:53:70:46:3f:51:d5:e9:74:
         2e:b7:29:f2:bb:2c:10:17:f9:ab:ad:40:12:82:91:68:f4:87:
         ef:fc:d4:6a:95:89:d9:e6:f8:6f:8f:e0:30:0f:77:c8:4b:45:
         58:02:2c:62:d3:db:37:e4:11:6a:99:ad:d4:4b:fe:6d:03:1c:
         9f:00:99:3b:7d:5e:05:dd:da:6d:49:6a:cd:e0:32:95:b4:9d:
         b2:0e:5c:47:5f:42:29:fc:08:5c:2d:63:d2:be:38:ee:bc:6b:
         f3:bd:5a:d7:54:e5:47:9a:21:a5:d5:b3:ab:92:39:57:bd:26:
         60:82:fd:fe:d5:ac:a3:ad:5b:1f:05:40:7d:fe:d2:35:61:7d:
         18:f4:c7:ba:57:bf:72:b6:5e:18:51:8f:6d:09:48:dc:8a:cb:
         ff:4d:d7:73:5b:b5:da:1a:64:a4:95:a3:6a:74:cf:66:08:7c:
         d6:d4:56:e6:35:cc:4e:2d:b3:5c:94:9a:0d:f0:ff:7c:de:d3:
         52:5d:b4:08:84:2e:7a:83:82:70:db:24:54:f5:7f:88:02:4f:
         47:5d:ff:3e:23:17:5d:97:1a:3d:58:f6:70:5a:3d:14:15:2c:
         13:49:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:51 2026 by rpki-client