This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File:                     Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier:          eYRhtKWZp06eLSnBKNTIuKJZ2xcdjfdXfwEVHMCaVwE=
Subject key identifier:   4A:DC:A7:E9:9A:AF:9D:FA:67:81:B7:EF:18:33:BC:72:01:18:4F:E1
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer:       /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial:       019C421030B962502BBBC57DA541B4A6EB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number:          126E
Signing time:             Mon 09 Feb 2026 11:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:22 +0000
Files and hashes:         1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: nNwR7OSchTVC1v4dI23cEFHK0OslVU3lQdkE0j44iuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:30:b9:62:50:2b:bb:c5:7d:a5:41:b4:a6:eb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
        Validity
            Not Before: Feb  9 11:01:22 2026 GMT
            Not After : Feb 10 11:01:22 2026 GMT
        Subject: CN=4adca7e99aaf9dfa6781b7ef1833bc7201184fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:96:e5:48:62:72:fa:a6:95:a3:59:71:1d:
                    4d:15:d5:92:77:1c:e5:5b:02:37:be:7d:9c:57:91:
                    96:e4:d2:cb:40:64:19:9b:a2:63:83:61:11:72:39:
                    87:01:73:11:d3:ea:d3:59:8b:da:36:ad:6d:b1:40:
                    09:b0:17:70:13:ed:45:ea:40:10:55:49:54:76:97:
                    e2:89:99:1c:36:b1:1a:02:69:7e:e8:fd:75:1e:8a:
                    c2:2f:a3:f6:e0:aa:e7:73:cc:a9:b1:96:47:f2:15:
                    aa:07:d4:e6:72:cc:63:39:26:67:ed:84:fd:65:f1:
                    4b:7c:7f:64:16:9e:c1:d4:82:6c:4c:ae:ca:d2:88:
                    4d:07:aa:10:d8:09:73:51:be:01:73:41:1c:15:87:
                    28:11:08:e8:57:8a:b7:92:02:60:b4:06:64:d9:92:
                    7e:1e:10:bc:1e:d8:cc:eb:69:3a:da:02:3d:a1:86:
                    83:b1:d1:11:57:4d:97:a6:08:cb:ab:75:d5:fa:fb:
                    02:5c:82:46:bd:89:be:45:67:46:2a:b5:b7:81:6f:
                    56:81:26:f8:8d:f0:f3:90:c1:18:20:08:e1:96:3b:
                    f2:40:02:e9:a5:8c:f6:cb:da:ec:fd:0e:55:fa:86:
                    1c:d5:11:05:24:01:75:26:fc:03:c9:91:1b:5e:62:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:A7:E9:9A:AF:9D:FA:67:81:B7:EF:18:33:BC:72:01:18:4F:E1
            X509v3 Authority Key Identifier:
                keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:94:fe:18:0b:fb:d8:c4:1d:65:c3:38:72:84:c5:ab:66:a2:
         63:9c:8d:98:b2:40:93:d6:bf:ff:e0:94:af:e2:28:69:cd:1e:
         29:09:30:c1:03:0d:92:cf:27:15:5f:98:f1:8e:5b:04:3b:de:
         dc:bb:36:8c:2b:5a:f5:ad:62:a4:be:65:3d:87:f7:d7:5d:93:
         6a:59:43:f9:d3:e7:12:6e:73:73:4b:0e:12:3e:82:b6:02:68:
         a5:73:2c:fd:05:a0:b6:eb:2f:f1:0f:9e:47:f3:ae:c3:7f:b4:
         e7:73:64:f7:78:77:92:23:4f:4e:66:e4:e0:a1:99:29:88:5d:
         d8:05:b9:56:a0:79:b0:88:1a:52:97:a0:f2:7e:25:fa:c6:b1:
         4d:8c:64:23:09:f0:c4:da:f0:6e:02:60:de:1c:96:19:76:d5:
         69:16:9e:48:71:61:2b:df:08:a5:ca:c8:2c:73:66:d0:59:53:
         d7:64:79:0f:9e:43:2e:99:d8:ea:af:66:32:29:a2:ba:a8:6f:
         9f:81:73:99:ea:a6:fc:23:1e:36:68:f3:99:83:a4:0a:1a:b3:
         02:75:56:c6:08:d8:d9:f3:71:79:d4:46:60:9b:57:61:2b:14:
         e9:83:15:a1:28:24:52:2f:e5:af:1a:3c:ad:2e:97:e1:9d:4f:
         35:3e:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:18 2026 by rpki-client