This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File:                     ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier:          Uf0DpJWoA+kTrtf5naHjmwagmZIFE50wSQK//J5GRZs=
Subject key identifier:   B1:FE:DD:C7:E5:DD:7C:48:5E:A7:21:D5:22:D3:61:E9:D5:6B:05:F6
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer:       /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial:       019C416AB44DE038B0260FAABA2734B12348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 08:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:37 +0000
Files and hashes:         1: 3kDRvhyYGLhqA-55XbpAGrLNvl0.roa (hash: Kd1IvjvDoUSLBaI4Td/hVyTLL9UmLBvq34CNcLf8TLU=)
                          2: QApS9RyloD4NoDnpEa95FuDk1ZI.roa (hash: CiFqNnH0ZASzXfep2jny9mXvFUeXbEdlqNdwXPVsg/I=)
                          3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: Fn+LMBMgJiSZ8iUq3u1j59lG5uXmNCLl8NyK/HrHxvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:b4:4d:e0:38:b0:26:0f:aa:ba:27:34:b1:23:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
        Validity
            Not Before: Feb  9 08:00:37 2026 GMT
            Not After : Feb 10 08:00:37 2026 GMT
        Subject: CN=b1feddc7e5dd7c485ea721d522d361e9d56b05f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:5b:34:a6:c4:06:92:e7:ce:30:8c:61:30:
                    bd:2e:a7:7e:7d:75:4f:c2:40:61:71:31:71:e4:89:
                    e2:4b:89:65:ce:10:93:a4:6f:e3:f4:02:39:80:cd:
                    0a:4b:16:2f:ef:ad:15:45:be:33:2f:a8:0b:44:6a:
                    0b:86:33:96:e4:d9:7e:28:b9:d5:12:2d:40:64:6a:
                    6b:e4:86:e0:a1:61:c4:c3:84:97:7b:46:51:0c:9c:
                    6b:41:e0:e5:f0:e9:57:00:59:c2:26:b1:99:71:2c:
                    ab:09:45:69:c0:30:8a:1e:9c:a4:b3:50:0a:0a:09:
                    8f:2d:18:fe:97:bd:81:7e:34:1f:39:0e:53:6f:51:
                    7b:21:2f:f7:0d:60:a2:8b:89:ac:8e:19:37:09:78:
                    87:a5:a6:fa:f5:2c:ce:4a:9d:a3:b4:0e:9f:6d:3a:
                    54:20:42:6c:aa:42:0a:39:5f:23:e2:5a:06:a2:47:
                    29:35:5b:60:24:a7:2c:77:c9:21:f9:39:9e:05:1f:
                    81:37:e3:e9:b1:f0:b5:c7:d4:00:48:03:34:06:e3:
                    e5:23:b7:83:b2:7b:f8:19:35:9f:0b:36:7c:03:fe:
                    26:23:96:01:35:86:0f:5a:2d:d5:1b:57:9c:7f:61:
                    86:31:47:da:b4:41:79:9e:d6:0f:f4:fe:46:42:c4:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FE:DD:C7:E5:DD:7C:48:5E:A7:21:D5:22:D3:61:E9:D5:6B:05:F6
            X509v3 Authority Key Identifier:
                keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:65:a0:87:7c:ca:dc:c1:b1:d9:6d:44:3d:63:d3:b2:7d:af:
         09:d8:5e:5d:7c:f2:4f:d9:61:f1:08:23:cb:cc:66:69:ce:83:
         83:81:0f:77:4c:52:14:52:90:ed:41:9e:d4:b0:dd:cd:87:24:
         1e:fe:17:2e:08:fb:a6:a6:76:2e:2c:9d:9e:a3:8b:36:49:c2:
         4b:a3:1b:ce:56:dc:80:77:32:da:02:05:78:6f:52:d8:45:7c:
         8e:28:cd:64:55:cb:59:57:90:e2:44:ef:e1:0e:51:c0:a1:1a:
         42:30:42:6c:35:91:f1:48:97:1c:73:c9:27:70:28:c7:69:d4:
         2f:ba:74:24:d5:25:ec:c6:ed:cb:aa:e6:33:6a:55:26:7b:6d:
         67:1b:5a:38:53:dd:23:94:92:69:59:ef:a8:3e:75:5d:1b:0c:
         b0:8a:96:74:40:8b:2d:2e:54:53:18:b7:28:0c:cf:ec:23:1f:
         14:4e:37:27:b9:a7:bb:74:c4:5e:65:e1:3a:84:32:34:60:b3:
         37:19:78:8f:49:a3:b3:45:ce:2a:c2:15:03:62:11:1e:01:34:
         98:1d:d1:13:22:ed:43:fd:4c:b9:4c:9a:e4:a4:f9:2e:25:cb:
         5d:29:39:e0:29:78:03:dd:bf:f7:7d:5f:d5:99:8a:5d:78:eb:
         04:48:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:58 2026 by rpki-client