This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File:                     ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier:          wVWOYw6MxARtGAU/F/7Pmt35kyUqcWTyAyPRHvCQtqY=
Subject key identifier:   23:18:68:F3:CC:74:BE:8C:D7:22:29:05:D1:F1:9C:86:0E:C2:34:40
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer:       /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial:       019C41D8C3D27C9A9EEA478E5D4F757D32F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 10:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:50 +0000
Files and hashes:         1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: hP30r97OLPu7Wvp5YeqWXodQ+SO0whm+DPiOCmK4DaM=)
                          2: jwb3_W1JU1Qdkl3kW-bgLNh66os.roa (hash: 1Pb1Phz3ZFSFx/2QmC/w8mjEvm4/tTuC+LVbbpWItSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c3:d2:7c:9a:9e:ea:47:8e:5d:4f:75:7d:32:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
        Validity
            Not Before: Feb  9 10:00:50 2026 GMT
            Not After : Feb 10 10:00:50 2026 GMT
        Subject: CN=231868f3cc74be8cd7222905d1f19c860ec23440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:e8:14:9e:d4:3e:38:78:0e:99:72:8d:eb:
                    70:86:47:18:c1:4b:25:33:bd:81:d2:9d:9a:4c:61:
                    b6:2d:98:b5:74:48:05:e9:43:df:c9:6b:07:6e:b1:
                    d1:5b:ff:f4:44:38:5b:0f:03:2c:22:1f:27:f1:ff:
                    be:63:60:6e:19:23:91:20:c4:56:f7:08:67:d7:59:
                    de:56:0a:9b:70:bb:9e:32:7f:9e:7b:31:7c:84:4f:
                    e2:70:ce:a1:7b:4f:2c:e1:5b:9f:88:fc:d0:83:ff:
                    5b:9f:f7:2f:a3:dc:2e:11:80:2e:b0:ea:04:c3:02:
                    3f:b5:41:ae:95:4b:86:f0:5b:de:c3:2d:a9:53:8a:
                    86:6f:1b:93:d0:4b:2b:f3:2a:1e:05:d8:99:29:ce:
                    1f:1b:92:9a:de:b0:47:61:61:a7:c7:ec:af:8c:2e:
                    f6:5c:e7:52:c2:b4:b5:14:a6:8e:a9:2b:e7:17:6e:
                    41:8e:94:33:7d:b4:95:55:da:c0:a5:4f:43:78:44:
                    d5:8b:f6:c2:a7:f7:b6:e0:4f:d4:af:b9:7c:30:5a:
                    b0:87:33:bc:96:98:0a:78:df:b6:98:5d:4c:7c:e1:
                    b8:e4:f2:f4:d4:f3:49:85:0f:40:2e:12:d9:f2:33:
                    1f:09:01:62:9d:e1:0c:86:33:de:78:e8:10:22:1f:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:68:F3:CC:74:BE:8C:D7:22:29:05:D1:F1:9C:86:0E:C2:34:40
            X509v3 Authority Key Identifier:
                keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:77:40:fc:73:fa:d9:85:e5:f1:db:ad:ab:26:15:e1:e0:6c:
         1e:4e:f7:2d:6b:17:69:53:9f:15:17:67:12:a2:9f:f9:2a:58:
         81:a3:16:15:e4:a7:fe:5e:f3:36:80:76:dd:99:5e:69:7c:2a:
         95:99:79:d4:82:91:96:f1:c2:d3:8f:d5:b0:b0:3c:00:b8:60:
         3b:20:18:02:bc:df:95:21:db:66:34:fe:c8:40:a6:4c:f3:4b:
         ab:c7:c8:98:1c:c4:6e:5d:44:7f:dd:87:9a:ea:83:87:26:b1:
         61:ae:d5:72:f4:2a:f1:a3:f6:b8:43:78:78:ec:c2:bb:05:b2:
         4d:71:a0:72:c4:e9:b2:3f:8b:46:30:2f:b1:8b:f4:7a:1e:44:
         45:53:06:03:f7:9b:c5:9a:b6:25:cb:ec:58:e9:22:8f:d9:f7:
         3a:07:2e:58:a7:de:05:b6:a6:6b:66:fc:2e:1b:61:68:1c:a6:
         45:08:e6:e8:e9:55:5a:16:9a:54:15:2e:69:70:77:b4:03:3a:
         20:f3:6b:fd:17:c7:d2:e1:50:d5:50:ab:56:f2:34:95:31:f5:
         a2:dd:e9:e5:0c:4e:ca:fa:ed:a7:61:dd:b7:28:a4:83:d5:d4:
         81:e3:82:c9:1c:16:ff:59:f9:8f:78:5d:40:2f:f0:36:65:f3:
         89:08:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:26 2026 by rpki-client