This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File:                     z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier:          Rqub1Y34PErRBtOLRh7rEAigv4uUMITwm6a/u/nYnJk=
Subject key identifier:   04:92:50:7C:89:F5:DA:D5:A6:5B:95:40:94:D8:85:FF:3B:20:39:52
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer:       /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial:       019C44349D50395F754DD0BC859AC3388C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number:          052A
Signing time:             Mon 09 Feb 2026 21:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:24 +0000
Files and hashes:         1: X7bd6lhwCTS9gshWbVNBD-T1x7E.roa (hash: OdFNs5uEDNlf80PtTDUu5XNrjiIU+VK7u1fw+Wm4wjc=)
                          2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: at7o2kXEjrsNKawWS4I89dJKXS4O5LD3BJmRhOSxLcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:9d:50:39:5f:75:4d:d0:bc:85:9a:c3:38:8c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
        Validity
            Not Before: Feb  9 21:00:24 2026 GMT
            Not After : Feb 10 21:00:24 2026 GMT
        Subject: CN=0492507c89f5dad5a65b954094d885ff3b203952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:3a:11:b9:90:cd:fd:54:e5:02:a9:fc:f1:
                    77:7f:e8:61:85:1e:90:b2:e9:af:75:0f:94:3a:bd:
                    3f:e5:8b:fc:bd:a1:00:19:25:87:c5:9b:f5:a3:05:
                    53:dd:50:29:ad:1a:38:64:2c:b4:1e:64:fd:b0:e5:
                    44:29:82:e8:d5:71:b1:33:56:de:9e:aa:c2:02:35:
                    ea:1d:ab:24:99:64:f5:a8:70:9e:17:78:33:d1:dd:
                    c1:fb:be:76:96:bf:90:33:af:17:c8:8b:d4:48:4d:
                    e8:20:ec:81:da:15:85:24:c4:f5:3f:02:19:26:96:
                    e0:b4:e0:a0:6b:5f:fe:ab:0e:55:15:13:64:7f:89:
                    3a:2f:d1:6a:4e:45:de:9a:ff:d1:48:4c:61:27:1d:
                    19:48:37:74:24:83:68:ab:8a:6e:f2:f0:80:39:93:
                    cb:c4:fc:40:8e:11:8c:3e:f0:e0:e6:34:e9:52:77:
                    dc:f3:5b:cc:1f:6f:3d:df:96:25:c2:4a:17:c3:50:
                    4f:49:02:72:46:ac:33:39:d2:ff:82:76:b4:93:04:
                    df:32:91:e4:61:00:25:ef:42:45:a2:5f:f8:39:1e:
                    21:b1:20:0b:33:ea:e7:53:a4:2b:bc:b1:2d:cc:f9:
                    43:ed:73:a2:44:cb:fb:2c:74:5a:7f:2a:67:93:4f:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:92:50:7C:89:F5:DA:D5:A6:5B:95:40:94:D8:85:FF:3B:20:39:52
            X509v3 Authority Key Identifier:
                keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:3c:58:87:c7:90:4d:28:da:bc:80:08:c6:1e:bb:5c:3d:
         21:f6:68:d0:89:67:1c:e5:45:f3:84:db:94:61:cd:a3:ab:eb:
         29:a0:87:c0:a7:21:55:58:77:93:94:6e:54:be:6c:77:2d:8e:
         48:c6:e3:ec:19:f4:ce:5a:e1:bc:13:49:4d:cb:e4:1f:3e:90:
         af:07:ed:78:4e:80:74:7a:69:02:75:03:71:d4:ac:6c:17:56:
         24:c8:a4:4e:95:7a:3f:40:f6:75:c1:88:83:71:8b:d5:9b:0e:
         62:f7:e4:43:38:66:5c:53:53:04:fd:09:6f:78:23:ad:ae:14:
         75:81:ae:8e:ea:47:fc:d3:54:33:41:d8:1e:60:b7:bf:21:8e:
         5c:b4:cf:6e:63:30:7f:2e:ef:1e:4a:34:63:1d:74:f8:f0:12:
         da:2d:5a:f0:12:b9:5e:42:e6:f4:4f:4b:22:df:f3:83:8a:39:
         ee:52:d8:36:0d:d3:3a:e3:a3:61:9e:29:1e:41:8c:67:a7:36:
         63:27:df:81:2b:ba:ce:86:11:16:27:b1:43:d0:37:ab:dd:b6:
         7c:97:6f:8f:88:df:82:e5:ce:89:b3:a3:f1:f8:e7:80:dd:60:
         2f:3d:bc:bf:fa:1f:f7:66:c3:a0:56:cc:95:8f:bd:7e:17:59:
         6c:3c:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:07 2026 by rpki-client