This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File:                     ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier:          RqOVY4wL5AyvirRR0BqBsvWAdx3PpZAtXgFefqKBrLg=
Subject key identifier:   8C:EC:57:66:37:D5:7D:9B:47:AC:D0:6A:89:1E:21:46:56:19:F1:EE
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer:       /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial:       019C427DA3969DE0A539B5D144771AA39529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number:          1178
Signing time:             Mon 09 Feb 2026 13:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:56 +0000
Files and hashes:         1: UAWfVKnuk8IYKAompixGCt2JD4o.roa (hash: 1/V3Gy+/S90DB5jCTWmbg0P9LSy46xSNLw3S2ZpV9dA=)
                          2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: dgHVbi9RW5Lg+4N4E3JRBnMJExniFLeREajDRTcNiVg=)
                          3: pSa98oH-huWquSBFmrX0k5Ujlng.roa (hash: npS5cYOqhOIUYuKNtF1ja9QxSVDyjYQo/wMoA9bbK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:a3:96:9d:e0:a5:39:b5:d1:44:77:1a:a3:95:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
        Validity
            Not Before: Feb  9 13:00:56 2026 GMT
            Not After : Feb 10 13:00:56 2026 GMT
        Subject: CN=8cec576637d57d9b47acd06a891e21465619f1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:99:7c:d9:de:0b:0d:38:1c:54:43:2c:2d:
                    67:30:90:34:28:22:a7:5c:96:08:af:20:14:a7:7d:
                    ea:99:e1:b5:b2:36:d0:14:4f:60:ca:96:12:87:05:
                    b7:ef:ac:ce:23:b1:e4:5b:a9:45:50:7a:64:c1:b3:
                    e0:fd:18:03:18:91:5e:fc:c7:3f:f4:6b:d0:05:3f:
                    e9:67:08:7e:05:c9:9a:f2:b7:7a:20:41:2f:e0:e1:
                    66:91:99:3a:dd:a9:5b:41:ed:5a:aa:5d:ad:d1:d0:
                    73:e6:5c:05:fb:72:a7:89:b5:54:04:c4:de:a6:f7:
                    93:37:8f:e5:64:de:22:91:77:ea:84:c9:b1:02:98:
                    da:4d:ee:4a:ad:4c:75:a2:a0:4f:d9:3b:43:0a:6e:
                    6c:15:b4:e4:29:4a:bd:c8:9a:d3:8c:8f:d1:60:68:
                    70:b9:90:79:1f:20:fe:d4:b9:6c:67:4d:93:3a:be:
                    dd:bb:ed:82:d4:6e:df:c3:26:97:c5:3e:da:6a:01:
                    b3:fd:bf:85:4f:67:57:3b:c1:43:e9:ef:43:95:8b:
                    c4:14:ce:f3:7e:8b:8f:e2:a6:df:c4:14:ba:f6:ac:
                    ad:bd:f4:0f:80:4f:81:bd:0e:12:71:7c:9b:93:e8:
                    f6:51:77:5f:98:aa:ca:f0:c9:5e:77:65:d2:9c:d0:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:57:66:37:D5:7D:9B:47:AC:D0:6A:89:1E:21:46:56:19:F1:EE
            X509v3 Authority Key Identifier:
                keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:49:f2:62:54:a3:23:69:63:50:14:fe:13:ae:c5:2b:9d:09:
         5f:69:e8:38:4c:75:c3:d6:10:af:2a:0a:0b:f6:d3:63:0c:8a:
         6c:ed:39:42:49:5a:de:94:a8:e8:db:39:ac:98:13:a3:ee:22:
         24:b1:92:11:7b:8b:68:1c:0c:77:e5:fb:7e:99:aa:20:d9:6d:
         a5:85:1b:04:6a:4d:8a:e0:b6:39:b4:41:8f:81:f3:ea:6c:98:
         96:b1:d8:64:4e:17:43:0e:6c:e4:ac:fd:6a:f4:a9:63:85:50:
         94:75:56:ba:5f:f8:2b:41:5e:08:94:9f:6f:e2:03:51:c7:b4:
         4c:12:6c:52:ad:13:33:03:d5:00:7b:a0:d1:80:29:f4:e4:0a:
         f3:59:e9:1a:c9:8c:03:e1:2e:80:2e:50:ff:bc:07:ab:cc:78:
         3d:43:a9:b6:55:88:41:41:87:73:25:3e:b2:ac:bc:09:97:71:
         ba:d6:6f:18:45:75:b7:7c:6d:76:f4:51:b4:85:90:41:64:66:
         92:d9:a9:1d:4e:75:30:54:24:0e:1a:70:c7:60:53:89:94:42:
         b8:e1:14:6e:0e:e3:fa:1f:82:23:b5:c5:42:1f:27:f3:bd:f1:
         a5:23:26:f6:31:bc:dd:f1:f5:f4:f5:29:9b:d6:84:46:fa:74:
         4f:19:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:36 2026 by rpki-client