This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
File:                     ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft (raw, json)
Hash identifier:          5SAG2+HkYgbPoJF98ek4sEyYQ4+TIxjvOSy6JXgK1/Y=
Subject key identifier:   50:85:8E:D1:0A:3B:FD:83:DE:2C:87:A6:FA:64:56:DB:B9:BC:66:F9
Authority key identifier: 66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4
Certificate issuer:       /CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4
Certificate serial:       019C44D9C2F00B146C820DC902894EB31E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
Manifest number:          0104
Signing time:             Tue 10 Feb 2026 00:00:47 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:47 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:47 +0000
Files and hashes:         1: CODBHLL76kvV5Qoxx12ifwuJ430.roa (hash: aYjgy7JYh3+PwYmVg/lQZAVSTIaumS2/ByrRxhGDLbo=)
                          2: ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl (hash: S98oCZ09HLEhEjNAVtoX/8M1xQ4lS3DmdHGnD+PK7+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:c2:f0:0b:14:6c:82:0d:c9:02:89:4e:b3:1e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4
        Validity
            Not Before: Feb 10 00:00:47 2026 GMT
            Not After : Feb 11 00:00:47 2026 GMT
        Subject: CN=50858ed10a3bfd83de2c87a6fa6456dbb9bc66f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:92:06:9f:09:70:c4:d0:ec:93:1f:b9:ff:
                    82:8e:61:ba:d9:ae:7d:ba:d0:25:61:2c:d0:af:3a:
                    d5:2b:dd:f5:9c:17:67:bd:77:80:42:d0:15:c8:d1:
                    04:ad:2b:ba:31:b6:64:b5:38:f8:5a:6a:d8:4e:59:
                    ea:d8:4f:ea:df:a7:5e:80:be:70:0f:fe:db:b4:bb:
                    4a:38:e8:f1:aa:1e:07:9e:62:be:4b:8a:48:dc:0a:
                    11:6c:78:2f:01:90:73:e2:d4:c1:3e:f5:d2:b5:46:
                    dd:15:7c:24:59:31:d6:51:dc:61:bc:ff:b2:98:4d:
                    92:97:93:f5:46:2f:ab:30:00:c4:be:41:12:53:98:
                    92:4a:00:46:80:78:5f:99:af:7b:e4:f5:2f:3c:db:
                    f5:83:d1:7b:8e:ec:bd:da:b9:11:f0:30:01:7e:1d:
                    00:7d:b9:64:48:1e:fe:ab:2c:01:be:05:bc:3c:b0:
                    67:ef:43:97:34:6a:7f:08:c4:12:ce:01:ae:37:d6:
                    b4:ae:a9:f3:85:85:40:5d:ff:09:c6:bc:6b:32:76:
                    19:e4:86:ea:22:4d:96:e2:cd:9b:56:dc:51:77:f6:
                    f5:6d:88:f5:67:2f:13:5e:ef:55:17:e6:55:12:a1:
                    18:4f:3d:c3:23:8f:59:43:83:fd:39:0e:67:36:d6:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:8E:D1:0A:3B:FD:83:DE:2C:87:A6:FA:64:56:DB:B9:BC:66:F9
            X509v3 Authority Key Identifier:
                keyid:66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:0e:c6:7a:23:d0:a4:67:69:45:9d:fb:63:58:18:60:d7:
         aa:5c:1f:7c:5a:52:89:09:23:16:a2:bd:ab:56:18:43:6a:d4:
         29:eb:c9:18:0d:cd:1b:ce:02:78:c6:51:8b:f3:f1:7c:d4:af:
         29:b6:b8:2d:3a:fa:e2:9f:fc:ec:b3:fb:a7:99:1e:df:7d:4e:
         86:34:94:4d:59:ed:d2:73:d7:a3:27:cb:4a:0b:ea:f7:80:c4:
         73:ae:cc:86:cc:4d:48:e5:c3:fe:ff:69:cc:47:56:e4:86:6d:
         59:ac:0d:32:d4:42:1c:83:e6:3c:a9:9c:5b:a5:e9:08:3c:32:
         9c:76:6d:0a:17:c0:26:68:92:ff:df:75:c8:a5:df:11:32:2c:
         81:b9:ff:16:5b:0e:8b:22:51:50:19:69:86:b0:24:ff:d3:22:
         5a:30:cf:68:1d:f2:ce:33:e0:07:7d:46:9d:af:50:ac:62:b3:
         46:79:ff:86:79:05:e8:32:2a:42:2c:54:17:85:8e:39:c5:48:
         86:3c:c3:41:8e:20:ad:ab:2b:a7:3d:08:2b:17:26:79:37:e1:
         90:e2:ce:cd:7f:59:47:75:8f:d2:73:78:9c:28:7e:06:b7:7f:
         f1:2b:41:e3:38:66:59:92:6a:06:61:27:18:6a:e9:ec:e8:74:
         b4:1d:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:01 2026 by rpki-client