This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File:                     Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier:          m1eMpR0aHkVMc33iqb52O3x44CMepPyOqlSTRkeOE0Q=
Subject key identifier:   F8:31:B0:D7:9F:4D:BA:B1:8B:CF:30:65:AD:60:89:A5:75:35:62:72
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer:       /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial:       019C4321F6B0DAD84A4909E1A0A5C02C86EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number:          0F19
Signing time:             Mon 09 Feb 2026 16:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:25 +0000
Files and hashes:         1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: l8jLGM/z8g1usLqV7iqUty5Id4DKj50OfJeK7ZgxBao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:f6:b0:da:d8:4a:49:09:e1:a0:a5:c0:2c:86:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
        Validity
            Not Before: Feb  9 16:00:25 2026 GMT
            Not After : Feb 10 16:00:25 2026 GMT
        Subject: CN=f831b0d79f4dbab18bcf3065ad6089a575356272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:ab:fe:19:12:11:5e:d3:46:fb:4c:77:03:
                    f4:75:02:31:d9:72:a2:6b:0d:05:e9:ea:7b:18:b2:
                    f5:f3:35:fc:80:b4:8c:1b:cc:74:49:de:01:62:84:
                    cb:9a:bf:1f:c0:19:9e:9b:2b:c3:36:35:94:40:94:
                    f1:19:5c:bd:3b:5e:e0:a6:82:49:ee:fb:87:17:be:
                    6a:4a:4e:0f:85:6b:94:a3:f3:cc:bc:b0:4c:07:c8:
                    ba:e5:b7:0a:eb:09:10:a2:f2:76:3b:00:19:5d:91:
                    e3:b5:9b:92:c1:dc:18:55:b0:7f:c7:ca:2f:4e:08:
                    31:e8:06:89:41:51:17:7b:e5:63:ba:5e:26:d3:d2:
                    46:61:ac:ec:30:a2:1b:19:fc:03:16:22:c6:bf:05:
                    6f:07:6c:56:59:96:ed:9a:17:27:cb:d3:9d:ee:be:
                    95:dc:39:ef:de:d1:fc:76:ca:b8:63:83:03:74:2c:
                    17:52:3b:a9:90:3d:d4:50:c1:45:25:9d:13:23:50:
                    e8:08:59:29:c0:5d:b1:87:74:17:ab:31:73:ee:11:
                    a8:ac:9c:b2:6e:7d:53:86:6a:3a:4b:02:9c:d5:91:
                    0c:04:b2:81:92:c1:4d:bb:d0:b1:be:ee:e5:91:17:
                    23:66:4b:a1:ef:f9:9e:0d:88:fd:b2:90:9b:dc:ce:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:31:B0:D7:9F:4D:BA:B1:8B:CF:30:65:AD:60:89:A5:75:35:62:72
            X509v3 Authority Key Identifier:
                keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:1b:73:5b:69:a1:f6:d4:5f:cd:21:a4:cc:51:53:d5:45:
         c0:21:f1:f1:32:fa:c1:66:b7:85:9a:58:f8:9c:74:8d:49:ce:
         ad:84:4e:30:0f:f2:80:35:ef:31:f7:f3:05:78:8c:f1:2f:68:
         ca:80:51:13:b7:b5:46:0c:86:f4:cd:c2:25:62:f0:dc:fc:cb:
         b1:43:b9:23:8e:70:55:73:66:cd:b1:34:88:27:85:36:d0:1c:
         b9:ef:ba:16:ef:dc:c5:be:51:c3:c4:8b:ea:86:64:fa:3b:4f:
         95:93:28:30:a8:43:72:66:df:e0:c6:59:94:54:3c:2b:95:11:
         47:1d:42:df:de:cc:fe:6a:8e:30:c0:e7:3c:ea:b7:3e:1a:0e:
         5d:c5:73:25:e8:db:76:0d:55:3d:5d:35:5f:99:4e:eb:74:25:
         de:67:f3:78:d7:c6:52:bb:db:56:73:b1:00:4e:71:09:7f:6b:
         90:c8:75:22:43:6d:a5:0c:af:4e:15:02:c6:64:ea:2c:3d:83:
         b1:b5:3d:6c:3c:ca:cd:87:5b:2d:74:d0:1f:19:fa:e8:13:de:
         b6:88:52:5a:ef:ae:a8:e8:2a:ae:a7:b7:4a:b8:29:93:bd:0e:
         c9:7f:55:29:ac:ac:d1:f5:17:b3:36:35:6b:50:e4:1b:9e:6e:
         6d:c3:ca:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIfaw2thKSQnhoKXALIbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Nzc5ODdiNGYxYzE3ZDIxNDY1YTM0YTkwYmQwMmI1MmVh
NmUwMjcwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD
EyhmODMxYjBkNzlmNGRiYWIxOGJjZjMwNjVhZDYwODlhNTc1MzU2MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL2r/hkSEV7TRvtMdwP0dQIx2XKi
aw0F6ep7GLL18zX8gLSMG8x0Sd4BYoTLmr8fwBmemyvDNjWUQJTxGVy9O17gpoJJ
7vuHF75qSk4PhWuUo/PMvLBMB8i65bcK6wkQovJ2OwAZXZHjtZuSwdwYVbB/x8ov
Tggx6AaJQVEXe+Vjul4m09JGYazsMKIbGfwDFiLGvwVvB2xWWZbtmhcny9Od7r6V
3Dnv3tH8dsq4Y4MDdCwXUjupkD3UUMFFJZ0TI1DoCFkpwF2xh3QXqzFz7hGorJyy
bn1Thmo6SwKc1ZEMBLKBksFNu9Cxvu7lkRcjZkuh7/meDYj9spCb3M5mAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgxsNefTbqxi88wZa1giaV1NWJyMB8GA1UdIwQY
MBaAFGd3mHtPHBfSFGWjSpC9ArUupuAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUt
MTVlNzM4MTFlOTU2LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUtMTVlNzM4MTFlOTU2
LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcMbc1tp
ofbUX80hpMxRU9VFwCHx8TL6wWa3hZpY+Jx0jUnOrYROMA/ygDXvMffzBXiM8S9o
yoBRE7e1RgyG9M3CJWLw3PzLsUO5I45wVXNmzbE0iCeFNtAcue+6Fu/cxb5Rw8SL
6oZk+jtPlZMoMKhDcmbf4MZZlFQ8K5URRx1C397M/mqOMMDnPOq3PhoOXcVzJejb
dg1VPV01X5lO63Ql3mfzeNfGUrvbVnOxAE5xCX9rkMh1IkNtpQyvThUCxmTqLD2D
sbU9bDzKzYdbLXTQHxn66BPetohSWu+uqOgqrqe3Srgpk70OyX9VKays0fUXszY1
a1DkG55ubcPKVg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:33 2026 by rpki-client