This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File:                     1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier:          t6xZL1P6goHBgVAN9WjQvfMJ0mwyRhCYD55RlixqhWc=
Subject key identifier:   06:6E:0F:07:97:CA:17:DB:A5:E5:16:44:83:45:05:7F:B2:5A:63:61
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer:       /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial:       019C41D8A06586D3DDBA2524984502AC8118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number:          0906
Signing time:             Mon 09 Feb 2026 10:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:41 +0000
Files and hashes:         1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: R/Ml466z8eZIuIA5/1OJvN+RptIxAzUfSuOLchHtrhI=)
                          2: TDwfp4rIi08J2i1D2xc2gTMPN8c.roa (hash: IrD9bh86XLcjQSDpy3yh8FKWxLQrtSlGJWXYqL6njZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:a0:65:86:d3:dd:ba:25:24:98:45:02:ac:81:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
        Validity
            Not Before: Feb  9 10:00:41 2026 GMT
            Not After : Feb 10 10:00:41 2026 GMT
        Subject: CN=066e0f0797ca17dba5e516448345057fb25a6361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:51:93:12:8b:8a:5f:13:aa:77:0e:b5:cb:
                    c0:3a:c5:17:19:2d:9c:eb:7e:f6:22:5b:26:19:15:
                    ee:5a:6d:f4:e2:9d:c9:4b:aa:ee:42:f1:7b:f0:c6:
                    2d:9d:e2:d9:16:ef:e7:30:04:4c:98:4a:fa:05:61:
                    5f:a4:7f:2d:73:fa:3c:52:81:b5:3d:66:60:fe:9a:
                    12:78:39:4e:ac:da:6b:7e:3d:f4:e3:ad:b6:32:43:
                    dd:da:be:6f:9a:21:66:fb:2b:70:8b:5b:fa:b4:bf:
                    5f:f5:9f:ce:e9:ca:b2:41:57:37:c0:59:4b:22:80:
                    d4:a7:3c:e6:d4:e8:7b:56:29:c7:4c:78:7f:45:05:
                    01:08:6d:43:43:ef:e1:43:40:9c:9e:95:83:ea:2d:
                    39:87:28:9b:05:c7:e8:f8:f9:f9:92:d2:99:cb:7e:
                    4e:f9:a3:d3:ad:f0:5f:9f:77:c4:3e:87:10:9b:e1:
                    a0:f8:eb:b9:51:33:d3:c0:7c:01:57:dc:04:02:3d:
                    57:d4:81:a8:40:c7:2b:45:f7:42:90:ec:13:2f:f2:
                    1b:d0:62:2e:5b:81:5f:5b:65:9c:c9:81:a1:bc:22:
                    b4:cd:f8:dd:aa:04:92:d1:bb:5e:d6:ca:ff:fc:c6:
                    9b:a4:03:e6:a4:e7:76:99:9b:63:39:49:23:73:ac:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:0F:07:97:CA:17:DB:A5:E5:16:44:83:45:05:7F:B2:5A:63:61
            X509v3 Authority Key Identifier:
                keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:a2:78:83:9e:18:4b:d3:e4:43:27:98:be:80:cc:df:8b:
         49:e2:8d:f4:af:34:dc:e1:d5:1a:1c:ed:6a:f9:37:50:62:af:
         25:38:f7:16:32:09:87:96:d3:72:47:e4:82:7d:d9:d0:bf:4b:
         6f:17:cd:c7:02:7b:8a:8c:a3:67:00:40:51:ef:a2:a7:dd:6e:
         8c:32:89:3e:28:67:10:18:1a:bc:a5:17:24:d9:85:ac:2b:47:
         fa:94:ef:b5:0e:57:a6:15:64:a8:48:8c:11:59:3b:27:f4:41:
         14:59:d0:58:9d:d3:6d:2b:8d:6c:13:9f:02:f7:50:0c:50:ae:
         c6:23:43:90:97:94:4a:31:53:96:47:59:dc:6c:8e:df:f6:84:
         3f:6a:12:59:ca:c4:cd:44:5e:c0:97:4a:10:9a:62:f7:25:14:
         ef:37:f7:cd:53:10:06:5f:b1:90:bf:79:eb:1b:75:ef:11:fa:
         f0:7c:2e:bb:b2:23:ce:27:92:96:94:a1:da:22:92:00:6f:83:
         7a:cb:bf:bd:55:d9:72:f1:77:dc:68:4a:c1:66:15:45:ec:39:
         91:e9:fc:cd:ad:f5:26:00:10:a0:07:25:00:f9:ab:7b:a2:8c:
         3e:fd:c3:cb:17:f7:ab:9f:82:a5:88:7a:ea:65:d8:92:7c:76:
         db:07:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:28 2026 by rpki-client