This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File:                     zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier:          x10CEE27NuGtdWUgz8MHRCxGU6CeHwrFiuI6SZScaLQ=
Subject key identifier:   16:76:EB:2C:3E:7B:FC:AD:3E:FC:1C:D4:EE:5A:E7:E3:27:C3:8C:43
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer:       /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial:       019C43906299415E29700C5D86934B5B64E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number:          0A24
Signing time:             Mon 09 Feb 2026 18:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:01 +0000
Files and hashes:         1: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (hash: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU=)
                          2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: pBW4iZtPSYX0R0SldWZESIwt9X57Ox7C6mNWgSmMYFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:62:99:41:5e:29:70:0c:5d:86:93:4b:5b:64:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
        Validity
            Not Before: Feb  9 18:01:01 2026 GMT
            Not After : Feb 10 18:01:01 2026 GMT
        Subject: CN=1676eb2c3e7bfcad3efc1cd4ee5ae7e327c38c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:a9:11:3e:0a:56:1b:18:e4:62:26:56:5c:
                    42:b8:43:3e:64:de:8a:40:2b:b7:53:5b:0b:b3:19:
                    9d:c0:b2:4e:c7:b5:6e:99:98:3d:87:bd:e8:28:73:
                    d5:0d:9c:48:90:18:d2:48:ba:b8:f3:88:99:70:a8:
                    e1:35:24:2e:1f:ca:65:99:bf:d0:f6:d4:cd:89:d5:
                    06:59:66:3f:fd:2a:66:58:50:40:e1:1e:b3:ef:8d:
                    8b:8c:5f:a5:33:fc:44:a7:b9:0a:02:ab:d5:e3:fe:
                    83:f5:a4:e5:d9:0e:23:13:68:87:a1:1e:d1:7b:32:
                    9a:fc:52:5f:64:e8:03:01:83:da:a4:46:c9:46:1d:
                    5e:39:1e:18:c8:99:8d:64:84:e0:15:03:ec:72:06:
                    19:9d:c8:8d:31:19:93:4c:64:c1:47:ae:53:9a:45:
                    1b:0f:d4:f8:df:bc:c0:9f:a2:e1:2f:4f:b2:d1:b1:
                    35:0b:63:5b:8c:76:97:aa:5f:4f:f1:4e:e8:91:b0:
                    29:90:24:b3:d6:30:b0:76:1d:21:3a:c7:25:66:2c:
                    8d:b6:90:64:6e:43:7b:0a:38:04:d9:1b:dc:36:df:
                    0d:b2:89:27:10:31:0c:4d:df:ca:f3:ea:88:64:c8:
                    91:e4:18:59:0d:7e:29:37:6f:8c:0a:33:08:23:f4:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:76:EB:2C:3E:7B:FC:AD:3E:FC:1C:D4:EE:5A:E7:E3:27:C3:8C:43
            X509v3 Authority Key Identifier:
                keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:d7:d4:d9:53:b0:64:a4:21:73:06:fc:f4:7b:3c:a6:76:
         06:c0:47:36:3b:ea:5a:e7:67:01:38:8e:15:fb:11:7d:8d:57:
         b9:96:d5:98:4a:06:22:e6:5e:c8:ff:98:56:73:a8:3d:9e:0d:
         8c:c2:bf:c0:3b:30:07:38:3e:fc:ea:0e:c5:f8:b5:2d:1b:d2:
         78:cb:7e:36:0e:b8:8c:92:7b:01:65:30:0d:36:65:04:a9:7c:
         10:08:fd:91:7d:77:f1:64:15:ba:f1:1d:fa:ae:c1:9a:d2:c3:
         fc:ca:cd:43:2b:2f:d0:b4:ba:72:39:7f:f3:0f:33:3d:a5:2a:
         1c:06:78:f0:75:44:a9:4b:75:bc:44:c6:83:b4:db:f8:bb:d4:
         b9:b8:87:a6:b3:c0:36:13:69:a1:e5:d4:db:d0:fa:81:4e:d7:
         c5:b0:54:d1:1c:67:ca:df:af:fb:03:6f:7e:97:f2:a9:b4:91:
         d5:ec:a0:fe:6f:0d:6b:bc:25:b1:8a:5b:89:bc:89:4c:55:15:
         1b:35:e2:79:2c:9a:88:9a:b0:38:ef:97:c0:21:5a:83:3e:07:
         cc:e9:53:e0:7f:91:47:f4:f1:44:1b:34:7f:d6:ca:ce:56:55:
         a6:cb:0a:0c:ca:e2:4f:ae:08:3c:ff:6b:c6:a4:e7:26:ae:6f:
         63:09:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:13 2026 by rpki-client