This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File:                     ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier:          kjNMbhgSV1xenlzaywQ8HcVk9dx6ZtIoBg2MXsxlaXA=
Subject key identifier:   B7:1D:96:C9:4C:46:A0:38:90:C4:11:34:29:11:83:C4:6D:CE:2A:20
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer:       /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial:       019C446C0BF5AFB14633C6C81C05A3BC773A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number:          0B54
Signing time:             Mon 09 Feb 2026 22:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:57 +0000
Files and hashes:         1: 2Wyxez9lwJjrigvZyDwF8uAZSJc.roa (hash: WXXGeEGJ4mJ3r+j3BB1vcRuu9R5jmSbFBlSKzGyw5vo=)
                          2: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: FcnLRO/Zw365xJmnWeiqj1wObas2LO5x+kX4NSti3uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:0b:f5:af:b1:46:33:c6:c8:1c:05:a3:bc:77:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
        Validity
            Not Before: Feb  9 22:00:57 2026 GMT
            Not After : Feb 10 22:00:57 2026 GMT
        Subject: CN=b71d96c94c46a03890c41134291183c46dce2a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:fb:44:b4:5e:e7:5f:ca:4f:28:fb:a2:4e:
                    54:9b:df:ef:75:78:3d:1d:17:c4:55:4c:4b:c0:08:
                    c1:90:43:55:52:70:d0:14:53:f6:af:94:f2:5f:64:
                    e7:48:94:b8:2f:e3:a2:7c:bb:5e:be:80:56:ad:0d:
                    16:8a:bc:5d:ba:e6:07:f9:7f:9e:ec:4f:19:39:d1:
                    93:65:b3:7d:0e:4b:3a:71:e1:d5:5f:87:63:d0:6b:
                    a2:21:35:54:aa:55:c6:88:e5:b3:a6:cf:65:e6:7f:
                    e3:67:4e:9d:a2:cf:dd:6d:73:ed:12:0d:e4:d7:42:
                    4a:6c:ad:b9:1e:c2:70:d1:89:5a:31:3e:79:2f:00:
                    de:9f:80:98:fb:d5:26:0a:65:d1:e6:46:5b:04:41:
                    b6:90:d9:86:12:c9:37:d6:a8:f4:22:9c:c6:f0:ff:
                    62:a5:f4:76:4e:f1:c2:6f:69:7e:a9:00:9d:be:80:
                    3b:d6:8b:72:0f:e7:57:e2:cd:19:79:aa:32:38:07:
                    fa:79:7d:b1:a5:13:60:63:6a:4e:3d:10:f3:8e:8b:
                    b1:f7:bd:0f:db:12:62:c9:15:a5:6d:ba:7b:5c:bd:
                    08:b7:b9:86:41:85:b0:3b:65:90:fb:09:6d:e4:07:
                    49:b2:71:e9:9f:e0:77:ec:8b:36:4d:2a:59:74:71:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:96:C9:4C:46:A0:38:90:C4:11:34:29:11:83:C4:6D:CE:2A:20
            X509v3 Authority Key Identifier:
                keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:e1:f0:2e:e6:15:66:02:18:f7:f6:28:77:eb:d9:4f:3a:
         d5:56:a9:b3:da:71:af:75:62:f0:6e:b0:33:ad:9d:a9:78:e0:
         ab:c6:f3:42:a6:10:52:d2:54:03:7d:7b:bc:b4:5e:f7:53:68:
         46:b3:79:09:c8:d3:f0:86:2b:16:38:25:72:b1:52:7b:98:28:
         30:fe:6c:41:1b:99:53:3f:1a:f9:eb:e4:07:fa:74:b0:f5:7d:
         43:64:d9:01:b9:b9:a9:4e:c9:d8:76:49:e7:61:48:17:40:f1:
         5c:16:3e:ee:b5:14:ab:ec:cc:44:e5:ba:77:99:ad:c2:5f:bb:
         cf:dc:07:dc:9c:61:b3:7a:c0:85:f3:7a:c2:22:47:67:ed:df:
         71:1b:59:77:45:00:fb:47:2e:53:7c:bc:78:81:3b:2b:9a:b4:
         5e:9a:11:e2:f8:8c:a0:b2:28:aa:8c:7c:42:af:92:d6:d2:23:
         f3:dc:81:fe:c4:16:2b:d6:44:b6:3e:63:86:25:d8:81:c1:2f:
         57:40:b3:ad:62:a3:9c:2f:1a:2c:5b:24:d0:a4:f6:25:5d:fb:
         3b:8e:35:6b:e9:42:74:15:32:31:be:c0:0b:31:4f:7c:88:c9:
         de:fe:09:51:73:64:9b:d0:58:4f:1f:3a:f8:c9:08:91:e2:2f:
         c6:da:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:16 2026 by rpki-client