This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File:                     ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier:          kHOuwEaG+vr6PXqaaIHo7QbVQ06IlC7hhnKiaex0Nkk=
Subject key identifier:   B0:2B:9B:5E:DF:9D:18:F2:FF:C5:E9:DA:55:ED:C8:B1:5D:D3:7C:2E
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer:       /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial:       019C42466ABAC70E213B1A72595375799DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number:          0E6C
Signing time:             Mon 09 Feb 2026 12:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:36 +0000
Files and hashes:         1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=)
                          2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: pi+7aojYwLyaD8xWRcBiDDEQ1iAyM+SfR6aenNJX0OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:6a:ba:c7:0e:21:3b:1a:72:59:53:75:79:9d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
        Validity
            Not Before: Feb  9 12:00:36 2026 GMT
            Not After : Feb 10 12:00:36 2026 GMT
        Subject: CN=b02b9b5edf9d18f2ffc5e9da55edc8b15dd37c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:bf:6d:f2:39:00:67:3b:e0:66:c0:ef:2b:
                    a3:28:fe:fc:b1:fd:a1:d4:c3:56:3d:dc:b2:18:fd:
                    74:90:23:63:fa:16:db:25:b9:70:d6:f4:ac:3a:63:
                    22:29:a6:11:94:e5:59:bd:e1:a7:0e:77:46:7d:67:
                    1e:94:24:12:27:98:af:fa:b5:dd:59:98:b3:9d:7c:
                    a8:2e:ea:63:c8:cf:a5:04:51:90:24:9a:74:81:f7:
                    17:9e:48:8b:96:a1:1c:87:04:c9:dd:9a:5b:91:5b:
                    1c:48:15:b4:b3:41:e2:9f:08:9b:03:31:ba:0a:59:
                    ab:a0:8b:fc:eb:b5:54:cb:4d:e4:f8:1f:aa:42:aa:
                    38:3c:29:62:15:f8:44:83:8a:74:a5:f0:51:c7:26:
                    5f:42:54:01:8f:a5:63:f5:d1:9e:a8:2a:5e:a2:00:
                    26:29:05:74:cf:c7:4d:75:22:4e:c4:ae:e5:62:97:
                    12:00:4f:89:91:6e:12:ba:a9:f0:86:95:c2:bc:60:
                    a7:4d:e7:ad:96:b2:56:db:45:36:0e:9a:0c:c6:d3:
                    fc:b8:61:75:6e:a1:49:91:31:8c:a3:98:80:12:19:
                    51:f7:52:59:98:b9:46:ee:18:c0:fa:f4:dc:49:25:
                    0b:82:0e:06:e8:ed:10:b3:be:13:05:1e:d5:73:ba:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:9B:5E:DF:9D:18:F2:FF:C5:E9:DA:55:ED:C8:B1:5D:D3:7C:2E
            X509v3 Authority Key Identifier:
                keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:43:07:ad:5d:0e:7e:2e:67:73:fd:cc:5b:63:6d:42:52:4d:
         23:d8:7f:14:76:4e:f8:6c:7d:44:42:de:22:22:9e:f7:ad:52:
         4b:a3:82:a6:1b:26:28:06:4b:1d:ba:f7:cc:43:5c:24:62:33:
         e0:56:b9:0f:85:cf:86:9f:e3:a6:52:ff:1d:99:5c:0c:73:f8:
         85:12:d2:b3:43:06:a3:7e:7b:40:c5:00:ce:84:63:30:59:7e:
         4f:ac:06:58:4b:ed:ea:59:b7:a8:c6:d8:15:51:1f:0c:3e:c2:
         c7:2e:4b:62:63:f6:26:45:8f:b8:13:4d:27:f0:fd:f2:97:0d:
         1e:72:87:94:9d:eb:b2:66:73:23:cf:17:11:21:47:af:3d:89:
         3f:53:3d:9c:e5:af:87:f8:56:68:16:98:ff:b6:4a:a5:01:f0:
         35:f6:07:32:25:15:51:a8:3e:82:25:56:54:07:62:69:df:b6:
         42:c0:bf:78:03:14:e6:e0:9f:99:59:7f:85:99:8b:26:fa:07:
         d1:e4:df:d7:97:31:25:e9:18:80:a3:3f:29:0e:00:84:ae:5e:
         99:11:79:75:93:aa:8e:54:7d:27:85:45:8d:b8:02:37:f0:b3:
         95:04:95:7b:0a:e1:01:e6:ae:f4:71:0f:2b:64:ae:e1:79:77:
         a9:e5:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:28 2026 by rpki-client