This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          JP2m3dsZvuAHo/CyoG8mDRMNDrzymcbETeiUsavBcaQ=
Subject key identifier:   92:CF:A2:E7:64:10:0E:C4:F8:ED:99:B2:48:B7:50:BA:B8:ED:2E:99
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       019C4321E4CD0E47D8AA062EAAE440FE4BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 16:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:20 +0000
Files and hashes:         1: dyIfoHvYEfN77rehdk6Hr_OLRAE.roa (hash: xcmHvUmEQ2Xk7WqYhP6N4oZ9W7Pc6AjsjVYgGRTZexw=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: jErKrO/HNqriissWxmHoiJSe5ktnyHZwYuQAVKUszPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e4:cd:0e:47:d8:aa:06:2e:aa:e4:40:fe:4b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: Feb  9 16:00:20 2026 GMT
            Not After : Feb 10 16:00:20 2026 GMT
        Subject: CN=92cfa2e764100ec4f8ed99b248b750bab8ed2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:6b:a6:93:d2:a1:b1:2b:ef:6b:f5:dd:36:
                    e3:86:8e:f7:ce:04:da:43:b0:b1:90:38:df:16:2a:
                    07:65:52:5c:b0:6f:b7:19:6d:fe:66:fb:23:8d:61:
                    63:78:db:90:76:6c:c9:d7:ac:cc:88:d0:2a:64:84:
                    8a:3d:cf:21:85:a4:ca:95:8a:69:8c:8c:5a:39:43:
                    ae:1c:a2:7c:88:94:ec:9c:75:7e:9b:33:95:00:d4:
                    1c:1b:a9:cc:16:11:c1:fb:f2:75:4e:1b:38:8e:e2:
                    c3:84:2e:f7:12:f9:6f:1b:d3:47:50:84:5f:ad:73:
                    18:14:23:2e:41:88:07:35:17:74:8f:3e:d9:8f:67:
                    fe:28:1b:32:ad:df:f6:54:a0:19:38:3d:e1:9b:ad:
                    a0:a2:ce:2e:8d:9e:3c:df:b2:a4:84:e6:b7:1c:76:
                    c5:12:3c:fb:15:01:c4:c7:f4:e8:d2:e7:ab:f0:9d:
                    a9:e2:ed:bf:f7:bd:18:52:ef:9f:c9:30:19:47:a1:
                    7a:1a:94:4d:13:c4:ed:78:e4:2f:85:66:13:9d:bf:
                    ab:9b:61:e7:c3:2f:64:3a:d5:18:99:c4:71:ab:f0:
                    56:76:11:d3:83:43:30:08:02:92:12:70:77:24:2d:
                    a2:a3:8e:cc:ee:38:44:c8:0e:d7:d4:0e:a3:1c:cf:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:A2:E7:64:10:0E:C4:F8:ED:99:B2:48:B7:50:BA:B8:ED:2E:99
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:f0:b1:bc:c6:85:40:ec:9d:ba:db:8c:0e:10:e7:b5:61:
         80:d1:ee:f3:2b:0a:12:4a:be:be:4a:53:a1:aa:af:85:50:59:
         83:0e:c9:52:e6:74:47:2b:45:fc:e2:b8:9b:50:28:b2:6c:6c:
         31:2b:20:17:cd:ee:f3:23:80:01:2d:4c:2f:df:d8:6b:66:5e:
         b9:09:27:94:0a:fc:e3:5d:a9:30:32:c3:79:25:18:d9:df:b9:
         58:8d:95:f1:2c:ce:ab:ad:f0:1f:bf:cb:fa:b2:fb:1b:fa:8c:
         8f:29:8f:88:81:72:7f:97:cf:2a:c5:90:aa:08:a1:ed:6c:e1:
         96:de:8d:71:70:3e:54:48:93:6e:fc:a4:5e:5c:73:3c:30:e5:
         eb:a0:09:36:29:2f:be:99:67:f7:db:49:5f:73:d2:2e:cf:63:
         ac:ac:66:1d:8f:0b:15:3f:8e:75:18:39:f0:61:b7:14:72:e9:
         9b:56:f6:35:34:6b:78:9f:dc:c1:3a:23:c6:1b:d6:64:cd:07:
         dc:68:d3:3f:64:ef:50:71:55:1c:de:19:0b:96:19:8f:8e:1f:
         37:2b:9a:1c:3d:bf:ae:58:55:4c:fe:70:a1:ca:f7:4e:5b:89:
         46:42:29:7b:f7:14:fa:eb:81:f7:d9:d5:31:d6:2d:2a:97:47:
         6e:57:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:05 2026 by rpki-client