This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File:                     ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier:          FM+QBLmooO0c4G9XLLR/qwWhfffXjzb0g1fAkZW+MCU=
Subject key identifier:   41:7F:41:A0:A3:FE:85:C9:51:F1:E0:FA:FC:6B:BD:10:FB:B4:08:66
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer:       /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial:       019C43C6D4774157719904828F2A85BA4045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number:          1330
Signing time:             Mon 09 Feb 2026 19:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:29 +0000
Files and hashes:         1: U6MNXsIiQyUWzfXpW3UnHYUwHkc.roa (hash: jrq3ihzHX+Q926Z95yemtvB18GgOprbk1pa3OArkcrg=)
                          2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: 9bpzZA+qOIv8JAexgMcpXJIvChMiJ8aLKwtQdbef2Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:d4:77:41:57:71:99:04:82:8f:2a:85:ba:40:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
        Validity
            Not Before: Feb  9 19:00:29 2026 GMT
            Not After : Feb 10 19:00:29 2026 GMT
        Subject: CN=417f41a0a3fe85c951f1e0fafc6bbd10fbb40866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:a4:0c:db:8e:2d:f1:3d:bd:6a:9a:92:05:
                    90:6b:c0:3f:18:90:77:b2:f4:a6:9f:47:a4:03:b0:
                    01:33:eb:c9:72:07:cb:bb:df:13:2a:41:7a:53:30:
                    04:ff:14:a5:fc:a3:1f:7f:05:5d:77:a3:7e:01:40:
                    fc:c0:43:98:a3:a2:57:3c:93:5a:18:8f:1f:87:18:
                    6c:4e:60:d4:db:de:96:34:29:c9:3e:23:60:21:01:
                    38:0f:37:ca:07:fa:d0:a3:71:35:dd:83:e0:11:14:
                    49:29:83:ad:51:cd:c1:61:07:02:41:c7:4a:df:82:
                    49:79:87:f3:73:fc:0d:71:65:c7:d0:84:5b:31:65:
                    4f:13:7f:bd:93:97:d8:30:6f:d6:f9:db:cd:f1:b9:
                    bd:74:4f:3b:e4:39:16:59:e3:96:51:3e:cb:b7:a9:
                    93:fc:44:5d:1d:1a:d8:d1:1a:06:92:9e:a9:83:ee:
                    2b:0f:c5:22:77:72:28:50:f3:d7:d3:54:dc:f7:55:
                    2a:17:68:5c:77:fc:13:28:9f:5e:bb:f5:39:b7:6b:
                    a6:d1:d4:25:ec:48:a0:c5:dd:21:64:7a:90:aa:40:
                    6b:c3:31:22:fe:70:e8:6f:6d:04:d6:1d:db:aa:46:
                    c6:00:e2:93:8b:64:c9:3c:01:15:26:fa:ee:c6:1d:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:41:A0:A3:FE:85:C9:51:F1:E0:FA:FC:6B:BD:10:FB:B4:08:66
            X509v3 Authority Key Identifier:
                keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:18:53:7b:a4:9a:92:2b:4f:ec:b5:6f:2e:3c:35:0c:c7:d3:
         a8:d2:d2:36:16:31:f5:fb:4b:cd:3c:ba:50:ad:fe:4d:d2:24:
         46:5a:40:27:c8:67:d5:eb:be:49:60:de:e0:3f:e7:02:50:ad:
         e0:13:cb:c5:6a:13:23:d3:f4:d2:77:1e:99:17:a5:7b:e6:e9:
         a7:3b:75:4e:44:f8:90:5a:5f:da:6c:87:5a:37:3d:d9:24:69:
         ed:a5:86:ee:d6:71:1a:93:4b:0c:28:44:28:c8:ae:36:be:ed:
         99:5f:6a:c0:a3:cb:03:06:a3:76:7a:a1:b9:1f:ee:9a:f7:e9:
         55:5d:54:fb:18:d8:d0:58:30:31:ad:e5:06:db:3c:8e:d7:a5:
         59:3c:1b:93:8a:d5:03:43:35:e6:4e:6c:08:bb:19:d5:52:49:
         b0:27:36:70:67:a3:47:71:90:66:09:5c:63:4e:30:d1:34:71:
         61:e3:bb:23:27:57:d5:13:4b:83:c0:91:2d:80:ce:07:fd:0c:
         6a:49:a6:c6:96:aa:85:83:af:3f:98:c6:04:8e:48:db:8f:ed:
         0e:5a:37:9f:1d:fe:5e:79:05:44:02:52:c1:6c:af:80:9c:59:
         48:ea:88:45:de:03:38:48:19:e0:21:60:cf:e3:45:7a:64:cf:
         36:83:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:14 2026 by rpki-client