This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File:                     zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier:          Np686l9TuYT8zmGok7r5jOxAbdOeH3kGXEtXPSCQRy8=
Subject key identifier:   F1:2C:C4:98:22:8C:0A:9E:78:AB:B0:07:1E:D0:29:B0:BE:C8:CE:3F
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer:       /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial:       019C42B3EFF32CF786B964433AE83D06A952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number:          0D85
Signing time:             Mon 09 Feb 2026 14:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:14 +0000
Files and hashes:         1: TZjBq4odAN7upelKgfu1RPB63zo.roa (hash: bR7hMvq2zyGR+w9kpTZrW9dDTe7aMsxdA/NdBaV269g=)
                          2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: 4/8FAU+ZRt+90eVVMDjGU8RJw3+F8QVqvfqIqViElZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ef:f3:2c:f7:86:b9:64:43:3a:e8:3d:06:a9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
        Validity
            Not Before: Feb  9 14:00:14 2026 GMT
            Not After : Feb 10 14:00:14 2026 GMT
        Subject: CN=f12cc498228c0a9e78abb0071ed029b0bec8ce3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:94:9b:3b:80:3f:cd:7b:88:2b:a2:66:b7:
                    57:e2:2e:b7:00:c9:d5:bb:f4:b8:ae:8f:74:9c:a2:
                    a9:b3:e9:47:de:8d:84:ee:60:ed:58:8e:9b:7e:b2:
                    b1:24:13:06:98:58:f1:7b:6b:f5:78:28:13:cf:d3:
                    8c:3a:e5:fe:78:bd:c7:e8:a9:22:07:db:68:0b:a9:
                    f3:82:63:ed:c2:6b:e4:8c:6e:4d:a6:a7:04:b4:de:
                    3f:5a:f3:7b:d3:7b:f3:19:90:16:fe:8b:af:99:ce:
                    b0:03:19:74:37:08:29:5a:20:22:dd:2a:62:a7:13:
                    11:c4:ee:72:06:fc:4f:3b:95:0d:e9:f3:a5:ee:97:
                    75:c7:5f:07:d2:7d:ed:86:11:68:51:aa:e4:e1:f2:
                    cb:b8:c7:3c:bd:c0:b9:d1:a8:7d:f7:17:f9:74:d7:
                    8b:4e:dc:35:ff:7f:91:9b:55:01:fd:d7:8b:98:0d:
                    8d:db:74:02:1a:07:72:20:60:65:53:6b:76:49:36:
                    e4:a1:51:fb:60:e2:da:ce:61:cb:29:a0:a7:3e:f5:
                    b7:2b:76:fc:b2:42:03:46:5a:2c:fe:d8:52:3f:19:
                    74:71:13:20:3a:07:50:8f:17:37:93:ea:06:14:57:
                    e7:4d:c4:c4:ef:88:15:24:8e:d4:30:f7:6e:8c:08:
                    ed:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:C4:98:22:8C:0A:9E:78:AB:B0:07:1E:D0:29:B0:BE:C8:CE:3F
            X509v3 Authority Key Identifier:
                keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a1:68:d6:18:6c:8c:84:21:32:f1:16:b9:16:71:31:f0:f9:
         ba:37:81:be:6d:ba:8b:6c:df:8f:09:c6:5c:dd:de:ae:a9:dd:
         89:1d:ab:6b:bd:21:96:b5:03:3c:85:7f:0b:14:0a:af:7c:e0:
         3e:34:cd:5c:cc:cf:ea:5f:94:b6:dc:ad:b5:d1:2c:c9:ab:3d:
         e7:f1:e2:ea:f6:d0:2c:a3:14:f2:4c:99:ce:ee:13:64:36:c3:
         18:9a:4e:f8:ea:44:8e:ac:4f:86:5f:a6:75:d1:0b:36:16:69:
         0e:e1:7f:f5:1e:e7:52:82:e7:ab:8f:78:3e:03:84:25:83:9f:
         07:58:58:36:ef:36:32:d9:33:6f:09:cc:73:21:fc:0f:1e:36:
         52:1c:54:7d:99:04:5b:5f:3e:c6:00:ff:c7:1f:55:2d:d9:65:
         ce:17:35:41:55:c3:86:4c:a1:b4:7c:ee:f1:fc:02:67:76:cc:
         7f:a2:90:f4:75:22:17:01:56:03:39:3f:5a:8d:69:92:53:5d:
         84:78:b8:95:5a:08:00:40:66:24:9e:68:64:8e:32:44:36:d7:
         43:64:1d:fb:04:de:e3:9a:95:a0:a9:b2:f3:44:0c:8e:2c:d2:
         ba:3c:1e:ad:e6:26:df:b1:37:0a:da:d5:53:3f:24:23:33:f8:
         c6:e4:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:24 2026 by rpki-client