This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          bhfHWgZUkMXPNhAB1PUqNgzRtH6UY+C4KQWRw2OkJIw=
Subject key identifier:   D4:22:68:A6:18:28:94:47:69:2C:19:13:44:0B:25:7C:36:14:70:30
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       019C427D91F100C633557F356055B814CA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          15DB
Signing time:             Mon 09 Feb 2026 13:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:51 +0000
Files and hashes:         1: 98w4EMI8QkhWIDJ_tUXvrrCXD2w.roa (hash: fm9WJHd48Zrl9TNehwCEgvrHjrg07KinzQkYGEQj/xw=)
                          2: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: sAg+Y32vAWRGmFRq6ev5aik9x+JLVHLiVrxAOwUlbCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:91:f1:00:c6:33:55:7f:35:60:55:b8:14:ca:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: Feb  9 13:00:51 2026 GMT
            Not After : Feb 10 13:00:51 2026 GMT
        Subject: CN=d42268a618289447692c1913440b257c36147030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:95:c7:b9:c8:84:18:a0:76:d2:01:01:4a:
                    ca:a2:2f:a5:4e:e6:23:d9:1b:3a:c8:02:4c:19:04:
                    73:d8:37:4f:63:82:96:06:5c:ab:ee:f5:2e:bb:d0:
                    55:60:ce:6b:56:4f:b0:34:dc:b0:ac:8e:98:a3:f5:
                    16:b6:77:b9:29:5a:9a:1f:9d:56:07:02:82:26:eb:
                    86:72:96:8d:4b:ab:49:f6:63:12:5f:56:c1:10:a5:
                    f2:51:84:a4:46:87:14:31:f5:0b:0b:a3:ff:d1:c0:
                    0e:6f:73:08:37:92:db:df:e2:64:0a:57:cd:5e:f2:
                    bc:21:22:05:0b:16:e8:c7:eb:52:ed:88:6d:b4:55:
                    0e:db:c5:61:1d:fb:d9:fc:c2:22:16:a8:3c:d3:62:
                    84:ea:23:cd:07:46:ec:c9:78:f1:01:a3:53:18:af:
                    a4:f3:d8:d4:8d:80:05:9b:d7:09:1e:23:f1:98:83:
                    13:32:61:fa:61:e7:81:a7:a0:7c:0a:8b:73:03:e9:
                    9b:cc:ca:05:5c:56:91:b2:2a:29:3a:5a:f3:eb:35:
                    f4:dc:9d:69:d3:4b:cb:fe:e6:eb:cc:e3:18:72:51:
                    70:5c:ca:3a:99:83:23:b1:da:4a:26:2f:1a:ac:e4:
                    d4:40:d5:61:d2:27:38:d8:8a:35:21:2a:ac:9c:30:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:22:68:A6:18:28:94:47:69:2C:19:13:44:0B:25:7C:36:14:70:30
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:1c:6f:d7:78:88:53:aa:9d:48:f4:a7:a1:1a:7f:e7:be:
         a4:61:51:9b:1e:15:b6:b7:e7:e2:7a:e0:f5:df:19:ce:15:3c:
         73:93:bd:84:9f:b2:a2:c3:91:2c:23:b7:34:a3:5b:50:20:15:
         7c:c3:97:25:5b:3a:4c:83:47:c9:d1:1b:40:ce:8d:33:df:9e:
         c5:d4:f2:ad:3e:6a:c2:0d:b1:38:0c:83:e0:58:63:59:5e:9e:
         08:fb:20:8b:4e:64:86:0c:52:d7:9b:3d:3b:d2:e9:6e:12:1f:
         45:06:4a:3d:63:11:7c:ae:87:b5:60:73:cf:9e:6e:b6:8b:96:
         89:81:ae:bc:bc:d1:b2:4c:5f:94:5a:b1:16:a7:d1:25:7d:01:
         2c:e6:9d:14:b3:08:05:26:04:3b:55:96:12:4f:f8:1a:05:af:
         14:16:f6:cc:b9:0f:bf:7f:a2:a4:9a:28:f1:40:67:4b:3c:18:
         19:b6:c5:97:cc:77:9f:2e:8e:98:cd:5d:4d:86:6f:3f:f7:58:
         c2:03:c8:88:20:03:12:ec:4a:4b:e8:62:3a:f5:b6:8c:6b:b4:
         e5:7e:c5:8d:15:5d:97:bf:0f:dd:95:fd:8c:95:c4:d8:5a:ac:
         6e:7d:ce:b8:86:b6:de:28:4d:70:af:ca:79:31:bb:d4:51:72:
         15:36:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:34 2026 by rpki-client