This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File:                     ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier:          iDJGOAFdTioOxxTOzpPpytYx2RBlC9di9rMjXYZBcy4=
Subject key identifier:   14:CD:C5:1F:E2:58:06:B7:82:F5:D0:E1:44:9C:5F:88:CD:F9:7D:64
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer:       /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial:       019C427DB246440264D3FBFD952DCCF674A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number:          1652
Signing time:             Mon 09 Feb 2026 13:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:59 +0000
Files and hashes:         1: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: RC0ruw+hgcTAxSfVY1b9mrYvi0k084bd8J+A8xUJJtI=)
                          2: q07ydXKNCfhsxkbz0OLUwwXQNww.roa (hash: WGl6n1WY5g82kxAJzk5G8tAK5EnNCEBo+zn2QvwiGL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b2:46:44:02:64:d3:fb:fd:95:2d:cc:f6:74:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
        Validity
            Not Before: Feb  9 13:00:59 2026 GMT
            Not After : Feb 10 13:00:59 2026 GMT
        Subject: CN=14cdc51fe25806b782f5d0e1449c5f88cdf97d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:4b:a2:aa:8b:d5:ae:2d:87:5b:02:3f:99:
                    8b:c5:1c:a2:f9:aa:d7:8c:46:e4:91:a5:61:5a:54:
                    f1:69:5f:f2:a9:77:68:bc:8d:de:f0:13:7c:ae:1c:
                    7d:4d:dd:d1:a2:45:8b:34:8c:67:c9:8a:f7:ae:49:
                    92:fa:ae:f7:29:9b:0c:52:58:a5:95:cf:4e:43:23:
                    89:53:e0:95:96:d5:dc:69:31:df:19:de:0f:c5:24:
                    d2:26:c3:2c:60:75:d4:20:c5:d2:82:6f:73:d7:ca:
                    2f:28:4f:e0:0d:cf:99:8f:ab:51:47:7e:e2:cc:0d:
                    63:c5:af:b6:10:3e:a2:41:74:70:78:bf:3b:4f:a4:
                    8b:e8:fd:78:43:04:c8:03:fd:d6:19:6b:ff:59:45:
                    06:ee:2d:48:c9:92:30:e7:9b:63:9d:5b:39:1f:d0:
                    34:1b:a5:b5:71:d2:f9:02:e9:3a:94:a7:26:19:2c:
                    53:18:2a:83:82:50:3e:e1:7a:75:79:ff:a4:9b:b5:
                    c6:09:85:3b:72:69:d2:9f:6f:5e:ed:f3:6d:c9:8b:
                    73:40:1e:44:87:5a:91:4f:6f:50:cc:64:e2:44:c6:
                    a5:7e:d4:72:1f:30:a0:2f:c0:3a:35:3c:a6:6f:c1:
                    5d:02:59:e3:7a:15:49:1b:66:5c:f7:a3:a7:ad:4e:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:C5:1F:E2:58:06:B7:82:F5:D0:E1:44:9C:5F:88:CD:F9:7D:64
            X509v3 Authority Key Identifier:
                keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:bc:12:ba:13:9e:f9:eb:38:68:c0:31:24:3e:fb:cc:cc:
         d8:a8:c5:ae:01:af:89:b0:46:c8:de:99:bf:50:61:29:6c:47:
         75:db:d3:3b:ef:2e:3f:f4:b6:cd:76:7a:8c:5f:7f:58:09:c7:
         e6:2a:c2:3b:e3:10:81:6f:e4:ec:9c:3e:0f:83:29:3e:8f:15:
         23:80:e4:17:56:14:05:1f:c8:59:05:af:69:6e:43:84:6a:d4:
         7b:54:5e:68:4e:1a:ea:c3:46:6e:81:86:df:62:0e:50:de:34:
         f5:bc:a2:87:fe:a1:8b:f6:31:60:10:63:84:d6:5d:0b:7b:54:
         ed:a9:e0:1b:35:e5:6c:f4:3b:08:d3:43:e9:7d:59:6e:bd:c6:
         14:3a:79:73:a2:2e:33:3c:6a:63:88:29:2b:fe:f8:cf:aa:86:
         1b:64:ab:43:4e:a7:3e:32:81:8d:4c:db:20:4b:51:3e:a7:98:
         98:18:83:d0:52:05:86:ab:a6:53:34:6f:f7:ff:ba:31:21:e6:
         e7:e4:64:01:be:6c:50:f6:37:39:6a:58:4f:68:94:56:e7:bb:
         12:2d:d2:f5:5b:df:be:dc:df:5c:cf:b8:e7:bf:c0:a6:df:c1:
         f4:60:d6:2c:37:f3:10:1a:51:dd:a0:09:54:48:57:cf:54:ef:
         66:90:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:21 2026 by rpki-client