This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File:                     zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier:          m8L9MvSd7p1g7h0/ru7yO9NmDHsRDxf7KLziihidguA=
Subject key identifier:   60:6F:A9:17:11:EF:76:1E:7A:89:9C:94:5E:82:4C:29:AD:47:5E:FD
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer:       /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial:       019C44A25DF6A422B57751CE609F35546778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 23:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:17 +0000
Files and hashes:         1: o7uX2sWUxD5f-QHIO7URESLWvKE.roa (hash: BBcxbvhwEbzfWJqG4lgqgeDWLcjr+9yx0XzssJhMKcc=)
                          2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: O/s+IrHFtjAXy+5QeTmKSFZrdWcoCajRFVhHNMK7MA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:5d:f6:a4:22:b5:77:51:ce:60:9f:35:54:67:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
        Validity
            Not Before: Feb  9 23:00:17 2026 GMT
            Not After : Feb 10 23:00:17 2026 GMT
        Subject: CN=606fa91711ef761e7a899c945e824c29ad475efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f3:f3:ed:9a:2f:e4:41:04:81:d1:89:25:c1:
                    57:63:6b:60:d7:0e:a4:da:db:4a:0d:86:dc:5c:bf:
                    ce:be:2c:fa:46:7d:b7:01:25:64:a9:2d:2d:37:b6:
                    cf:29:56:b3:79:df:ed:7b:84:74:88:ec:7c:62:6b:
                    d3:8f:b4:8f:a8:d6:9c:36:8b:f9:3d:3e:3b:93:39:
                    d4:98:27:f5:2a:12:80:84:d6:8a:86:30:96:2c:66:
                    0d:21:95:f8:ac:fc:0b:da:24:2d:9e:10:4d:2a:9d:
                    bc:de:51:9f:db:e3:91:45:1e:9c:bb:ab:a6:28:3e:
                    92:f9:8b:b4:7a:29:90:0f:47:02:11:fa:25:1a:f6:
                    2b:d9:a5:52:5a:29:f3:57:88:c8:87:e2:4c:19:e9:
                    dd:75:cc:fc:13:bf:74:e8:25:54:ce:3b:a7:83:e0:
                    3a:18:d2:d8:b2:3d:a4:17:86:ba:23:32:9d:6d:1b:
                    52:62:95:73:c3:d8:f5:cf:62:e8:71:2b:df:0d:a6:
                    b8:95:51:af:58:f9:c6:a3:88:2e:c8:f0:70:bd:8a:
                    9e:bb:4f:66:83:ec:bd:13:20:47:3f:9e:f8:9a:6f:
                    5c:a9:2e:52:84:b5:0c:d0:cc:9d:15:1b:c0:f1:cc:
                    95:07:f4:b0:5b:6f:82:cd:aa:3a:ed:d7:f5:7c:82:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6F:A9:17:11:EF:76:1E:7A:89:9C:94:5E:82:4C:29:AD:47:5E:FD
            X509v3 Authority Key Identifier:
                keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:99:19:20:b7:c5:52:04:2b:19:e6:53:9e:16:27:c4:e4:
         d0:87:2a:c5:f1:10:1b:aa:cf:e6:21:f6:c9:6b:35:60:f6:7c:
         f6:03:ea:21:f4:f4:aa:cc:b4:14:b8:00:4b:9b:07:b7:2f:86:
         e8:1c:58:98:80:70:1b:14:6e:6f:c2:12:c5:c8:4b:a9:b9:69:
         26:8a:8f:99:ba:4a:50:88:6a:f8:82:05:ff:ca:40:33:62:4e:
         2a:a1:d3:54:ac:bc:12:60:e3:39:54:35:67:16:09:9b:fc:e8:
         d6:c0:6d:2b:4a:75:ab:69:b4:4a:dc:2b:4e:b0:57:9f:4b:e1:
         db:1e:6b:50:71:a2:77:ac:25:44:a0:c9:93:03:8b:f6:ff:70:
         0a:50:d2:ba:04:70:ef:34:f2:9d:6f:80:82:0b:2e:6f:8a:1e:
         eb:2f:b2:b8:3f:ad:93:ee:ae:89:de:76:73:fe:11:f7:3a:90:
         fd:06:50:3d:d1:03:9b:6e:fc:b3:85:7a:23:99:d9:79:be:31:
         c0:f4:f1:a9:2f:a9:cc:2e:bb:02:58:c2:d5:e9:ec:0f:fc:d8:
         47:a8:85:0d:e7:6f:33:50:1a:df:d3:9d:bc:49:87:54:3c:0b:
         a1:2c:ad:33:bb:98:43:d1:09:cb:18:9b:5a:86:d5:a5:72:b4:
         e4:c0:fa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:23 2026 by rpki-client