This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File:                     ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier:          wq6Rrg6HrVTcq548VI27aMzeLlOn6ag5w/SliNsTuE0=
Subject key identifier:   41:9D:E0:7D:AB:5B:18:74:E5:95:AA:B3:56:FE:76:08:AA:3D:71:95
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer:       /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial:       019C4322F8D5A53213DEE203AFE386E4FEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number:          09BD
Signing time:             Mon 09 Feb 2026 16:01:31 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:31 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:31 +0000
Files and hashes:         1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: deNhO11UDC6EEtuHRdy4O9DFMUBRANizG2np4AeGCF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f8:d5:a5:32:13:de:e2:03:af:e3:86:e4:fe:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
        Validity
            Not Before: Feb  9 16:01:31 2026 GMT
            Not After : Feb 10 16:01:31 2026 GMT
        Subject: CN=419de07dab5b1874e595aab356fe7608aa3d7195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:55:0d:f7:af:be:b9:6e:8d:9c:a7:3e:59:
                    4e:9f:42:fb:28:8e:d5:14:48:8b:be:fd:e4:1a:32:
                    94:de:d9:cc:ea:0c:b6:c9:6f:2c:62:ac:95:ef:28:
                    9e:2b:26:26:3f:31:a8:c1:77:99:1f:a1:6e:d2:fe:
                    7c:4c:05:bf:48:f4:9e:7f:57:75:b0:20:be:da:15:
                    f9:0e:9c:58:33:1a:55:f6:1c:4a:1f:2b:45:d1:f9:
                    bf:75:97:f4:3c:4e:7c:10:d5:71:03:e6:72:28:dd:
                    49:9a:cc:33:59:28:37:c9:f2:c4:0f:ae:0d:61:98:
                    06:88:1d:5f:8d:62:ab:82:8b:29:39:b3:0e:b7:26:
                    4c:93:90:e9:f2:a7:59:b4:c1:75:b8:db:b9:70:31:
                    8d:cc:8a:a3:5a:84:f7:c3:d5:86:ef:bb:20:28:f7:
                    23:2f:be:ba:5e:69:c4:46:af:08:c5:86:9e:0a:72:
                    f5:2d:cc:92:cc:fa:f7:6f:e9:db:de:2f:e7:69:ff:
                    b3:da:8e:65:86:0c:3a:f7:6e:e9:c1:10:0b:b0:93:
                    42:44:dd:91:d2:3c:7d:c2:06:50:c7:53:ef:ce:96:
                    65:7e:d3:c1:4a:cc:9e:e7:27:b8:12:2e:e9:87:af:
                    dc:87:af:0f:7a:34:1b:4e:2a:f3:68:27:98:40:0c:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:E0:7D:AB:5B:18:74:E5:95:AA:B3:56:FE:76:08:AA:3D:71:95
            X509v3 Authority Key Identifier:
                keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d1:4f:68:20:17:10:97:87:81:89:05:f2:72:f4:a3:56:16:
         f3:b5:c0:cc:39:ee:01:d3:2d:e5:fe:94:52:97:1c:21:a0:45:
         1e:dc:29:74:ad:3b:85:db:2c:a9:68:28:e6:11:5a:6a:b0:2f:
         ed:7c:21:72:02:a2:34:d2:18:55:31:cf:16:06:19:c3:9f:e1:
         ce:f6:ff:73:d8:c6:43:74:83:19:8f:62:3b:4c:af:af:10:4a:
         38:c5:a4:2e:6f:c6:ef:ff:af:5c:59:95:dc:3b:64:ee:d9:5b:
         ce:b8:fd:f6:1e:c7:1c:72:d8:d6:74:d8:93:db:9f:38:00:88:
         11:b0:29:8f:db:11:df:b2:35:33:40:6f:22:f7:b0:1f:c9:10:
         bb:17:71:ad:76:56:3d:b4:f7:e9:65:42:f1:b5:cf:49:0c:ea:
         ee:6f:5d:6b:77:0a:b0:1e:44:42:d4:5d:e5:1f:29:52:42:ce:
         99:d7:1f:c3:1c:2e:02:d1:12:97:0b:b1:17:67:9f:b5:4a:aa:
         a2:ae:46:fc:05:9b:34:b6:b7:4e:c7:02:97:e2:f0:97:ac:f7:
         03:28:8d:59:53:1b:fb:e2:97:9c:0e:b9:08:89:19:90:a6:87:
         33:a5:0f:89:94:5a:29:b1:3a:b2:4c:5d:18:3d:b4:97:9b:fc:
         ed:5e:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:57 2026 by rpki-client