This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File:                     ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier:          Cjov+kodjWHXfGZiri3cSWvcQeG9UPbRC9FwoN/oa5g=
Subject key identifier:   B2:B9:9F:58:52:11:9B:FC:29:1A:82:0A:43:8E:10:14:2F:1A:A5:A9
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer:       /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial:       019C42464182A48895631E9E60704BD67971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number:          14F6
Signing time:             Mon 09 Feb 2026 12:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:26 +0000
Files and hashes:         1: IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa (hash: K/zCH1QmxaSRuaMT9yqorVTWzzo7aNiaeZwocJbG5QI=)
                          2: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: XO60JdJOAEgXg1jG7CP/mhTyRTGf6VGf41KP0tdhdj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:41:82:a4:88:95:63:1e:9e:60:70:4b:d6:79:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
        Validity
            Not Before: Feb  9 12:00:26 2026 GMT
            Not After : Feb 10 12:00:26 2026 GMT
        Subject: CN=b2b99f5852119bfc291a820a438e10142f1aa5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:aa:1d:d0:ba:42:43:e4:07:71:38:fa:94:
                    0c:6b:09:2d:37:72:48:a4:28:c0:0a:4b:0e:70:2b:
                    88:8e:82:00:ff:34:61:5d:ab:89:26:57:19:df:46:
                    75:ea:ad:66:0b:c3:b5:ab:9c:3d:51:4e:dd:04:69:
                    89:81:a3:e3:17:77:38:04:1b:ad:42:69:f2:80:dc:
                    d9:70:a1:90:11:f7:8e:aa:f1:23:24:18:53:a5:32:
                    2d:4d:b7:c3:88:5f:49:de:1f:a8:03:16:78:ed:b7:
                    e5:6e:74:b3:36:f5:cd:84:6f:4d:40:9f:75:d8:b1:
                    5b:9b:0a:99:62:cb:ea:aa:f9:43:cb:53:52:2e:ae:
                    80:b1:da:77:85:85:b5:f4:b7:bc:07:93:a6:20:50:
                    8c:9e:69:7a:5d:34:d3:0f:24:80:03:54:6d:72:73:
                    6f:ca:1c:a1:ff:85:54:8e:e1:33:e6:c8:44:a2:85:
                    ae:0d:c2:35:e2:07:a1:4d:3b:dc:d3:e0:04:89:d7:
                    ea:e7:6f:99:1a:3c:3e:3a:c1:de:ac:7a:6a:28:e0:
                    c1:95:95:3d:af:c9:19:20:42:03:1a:b3:27:3d:63:
                    bb:ef:59:78:67:a1:5b:f0:28:0d:3a:14:e9:e2:40:
                    29:f7:8f:75:a7:7f:f4:a2:da:32:9f:93:c8:8d:da:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:9F:58:52:11:9B:FC:29:1A:82:0A:43:8E:10:14:2F:1A:A5:A9
            X509v3 Authority Key Identifier:
                keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:80:f8:8e:a9:70:bf:f2:b6:33:73:cc:2b:4a:31:ab:7b:95:
         bd:50:47:f2:bd:54:b8:97:bb:b1:9e:a8:c1:66:67:b1:ed:c9:
         75:e1:1f:9c:d8:45:8b:c8:3b:9a:f5:bf:c4:d4:ac:79:86:8b:
         d2:a2:84:91:01:fb:c8:7a:07:f0:da:5e:98:d4:7c:08:22:f4:
         f6:e8:c4:b8:3f:a4:7d:94:40:de:b7:0b:c3:a8:26:83:5c:cf:
         00:15:75:74:ec:0e:3f:91:d2:25:24:4c:cb:95:19:7e:d6:a5:
         d5:eb:21:16:b2:47:94:6c:76:1f:9a:35:d4:a5:33:05:17:c9:
         1e:9e:44:a2:c8:a5:ca:c6:ac:49:24:87:b5:6d:e0:dc:9b:66:
         c2:48:eb:be:7b:06:14:78:39:d2:27:ca:53:1f:2b:1d:e6:13:
         fe:6b:af:69:b4:6f:b2:26:c9:36:b6:24:f0:59:9e:f3:c4:51:
         14:0d:25:75:36:95:b8:16:a3:aa:0b:fd:34:7f:b0:37:31:b6:
         d2:52:59:78:86:23:88:1c:f5:d6:8b:d4:0d:3a:b8:4d:68:ee:
         cd:fd:dd:39:be:7a:a0:06:48:82:ba:9f:ff:b8:29:47:65:29:
         68:95:44:d5:22:66:6c:07:6a:ee:3b:aa:c8:25:0f:96:6c:31:
         7c:fd:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:47 2026 by rpki-client