This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File:                     0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier:          5V/viDLHfOZOi9zibC/6l3vGW5w7WA0WYFSGyW1eCm4=
Subject key identifier:   62:C2:48:9A:B0:66:AB:9E:43:61:7F:89:4A:C9:29:A4:A3:8F:38:61
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer:       /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial:       019C42B4478646E424ADFF366BA8206E1A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number:          0D85
Signing time:             Mon 09 Feb 2026 14:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:36 +0000
Files and hashes:         1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: xfBsdSfSd39j6AXOzZROxTO+IC58SRz4pcvPWE4mr8g=)
                          2: b4ywKBqNPFFV1vTj5hKhs2FJNNo.roa (hash: Xl3Oky1CBj0F9xsklIOKHfMBafTIaLBWaY5PspMnufw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:47:86:46:e4:24:ad:ff:36:6b:a8:20:6e:1a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
        Validity
            Not Before: Feb  9 14:00:36 2026 GMT
            Not After : Feb 10 14:00:36 2026 GMT
        Subject: CN=62c2489ab066ab9e43617f894ac929a4a38f3861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:f1:83:5b:f3:c1:eb:a4:1b:53:bb:47:19:
                    13:76:ae:7f:00:5f:b8:f9:e0:b5:2a:19:94:d4:8f:
                    9b:79:37:79:83:d4:18:17:1f:92:7e:63:1a:57:18:
                    d0:94:b9:a6:1b:d2:00:c6:f2:5e:1e:06:79:96:52:
                    e3:96:f4:c9:c9:04:d3:63:ac:fe:dd:2b:f1:d0:38:
                    46:c0:c6:49:17:21:3e:c8:66:b4:07:af:6c:2e:cb:
                    a0:37:37:e8:02:b0:5c:28:ea:10:31:50:c3:bf:1b:
                    6c:e5:a9:c5:ee:07:b4:2c:d7:5e:aa:20:10:95:ad:
                    55:86:c1:67:ac:8b:8c:0e:aa:01:ba:19:09:1d:29:
                    e9:90:db:83:7c:80:ef:ee:a8:14:6d:96:18:c8:56:
                    b5:12:55:a5:f8:ea:5e:c1:a3:6d:7d:08:94:df:7e:
                    5f:64:b8:56:bd:1a:8e:04:09:d4:48:a8:0a:df:1a:
                    a0:0a:52:dd:65:37:a6:77:0b:eb:3b:80:77:76:c8:
                    f1:4d:ec:c6:63:71:ab:22:0e:7e:ff:6d:8a:13:b5:
                    78:3b:bd:22:90:2f:1e:b5:09:9c:fa:b9:c8:8e:d2:
                    6c:68:28:40:77:41:18:3f:10:41:74:e8:aa:9a:d7:
                    21:9c:44:59:68:52:25:d9:35:9c:22:93:a9:4e:09:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:48:9A:B0:66:AB:9E:43:61:7F:89:4A:C9:29:A4:A3:8F:38:61
            X509v3 Authority Key Identifier:
                keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:cc:9c:6c:04:7e:09:d0:3c:00:3e:0b:81:69:fa:93:83:
         ec:0b:ba:0a:bc:0a:d5:67:14:b9:e3:38:cd:b3:9b:d8:27:d6:
         3b:41:dd:1b:9e:57:42:73:29:13:e7:53:a4:ab:ac:73:47:09:
         66:57:9f:40:28:36:e1:da:cc:33:e2:0a:ca:35:65:8d:e1:61:
         dd:80:b6:1a:05:73:66:0f:51:57:3b:0f:cf:67:47:89:fa:75:
         00:59:a6:cd:3d:cf:64:1c:05:d9:e0:ca:f9:f6:56:73:99:7b:
         fc:10:07:a8:8d:dc:ac:fa:07:68:e0:a2:b2:3b:d3:22:00:2d:
         e9:cc:9b:37:a2:45:f9:2f:d7:9d:ce:42:7f:58:20:f3:24:9e:
         c4:b2:35:b8:cf:46:92:e2:23:28:77:e1:48:cc:1b:5c:d4:75:
         96:33:78:56:ee:97:f0:97:12:cb:ae:19:50:81:2b:52:4c:52:
         65:9f:cf:2f:95:c6:e3:bf:b3:f2:77:0c:39:7f:20:df:6c:ea:
         6c:b0:37:1e:9a:1f:3f:98:f4:49:bd:0c:1f:50:d3:fb:ab:8f:
         3e:4a:90:b6:33:14:43:47:ee:aa:df:0e:06:9d:37:1d:c8:33:
         be:0b:e8:ba:5a:0d:39:6f:8b:74:cc:51:e4:90:57:ef:e4:38:
         b0:9f:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:22 2026 by rpki-client