This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File:                     ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier:          oswZoBoyPKmlmcUqNBP+cSK1w1bCzRewXZJjkJGqKZk=
Subject key identifier:   C0:D7:1A:59:3A:08:1C:37:53:64:C5:08:47:0F:CD:F8:59:CE:6D:E9
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer:       /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial:       019C43C73081ECFD554CE2C2D16616982ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number:          0B7A
Signing time:             Mon 09 Feb 2026 19:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:53 +0000
Files and hashes:         1: 5tnuY_EervGGDUz3gXIn8wuI43w.roa (hash: uBzgwllDY08L9s6zjrsvT8VveqDxCL0p3GokO0+Zm4I=)
                          2: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: COHPTnq6pcYGm6Fc+EPGt/ox6sMLWpKurs14yMK/Pfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:30:81:ec:fd:55:4c:e2:c2:d1:66:16:98:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
        Validity
            Not Before: Feb  9 19:00:53 2026 GMT
            Not After : Feb 10 19:00:53 2026 GMT
        Subject: CN=c0d71a593a081c375364c508470fcdf859ce6de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:78:9c:4f:2d:fd:41:fa:45:f8:21:fa:72:
                    37:84:5e:65:3b:6a:0c:e7:ed:6d:56:a7:f4:52:a4:
                    a4:0e:74:3a:1c:e2:47:f4:b5:8d:92:91:cf:a5:64:
                    50:2d:13:26:1b:ca:3b:fc:bb:df:29:03:bc:fd:6d:
                    36:72:d7:cc:ea:31:9c:39:69:4d:96:80:4a:ba:fa:
                    ee:b8:9c:b7:28:1d:53:8d:e6:74:3d:b6:31:dc:96:
                    33:1b:8c:d0:4b:4f:23:62:20:89:87:f2:bb:8d:b3:
                    3b:68:67:12:8b:83:c6:ff:24:ed:9a:a5:88:cf:a1:
                    48:eb:9e:5d:a6:fa:43:ea:04:1f:1a:ce:1d:05:b6:
                    e4:b4:3c:c7:80:9a:13:db:9d:04:3d:58:4a:c6:b7:
                    a7:25:5b:74:8e:3c:39:d4:6f:1a:05:04:ff:a1:91:
                    d3:c3:2a:f4:ce:a3:84:e2:0b:57:7b:72:5d:40:74:
                    7c:a7:30:f3:7a:f6:cd:9f:51:05:9a:7e:a7:bd:e8:
                    cb:a6:1e:f3:fc:4b:c8:ac:b7:1f:25:37:eb:f5:3a:
                    f3:24:5e:6f:bc:75:15:ec:3b:c6:08:6f:d6:46:dd:
                    87:a3:23:90:5f:b3:fa:12:2f:84:86:15:d1:d6:bd:
                    ce:3f:ce:84:91:31:09:04:2c:ea:ff:e6:21:00:a3:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D7:1A:59:3A:08:1C:37:53:64:C5:08:47:0F:CD:F8:59:CE:6D:E9
            X509v3 Authority Key Identifier:
                keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:80:ce:12:e2:03:50:e9:e0:0d:9c:81:3f:46:ff:05:ab:c2:
         85:ce:f6:3f:db:b7:f2:5e:1d:1f:b8:a8:20:e1:61:e4:1e:1f:
         aa:4c:50:20:89:e9:d3:d5:a6:9d:0c:e6:39:6c:80:b1:af:76:
         3f:86:54:52:4b:3c:0d:e0:a5:df:ae:1d:cd:ec:2f:5a:28:fa:
         c7:51:69:f9:ab:32:c0:1e:a6:28:14:d7:db:b0:a3:a8:de:64:
         7f:c0:a9:28:0c:80:cb:64:3e:1f:a2:eb:b9:cf:ee:da:0d:fa:
         ae:61:db:f7:64:07:d7:9e:76:fa:40:8d:f0:bc:90:e2:87:59:
         c1:39:84:46:e0:37:2d:4b:86:a4:9d:8e:33:d5:34:9c:cf:42:
         d6:1d:d4:53:6b:a2:11:92:a5:61:10:74:b9:1d:ea:78:40:69:
         95:30:a2:d6:57:47:b0:c7:42:99:87:1d:10:66:8a:e9:ac:f8:
         cb:2a:61:3e:41:68:73:8c:81:a4:c9:67:58:8e:7e:0b:23:24:
         5d:7c:e8:d0:31:18:94:4c:5b:e9:1e:dd:e3:f7:5f:47:e2:2f:
         fb:d7:19:95:5e:ba:ab:94:18:63:ec:60:94:c8:15:20:85:f5:
         7e:7a:c1:f6:ac:93:c4:ef:12:cd:28:f0:bb:f5:6c:22:73:ee:
         11:77:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:29 2026 by rpki-client