This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File:                     zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier:          +YNd57DOcWcuO/6s1fCzrGJwZWHr12CMM1JF5b2XYhk=
Subject key identifier:   2C:CB:A5:A9:DC:FD:96:8E:74:98:AF:FB:16:94:1D:23:E9:36:46:C0
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer:       /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial:       019C44D9EC94563FEF5BCBB12C152F1D6AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number:          1811
Signing time:             Tue 10 Feb 2026 00:00:58 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:58 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:58 +0000
Files and hashes:         1: 4lysncKwxgSAj9n9yli9Am0CcOE.roa (hash: jyfAwSL6x2o2QJ3Pd5vHV7+3sGhamJlWvutXDf8SBf4=)
                          2: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=)
                          3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: 1GZxAtcdpXq7KJr0dHg6jQF3d4GMiEZJohhAhWd2uEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:ec:94:56:3f:ef:5b:cb:b1:2c:15:2f:1d:6a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
        Validity
            Not Before: Feb 10 00:00:58 2026 GMT
            Not After : Feb 11 00:00:58 2026 GMT
        Subject: CN=2ccba5a9dcfd968e7498affb16941d23e93646c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:ed:9e:3e:c8:df:77:34:08:dd:69:c3:ca:
                    d2:df:c2:e4:d0:1c:85:ff:03:c3:b1:37:51:cf:ce:
                    e8:10:55:42:8e:77:92:e1:c9:04:8f:db:89:ba:3a:
                    67:d1:7f:22:90:2e:c2:8d:38:ac:82:8e:a2:a1:e7:
                    2a:30:4e:c7:d7:68:5c:fa:80:23:67:d4:2e:bd:05:
                    25:ea:08:a8:d2:db:c5:94:51:fe:51:eb:30:75:01:
                    25:21:bc:fb:40:ed:41:95:da:b4:10:92:80:60:39:
                    40:c5:27:0d:23:64:29:56:37:31:9e:71:b4:42:16:
                    02:89:58:6e:1a:d0:3b:eb:f7:05:cc:58:d0:36:0c:
                    58:f9:1e:45:11:a9:43:6f:06:54:a7:23:41:4e:c2:
                    66:5c:d2:32:f3:4c:f3:de:39:01:10:e1:9b:04:7e:
                    a0:23:b3:ff:38:12:1f:33:40:66:f3:85:8b:09:fb:
                    9a:e2:07:b2:c5:7a:b1:96:be:50:17:e1:8a:6c:af:
                    f9:60:d2:71:d6:63:7e:b0:97:5c:a8:6d:bf:15:db:
                    41:e0:7d:b8:af:06:98:96:e0:80:75:ec:34:27:12:
                    29:c2:34:eb:f9:2a:45:29:1c:ec:58:02:81:55:be:
                    97:fa:b1:66:8a:a9:56:c6:be:ba:be:f6:b6:96:e5:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CB:A5:A9:DC:FD:96:8E:74:98:AF:FB:16:94:1D:23:E9:36:46:C0
            X509v3 Authority Key Identifier:
                keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:41:ac:9c:d5:42:f2:45:49:15:8a:b5:db:c1:d3:b9:b0:92:
         97:a9:3d:59:0c:cc:c0:ef:c3:ec:50:2d:a4:7c:a2:77:b3:bb:
         51:8e:c0:51:09:7d:cc:5e:e4:9a:ff:37:05:bf:97:16:6f:93:
         a0:08:4e:e1:90:34:5d:a5:da:68:c1:a2:ac:f1:bb:c8:f9:e5:
         21:23:fe:bb:76:b7:e7:24:e6:57:b6:84:69:08:20:7c:e6:da:
         27:13:0b:3e:49:01:dd:9a:9c:a8:77:9b:13:47:0e:3d:c0:b1:
         78:83:1c:09:77:69:b9:b4:43:1e:4e:a7:87:a7:6c:bb:a7:37:
         fb:7e:74:38:7e:63:e7:85:d9:45:6f:c1:2e:bd:61:28:2d:0d:
         22:26:62:6f:78:0f:d8:96:e8:a6:0a:8f:21:47:a6:0a:48:d4:
         90:47:08:5c:34:2a:91:5c:f0:0a:33:7f:1b:dc:40:4a:93:06:
         72:bb:ed:37:5e:07:9b:25:08:30:65:cd:ea:46:a4:1a:f6:60:
         45:e6:9a:57:3e:4e:ee:26:7f:d9:f6:76:20:6d:99:98:4b:c0:
         6f:2d:27:c7:85:52:cd:0c:01:19:46:84:c9:31:5d:81:54:d9:
         56:e9:16:74:41:a2:66:37:eb:0b:1d:04:57:4f:a1:c4:69:d5:
         47:a6:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:34 2026 by rpki-client