This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File:                     Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier:          aecW+0G1k7czimxtz7noFvhVVsX9aYpBTaYUaQ8YvGE=
Subject key identifier:   4E:17:E8:F0:D0:5C:AF:12:D7:0F:26:79:7A:BF:B3:67:B5:79:A2:55
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer:       /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial:       019C43225A8805FCB7B7C4981AFF4101CC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 16:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:50 +0000
Files and hashes:         1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: A9GcWpZLbVVsB3g3h6F77ZcVT2wPgjsky9JSLJIIROk=)
                          2: evI5OEg6waUB24zj44AWaj3RZOA.roa (hash: Y1fnav5sUcdKyDCdtyfukclX/9hK+jv3+W4ALIcJR4g=)
                          3: yFQMrmkIeVte8wYzH-IkC5x7aUc.roa (hash: pXQ4i9KXqTJ+j0TOAAMeJveDI3UPmqEwzHnm1ISng7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:5a:88:05:fc:b7:b7:c4:98:1a:ff:41:01:cc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
        Validity
            Not Before: Feb  9 16:00:50 2026 GMT
            Not After : Feb 10 16:00:50 2026 GMT
        Subject: CN=4e17e8f0d05caf12d70f26797abfb367b579a255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:05:f0:c8:0c:99:4b:3a:7d:aa:78:a2:ea:
                    80:cb:51:46:21:af:b3:03:8d:ab:8b:cf:32:a1:43:
                    50:39:32:a3:e4:00:1c:56:33:46:22:02:ec:e6:21:
                    a6:06:e5:64:fb:ec:54:48:e1:2f:ec:2a:31:73:3c:
                    65:a8:1d:04:82:91:ee:d9:43:76:a1:d7:ed:97:62:
                    2f:46:f6:65:1c:2a:bf:65:5d:72:44:8e:6b:94:80:
                    01:f1:20:eb:65:55:5c:49:fa:bf:a1:b3:d4:d2:18:
                    0b:47:19:4f:38:12:c6:f0:9b:ad:96:ea:33:ba:4f:
                    e0:48:c9:4e:e0:a5:36:96:69:78:6c:e0:ec:15:c5:
                    15:fe:e3:9b:a5:78:c4:c0:02:f5:c0:9e:3f:5b:bc:
                    d5:a2:ba:54:51:44:e6:72:27:5e:e7:f8:49:6a:dc:
                    02:65:74:13:fb:d4:54:b7:01:5e:1a:58:54:ab:1f:
                    58:ca:63:1c:44:1f:7a:42:06:17:fd:44:c7:65:5e:
                    74:af:53:a2:d1:59:56:f9:53:ff:26:73:8a:19:e6:
                    28:7b:69:f8:d8:2e:26:ec:79:93:f8:8b:17:c8:63:
                    d1:17:02:29:88:7a:fd:21:0c:d6:06:71:5f:26:77:
                    f4:3d:04:5b:d2:85:9f:1c:99:8c:cd:bd:35:ac:7e:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:17:E8:F0:D0:5C:AF:12:D7:0F:26:79:7A:BF:B3:67:B5:79:A2:55
            X509v3 Authority Key Identifier:
                keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:31:55:dd:58:d6:19:86:31:1d:c5:52:4d:38:bc:7a:94:
         bf:9a:cd:91:dd:d5:f7:51:cd:dc:80:a4:83:a1:9c:b0:92:29:
         a2:a2:c0:e5:a4:5b:63:f3:12:e2:4b:84:f0:6c:e8:e1:17:6b:
         8f:70:3a:6e:47:9f:62:40:6b:f4:b2:0c:80:18:78:e6:2f:12:
         c3:6a:b9:65:cd:80:57:32:c0:18:c3:39:61:90:70:c7:bf:61:
         a1:a7:c0:94:0c:86:65:71:6c:d8:8e:16:62:d0:a2:49:7c:a8:
         bb:41:09:5f:ef:03:9b:02:7a:3b:b0:26:25:4a:fa:24:92:ee:
         d6:93:0c:ff:81:bb:4b:32:22:b5:cb:05:35:66:f8:4a:ec:e1:
         d8:08:3e:53:a6:1a:7d:eb:28:1c:7d:39:8a:fc:bd:65:e9:fe:
         87:d7:c7:55:c0:05:a3:8c:74:31:a7:ac:52:3c:87:6d:6a:47:
         d9:63:d7:bf:5d:03:5f:f2:f7:6a:d9:e7:12:eb:3d:db:95:ec:
         4c:2b:ae:02:1d:31:3d:51:e8:98:1b:e7:5b:a0:89:4e:26:9a:
         e3:d6:84:f3:7b:95:7f:97:f2:90:81:e0:b8:73:0b:1e:b2:0d:
         61:0a:9f:8a:5d:7b:7b:0c:ed:2b:9d:e0:7e:fb:d0:47:cb:22:
         e3:6a:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:09 2026 by rpki-client