This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File:                     zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier:          JxcBBxbRlt3aFk3D8m8mpjO8okddCZ2hr6bcrwNXUpE=
Subject key identifier:   D2:30:CF:30:C6:F2:42:09:28:3B:BF:33:39:73:40:14:23:66:C0:61
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer:       /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial:       019C438FE8E8BFC55DB834789A4064629C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 18:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:30 +0000
Files and hashes:         1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
                          2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: 9rulRNtNVUVfebGNQLHMsbJ0nMlMGor1QmHu1oS8850=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e8:e8:bf:c5:5d:b8:34:78:9a:40:64:62:9c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
        Validity
            Not Before: Feb  9 18:00:30 2026 GMT
            Not After : Feb 10 18:00:30 2026 GMT
        Subject: CN=d230cf30c6f24209283bbf33397340142366c061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:ae:2d:84:7b:0e:c0:82:a7:31:71:4d:02:
                    47:11:d9:35:81:47:94:c1:c9:97:ea:14:13:32:1d:
                    30:70:1b:53:69:a8:4c:ca:0a:b4:14:f4:db:12:38:
                    92:a3:4c:dc:0c:91:e3:67:4a:17:48:19:8f:21:36:
                    6f:1d:19:41:80:e2:d0:07:41:c5:3d:87:ad:53:3e:
                    81:ef:cc:e0:d1:f9:2b:94:16:7d:e1:db:25:a1:22:
                    2f:0e:5b:fd:27:0c:cc:52:ca:5a:43:b4:3a:89:88:
                    0e:78:9f:dc:24:f4:f4:da:f3:fd:e4:41:ee:4f:68:
                    02:d6:ef:f4:da:a2:c6:b9:9a:f7:5a:6e:75:6a:62:
                    bd:98:d5:6f:de:a8:0f:81:57:1d:c3:fb:1f:88:84:
                    8c:61:08:66:99:f9:b9:7b:60:f8:64:fa:de:88:9b:
                    60:c6:8f:75:28:6a:00:e7:c0:cb:f1:fc:7e:3a:59:
                    99:d3:35:63:ec:47:c8:0b:34:c3:c7:fc:4d:01:93:
                    76:5c:e3:23:d4:57:5e:06:2a:2d:e4:e0:a3:e0:45:
                    19:5c:e3:f7:4a:59:a5:ad:f6:ef:e1:8c:12:30:db:
                    0b:e6:9f:07:1e:e1:c6:83:cc:f8:f3:79:1e:b1:2b:
                    df:e6:92:9f:9d:40:22:87:39:2e:78:f5:90:ab:cd:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:CF:30:C6:F2:42:09:28:3B:BF:33:39:73:40:14:23:66:C0:61
            X509v3 Authority Key Identifier:
                keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:ed:1d:13:1b:d3:1d:7a:a7:31:f1:18:82:74:a7:bf:0f:
         50:47:db:3a:33:e5:c3:ac:a0:d5:5e:72:f1:4a:c2:26:50:b6:
         83:92:54:c6:2c:43:f8:6b:81:3c:4e:33:31:86:fe:a4:6d:d3:
         98:c2:06:0c:2d:65:73:b6:89:9a:0d:bc:d8:44:6d:fa:a3:85:
         71:fe:a0:91:8f:2a:1d:9b:5b:81:cc:1b:81:c1:f9:a8:be:dd:
         9c:2b:fa:1e:36:39:80:a4:94:1c:7a:0d:2c:7f:43:97:87:46:
         13:ea:f3:9a:07:31:b7:b7:33:d6:51:5e:b6:06:58:36:45:29:
         ce:6c:4c:2b:14:a3:bb:37:de:68:2c:62:1c:7b:a5:0d:33:e5:
         b1:e0:c0:52:f4:86:6c:f4:88:f8:4a:d4:e0:75:20:d7:8e:fc:
         cd:fa:e3:e2:25:69:fe:40:8b:b2:5d:e4:65:23:a9:8c:e0:15:
         df:c4:a6:26:15:04:ac:62:69:72:a5:f7:31:bc:69:3a:b5:ec:
         93:62:9a:d2:89:c5:79:82:5a:36:1e:6a:4d:7d:f7:19:fd:40:
         62:db:94:3d:1a:0a:fe:a8:58:83:9a:92:43:9c:1b:51:5b:3b:
         90:1a:8f:57:a5:a5:8d:03:65:67:e3:2f:9e:89:1c:69:21:a9:
         c5:d4:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:21 2026 by rpki-client