This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File:                     zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier:          3r2FQ2NfwKLQJQ3bIOhVbid6qGRPyRdltSV0FttDh2g=
Subject key identifier:   C0:6B:96:6D:5D:96:01:BF:E9:12:BD:B3:8E:9A:7F:24:63:BA:58:37
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer:       /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial:       019C1C4C2BD13489E29FC4E6C703DD6437AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number:          061E
Signing time:             Mon 02 Feb 2026 03:01:19 +0000
Manifest this update:     Mon 02 Feb 2026 03:01:19 +0000
Manifest next update:     Tue 03 Feb 2026 03:01:19 +0000
Files and hashes:         1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=)
                          2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
                          3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: ++3drvRy2Pq1wsLXGXDVlEnXuLdlYaxrWfUETMxSv9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4c:2b:d1:34:89:e2:9f:c4:e6:c7:03:dd:64:37:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
        Validity
            Not Before: Feb  2 03:01:19 2026 GMT
            Not After : Feb  3 03:01:19 2026 GMT
        Subject: CN=c06b966d5d9601bfe912bdb38e9a7f2463ba5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:1b:a8:f7:92:8a:2d:f3:7c:4a:96:7b:7b:
                    37:be:83:5c:9a:74:ca:f0:c5:22:86:90:96:b0:e8:
                    f5:1b:33:07:96:0e:5e:6f:30:19:cb:d0:68:bc:23:
                    26:82:f1:de:c9:ff:b1:17:0e:5b:23:ed:a6:16:99:
                    26:79:9d:1c:50:c9:b4:97:c4:db:cf:1b:a6:68:39:
                    af:8b:01:58:f2:f5:36:f5:12:49:96:cd:ab:5f:11:
                    b8:4e:e1:f9:1f:f2:23:06:1f:1c:22:53:e1:45:8e:
                    d5:9f:9c:e1:d5:67:2d:ac:93:9c:66:c7:8e:87:66:
                    fb:06:d0:06:27:6e:b4:d2:c2:79:39:91:22:70:fc:
                    d1:a7:e5:e9:8b:ce:f4:1a:50:6d:cc:3c:3b:f4:c1:
                    ea:3a:9a:b1:ce:e7:89:c6:34:51:8a:3e:a1:d4:9e:
                    58:78:b8:31:bb:bd:36:ef:86:27:06:52:d5:e1:27:
                    ed:e1:22:01:98:ce:59:09:f2:00:4d:2f:b5:ff:ab:
                    c3:1d:b4:5e:ba:d0:9b:f8:7e:ae:7a:1c:96:d1:51:
                    9a:96:2e:67:d0:9f:c6:22:55:10:ec:49:83:c0:8f:
                    29:5e:bd:16:29:69:66:eb:e7:66:0f:d3:33:76:92:
                    38:c2:3f:c1:6b:24:87:de:cb:fd:c5:8e:ab:ee:cd:
                    24:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6B:96:6D:5D:96:01:BF:E9:12:BD:B3:8E:9A:7F:24:63:BA:58:37
            X509v3 Authority Key Identifier:
                keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:59:71:65:8d:79:bf:11:6e:b0:5a:57:ae:54:6d:84:01:
         77:ee:e3:c3:50:83:ec:53:7e:19:36:3d:83:f4:9d:1a:f4:47:
         76:f3:aa:56:1a:20:7c:1e:ca:1b:4f:bf:1c:e3:f4:1e:77:b0:
         86:0e:8e:68:ed:cc:ad:fe:48:d9:ef:80:ff:57:df:29:83:67:
         22:7b:7e:fe:78:e1:48:66:3f:cf:f7:d6:ce:38:66:8b:12:f1:
         5f:92:ff:b4:6b:71:15:a6:d3:05:5a:eb:32:91:af:59:b6:bf:
         07:cd:9d:6c:74:0e:42:0b:dc:da:46:d3:b9:0f:31:28:94:0f:
         17:ed:c6:df:74:ff:be:e1:26:c0:ce:f4:11:f0:7c:1a:f6:ac:
         c6:85:e8:b0:b6:d2:dc:f1:4c:03:2e:7e:39:e5:3d:5e:02:dd:
         da:98:03:64:53:3d:8e:5d:03:3a:4c:0a:af:58:8a:5f:54:ff:
         a8:de:97:12:a5:94:e1:0c:7f:2a:ec:e6:78:bc:2d:38:7d:f2:
         59:1e:66:bc:2d:69:92:58:d5:9b:0c:93:38:ae:8c:94:7a:8d:
         e7:2c:de:f7:57:c0:e8:cb:e4:b5:f4:29:63:5a:57:72:04:77:
         7b:7d:ab:47:35:d3:80:88:75:ec:8e:45:60:5f:65:5b:56:74:
         13:99:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:47 2026 by rpki-client