This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          cHG8Wvm4+D9frznHBqec0aDy56hBE9nDAO01Ub0Wb1Y=
Subject key identifier:   5C:E2:74:E1:E0:1C:FA:96:7E:88:E2:92:B1:A8:88:F6:A2:37:88:B8
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       019BF2E1ED379D803E4CB5D09EE0F6BB6FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          082E
Signing time:             Sun 25 Jan 2026 02:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:51 +0000
Files and hashes:         1: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (hash: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k=)
                          2: YrK0OFy0c1zXD_wbxSiYhyGDFOc.roa (hash: BS0hH0Mha3OYh1/nE9dhHNhWJCR5meHAHOyRx5kHC3Q=)
                          3: aFesnPDh7CxN2CqxODqrdmrSUuk.roa (hash: x5ilgl/10IUgJ6jnlwharE+K/9xapRQ9JBmeLGM6YOI=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: 4lvbnXVtF1nFfgmUOT/QA8Y/HPczTLs1YJBqRSQNpi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:ed:37:9d:80:3e:4c:b5:d0:9e:e0:f6:bb:6f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Jan 25 02:00:51 2026 GMT
            Not After : Jan 26 02:00:51 2026 GMT
        Subject: CN=5ce274e1e01cfa967e88e292b1a888f6a23788b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:8b:65:a5:ec:83:3c:a5:83:77:2c:a1:17:
                    88:5d:4f:b1:ff:03:92:42:a4:49:69:77:a8:df:43:
                    ac:0f:4b:3a:73:27:0b:bc:98:cb:b6:23:23:c0:e3:
                    c2:55:4b:d9:07:e2:ae:4b:66:f0:23:f2:eb:31:e1:
                    52:40:45:3c:9d:45:25:35:cf:9a:14:3e:b7:38:9c:
                    8f:fa:32:35:28:2f:49:ad:d2:e2:59:74:2e:2b:15:
                    be:e2:ef:f3:ea:d5:1e:72:4d:e5:21:a9:9b:c8:42:
                    07:f2:f6:a7:a8:8b:ea:54:d5:d6:72:e7:92:64:dd:
                    51:4c:43:0c:6b:f2:90:48:b0:6e:98:19:7b:5b:3c:
                    3d:98:83:2c:b5:a4:b5:62:c7:81:7d:c0:85:31:80:
                    79:c6:95:71:11:08:bf:2a:6d:2b:de:19:59:74:29:
                    bc:56:b7:4c:5c:b4:59:ce:e4:ff:ab:ab:71:8d:7c:
                    80:09:ba:46:76:89:06:de:82:a6:88:ee:05:a6:75:
                    4d:03:2b:79:93:19:31:48:9d:dc:dd:c0:80:fe:f0:
                    3e:be:3d:44:6f:fd:02:eb:5a:17:c0:88:40:ec:c0:
                    68:17:bc:57:50:f3:e0:18:21:9a:63:4f:bb:42:47:
                    da:cc:08:8f:82:54:e0:e4:00:90:de:75:cd:3f:d1:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E2:74:E1:E0:1C:FA:96:7E:88:E2:92:B1:A8:88:F6:A2:37:88:B8
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:fc:84:4c:50:d9:a5:c4:4f:b8:61:de:bb:d7:1d:17:0b:
         40:62:5e:48:b7:8c:d5:62:95:5c:94:91:f2:c5:be:ee:02:57:
         bc:6c:17:57:8a:74:20:e5:dd:df:df:81:fb:3d:c1:1b:8a:9f:
         ec:f9:bf:f8:4e:2a:1a:e2:32:ea:ed:13:c5:90:c9:6d:e0:41:
         07:1f:c7:6a:47:4f:1a:66:c8:7f:e0:a3:c2:81:6a:b4:7f:8c:
         82:a3:bd:27:79:ff:b9:72:fc:43:dd:2e:2b:aa:3a:8d:c0:33:
         21:9e:50:65:61:34:46:84:ce:9d:c8:cc:e6:f6:54:6c:fa:23:
         21:9f:3f:78:74:f1:76:ab:9a:dc:a5:cf:e6:c5:65:a0:7d:20:
         a3:31:f1:72:fe:5f:72:fe:1d:b2:bd:0b:4d:48:d0:ca:27:6f:
         59:9c:69:15:43:f3:97:83:af:49:a3:cd:f1:6c:92:82:34:de:
         e4:0e:16:c5:a7:60:cd:16:75:95:98:15:f2:7f:fc:01:f4:8f:
         10:ca:c6:37:4a:a5:48:ef:f1:f9:b1:5a:91:cd:06:5c:a8:3c:
         06:0f:27:a9:2d:e5:56:02:76:09:19:58:73:41:69:d0:f5:f8:
         4f:a8:1f:19:4c:14:79:45:c4:77:20:e3:36:f3:13:5b:cc:5a:
         c1:9d:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:09 2026 by rpki-client