This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File:                     ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier:          avO2+rf83Q3ZF4Vch+ad7VdH+Rn3Cy0+qnMvrP3BSM0=
Subject key identifier:   47:DD:35:09:40:87:D5:BB:F8:00:80:04:A4:5E:81:6B:7B:15:4E:83
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer:       /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial:       019C4246372A5FF468FA8C99B5E56168E3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number:          0890
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: ChP+DSMNOuUx2ar9QIviFkDGyGgJbKd/9Qizij7kF7E=)
                          2: h8307773aGTVcHuejCRSQfYZeP4.roa (hash: 2K29Y+KA5ZX1LE8dgEvQhQ3+PK0Gls5txAa/7wvymRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:37:2a:5f:f4:68:fa:8c:99:b5:e5:61:68:e3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=47dd35094087d5bbf8008004a45e816b7b154e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:ee:e9:81:db:1d:31:b2:3b:80:8c:2f:a8:
                    01:0c:7c:fb:d6:6c:a8:df:d8:aa:61:27:82:c2:56:
                    bf:71:01:b7:ce:32:f6:35:b0:15:0c:bb:cc:df:c0:
                    1f:38:69:f8:45:fc:a2:c9:49:1d:5e:65:b0:d2:d4:
                    22:a6:0c:d9:43:c8:e7:1c:66:a1:22:6f:81:80:8b:
                    b9:91:e2:2d:d9:60:04:0d:24:f7:4b:6b:cf:5d:4e:
                    23:37:3c:db:4a:84:ef:0d:29:bf:b6:6c:2d:a8:2c:
                    cf:c5:9f:50:70:57:77:0b:29:68:6d:bf:a1:1d:8d:
                    ea:32:40:32:c8:1f:88:89:53:46:2a:64:c7:ee:b4:
                    49:ca:89:c5:a6:cc:a8:04:90:9b:a8:14:90:8e:90:
                    e8:26:fa:7c:8a:8b:99:ee:3a:80:77:6d:b6:8d:ac:
                    8d:dc:f1:49:4e:6d:5d:9b:2c:b1:4d:16:79:e6:d1:
                    32:92:0a:44:9a:e8:da:6e:a0:9d:a0:9f:c7:d5:bf:
                    81:d1:e4:86:d8:0a:a2:1f:e9:0e:20:d7:cd:6d:d4:
                    e8:59:34:76:89:df:88:12:f2:e7:ff:08:7c:76:4a:
                    0d:f9:96:20:41:bb:98:23:61:0c:c0:f8:fd:9a:14:
                    1a:93:f7:12:93:2a:83:1a:cc:bd:e3:ea:c5:18:93:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DD:35:09:40:87:D5:BB:F8:00:80:04:A4:5E:81:6B:7B:15:4E:83
            X509v3 Authority Key Identifier:
                keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:a6:a4:b3:83:dd:9c:e9:56:93:aa:0b:d9:e2:2f:6b:d6:
         58:0f:9b:8a:5f:c8:43:2a:b3:9c:5b:fb:2c:6f:2e:84:42:e7:
         50:cb:ff:a8:f9:78:c9:56:1f:cb:31:3b:46:aa:4b:c3:c2:98:
         ec:20:df:f2:ce:47:f9:66:7e:fd:45:57:14:30:34:6f:1f:46:
         ca:14:05:8a:79:00:11:31:86:a1:a0:cc:c4:64:64:bc:11:2a:
         18:70:ed:bd:a2:90:05:2b:dc:77:07:c3:8a:44:0f:c2:7e:46:
         7b:19:17:2e:74:73:40:43:c0:c7:c1:20:e2:a1:12:a7:f1:7a:
         d6:02:9d:cf:4f:f3:2c:32:d2:a0:8e:1a:6e:04:e4:47:58:aa:
         7a:9a:be:e2:78:87:c6:5d:31:30:1b:ce:b4:00:49:64:8d:fc:
         b2:7b:0f:96:3a:6d:30:50:25:94:08:47:5b:ec:91:7e:69:35:
         4d:95:82:40:7a:10:29:b1:71:f6:58:d2:a9:4d:4e:61:76:d2:
         f2:16:13:e0:50:3d:d1:55:c4:75:78:53:84:7c:6d:1e:1e:06:
         32:49:bb:3e:78:bb:c1:5c:50:c6:6f:43:ac:91:25:32:48:68:
         ac:03:11:5e:ef:11:2e:f1:be:6e:a9:08:9b:7c:4c:95:1c:e6:
         6b:0f:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:35 2026 by rpki-client