This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File:                     ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier:          flSBJ+Bb3dSh+mg/eAlDAEJloRokVU8POzlb9t4qvQ4=
Subject key identifier:   C9:BD:E6:7A:0B:FD:74:BB:D3:6D:3E:EF:DC:7A:18:41:07:E5:10:41
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer:       /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial:       019C43FD97E3F673B532A58939F4C3271DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number:          042C
Signing time:             Mon 09 Feb 2026 20:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:18 +0000
Files and hashes:         1: 32nhL28HnVvRRTyw5tBUJdjr4j0.roa (hash: +zLh6gIHoybz3iAAOdtQltxgsMfjG3zetDelOFc51nc=)
                          2: 96HXx8zQ_EVFzIMYvhg1zJYI3qc.roa (hash: nDqvJNasRGULrzj7GnOr0ISCf0+9RDFSbOhihRxibJc=)
                          3: FhaBlVdFb-u9B3Q3s8w-zUsnA3Y.roa (hash: Nhhs8U4S6VG9Y9DrRCnYgND9wClvtFHBCzE3i4DaeSU=)
                          4: Gg_alP2mFO3oRShalv4zYhkZtEI.roa (hash: c1t1ZXq7lnILVOJ0YZafOnYK9luC0QXvmJ3DhCUXZKo=)
                          5: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: ZYskbzw8UwzJYVl3Bdz24T1+GsQj/ad+Ee+AsR0I53M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:97:e3:f6:73:b5:32:a5:89:39:f4:c3:27:1d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
        Validity
            Not Before: Feb  9 20:00:18 2026 GMT
            Not After : Feb 10 20:00:18 2026 GMT
        Subject: CN=c9bde67a0bfd74bbd36d3eefdc7a184107e51041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:28:56:f8:dc:33:fd:b2:9f:c0:99:c9:4e:e6:
                    03:cf:37:0b:b8:0a:e8:47:35:90:99:48:47:74:2d:
                    b7:28:57:08:d3:3d:47:d6:3a:cd:82:de:22:bd:f9:
                    6f:00:0a:c4:0e:cd:64:ee:11:ad:4d:3e:d2:94:a5:
                    56:93:79:19:1c:ed:b0:93:79:70:ec:42:c4:4d:58:
                    ff:0e:d4:36:24:df:f1:59:30:ef:db:45:f0:77:48:
                    46:65:d7:24:38:60:06:9d:e6:9a:e4:87:5c:8d:b2:
                    9e:ad:84:19:77:87:47:e1:90:ab:3a:41:82:1e:2a:
                    bf:5a:a3:e0:76:fd:72:f2:8e:bf:3f:64:a0:4d:25:
                    3b:69:66:17:2f:17:07:77:c1:de:c4:60:a4:81:a7:
                    cf:78:a3:82:0d:d0:a3:9a:11:fc:56:0d:d6:df:3f:
                    39:2e:d7:47:7c:1c:e1:3d:78:91:7c:ca:31:13:7b:
                    35:f7:54:0c:84:bb:9c:15:8c:b1:9f:ae:df:dc:b4:
                    33:0c:4a:84:38:f9:66:a0:29:00:70:40:a6:20:6d:
                    ab:c9:9c:90:47:25:92:7c:ad:95:9a:5a:83:7f:13:
                    ba:d3:71:a0:ac:7b:08:2d:32:c1:61:29:5a:45:b2:
                    34:21:47:68:29:fd:cf:99:65:bc:42:c8:10:15:33:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:E6:7A:0B:FD:74:BB:D3:6D:3E:EF:DC:7A:18:41:07:E5:10:41
            X509v3 Authority Key Identifier:
                keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:ed:c2:2c:18:00:62:c1:e0:06:fa:26:e4:12:4e:d4:5d:
         cc:22:1b:a9:af:b8:19:2b:58:d2:a3:fb:83:78:b5:6d:c3:8c:
         68:9d:d8:03:b1:8d:60:36:20:ba:b8:20:d2:db:aa:1c:a8:09:
         ee:c0:97:29:ec:aa:84:a1:61:e9:94:da:9f:c1:75:2b:b3:89:
         8e:8b:5c:6a:66:44:be:df:e9:65:ca:54:35:c9:c2:26:7b:e1:
         af:3f:67:98:92:56:86:ff:35:56:58:e4:98:4a:57:96:ca:a9:
         01:a4:3e:64:ba:6c:ca:cd:7c:bf:93:f5:cb:fc:35:45:fd:fe:
         a7:e3:c1:a0:65:a8:27:28:a3:86:42:38:a7:c4:67:30:ed:b5:
         2a:0a:4d:73:32:d9:ff:df:e2:b8:4b:c7:a8:d0:d8:ab:3d:4e:
         9c:18:37:1e:c6:88:42:97:12:a9:2b:1b:e4:cc:c4:d9:21:95:
         75:43:cf:eb:c9:0f:14:9b:7d:e7:97:f6:19:0f:ed:b2:cc:fc:
         73:93:1b:e8:8a:c8:d8:be:52:93:7a:7a:da:db:56:94:42:8e:
         8b:17:fc:09:a3:cb:d6:5f:d2:b4:d5:a3:63:cb:05:e7:1d:12:
         cb:9e:eb:68:5c:55:0a:a1:dd:c3:43:d8:a3:3d:c0:66:f6:a1:
         99:8e:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:30:14 2026 by rpki-client