This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File:                     z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier:          lM5imi1lflvJcb7kpwM4KVK7yeMUpMYcDT2r9LvJN6Y=
Subject key identifier:   55:D0:B4:25:DA:F7:78:D2:77:A8:D9:3D:7F:DC:2F:02:3F:B3:0D:E6
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer:       /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial:       019C43C74B0E51029D5C76DA735C48221BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number:          1153
Signing time:             Mon 09 Feb 2026 19:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:00 +0000
Files and hashes:         1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
                          2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
                          3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: FDwCO7N3QPqrL9+/YthWfxMmWI4EdclW6DuZ7ikbymA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:4b:0e:51:02:9d:5c:76:da:73:5c:48:22:1b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
        Validity
            Not Before: Feb  9 19:01:00 2026 GMT
            Not After : Feb 10 19:01:00 2026 GMT
        Subject: CN=55d0b425daf778d277a8d93d7fdc2f023fb30de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:9a:74:bf:7e:ee:60:15:eb:25:cf:a0:ee:
                    bd:87:f9:a6:5c:ae:b2:91:2a:da:ae:bc:f4:e9:28:
                    08:51:ad:ac:6b:a9:07:ff:83:32:df:f5:81:43:e0:
                    44:37:b2:77:8e:e2:08:eb:25:f3:c7:e9:44:39:11:
                    10:58:8b:4a:4f:96:7c:ae:c0:0b:4d:37:39:e9:65:
                    34:d6:48:c5:de:80:25:35:2d:a4:a5:d0:a2:9c:a7:
                    e0:e2:67:44:7d:29:b9:18:9f:15:5e:82:5b:65:11:
                    b0:fb:06:01:15:cb:0a:a6:cd:7f:88:64:da:ea:61:
                    a6:e4:cc:3e:53:d0:c3:7f:8a:4f:af:ec:0a:f0:7e:
                    45:e3:3a:4d:77:d2:83:e3:a7:96:87:5c:07:9f:c5:
                    df:7b:83:14:ce:63:75:cd:44:7a:a9:c7:af:5b:dd:
                    17:99:27:25:ec:7e:9d:7d:6b:cc:46:d0:9a:59:9a:
                    f6:37:0d:ae:ba:60:b4:ed:57:28:1f:a8:bb:0b:cf:
                    ca:d0:26:ff:c9:d8:b3:ef:e1:c8:78:ce:79:de:9e:
                    15:b0:ef:43:db:3e:07:61:6f:74:66:c0:17:c9:17:
                    45:42:c8:fa:5a:c6:c1:4c:6a:d6:99:f9:a3:21:6b:
                    e4:30:5f:55:c9:57:d4:df:94:30:4f:dd:d9:45:e3:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D0:B4:25:DA:F7:78:D2:77:A8:D9:3D:7F:DC:2F:02:3F:B3:0D:E6
            X509v3 Authority Key Identifier:
                keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:5b:e5:ae:57:0e:78:4e:7c:dc:b5:7b:c0:38:35:73:0d:
         e6:b1:0b:92:81:48:85:14:72:78:dc:09:97:11:67:fc:26:9d:
         fc:14:7c:b3:0a:b2:bf:62:b4:30:93:49:37:56:b8:26:28:4a:
         e2:80:a7:66:44:49:f6:99:7e:ce:f5:af:ac:d2:23:4d:0c:2a:
         2b:9f:a2:3f:c7:26:ae:9d:74:7a:e9:84:0f:13:21:36:c3:e4:
         ab:34:31:91:af:40:67:00:be:57:f0:20:a7:a6:47:bb:be:d5:
         33:94:7f:73:1d:54:66:a0:3a:c3:9e:81:94:cd:49:cf:d0:fe:
         84:b1:9b:87:75:38:2d:05:e5:ab:de:43:5c:f4:15:bf:24:13:
         97:d3:92:dd:ca:7e:0f:d5:86:5f:d1:d7:ac:ce:13:cc:30:2b:
         65:94:a5:33:30:07:97:f7:b8:d3:8a:06:40:dc:68:2f:bf:e2:
         d9:7b:98:76:5f:7d:f9:7d:3e:64:ac:20:8c:5d:53:32:c2:7b:
         94:fb:1e:5c:19:2e:12:56:3b:dc:ce:61:ab:47:d9:c3:a7:9d:
         56:fd:90:20:cc:b7:22:62:d6:80:c7:84:f3:3c:d3:df:8b:f4:
         db:06:8e:00:00:52:bc:7e:84:ba:05:07:bb:91:d4:f8:b5:1a:
         f2:18:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:25 2026 by rpki-client