This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File:                     Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier:          bGxIeHPqJuHCaywxmniegig+6EB1i87SGINUkhq9q1c=
Subject key identifier:   D8:C3:9B:23:C1:1D:BC:43:E6:84:6F:53:5E:C7:05:C7:BE:EF:92:72
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer:       /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial:       019C4210173248CE1603C45EC91AA9473B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 11:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:16 +0000
Files and hashes:         1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: u/jb+O7zx1u50alW0gRqc/49ZLxUYLrgLKmyzupOKu4=)
                          2: fSnqZnwOIrhOfhDZkhdGS2yAncE.roa (hash: SVnN30Tg3P99sk9b/ymDGPmYqstKVPGeMKeKX2k4XeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:17:32:48:ce:16:03:c4:5e:c9:1a:a9:47:3b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
        Validity
            Not Before: Feb  9 11:01:16 2026 GMT
            Not After : Feb 10 11:01:16 2026 GMT
        Subject: CN=d8c39b23c11dbc43e6846f535ec705c7beef9272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:41:45:bd:5c:71:26:98:7f:22:ab:59:92:
                    c6:67:d1:82:ec:8d:b7:ec:86:6c:df:ac:93:db:10:
                    e7:8b:fb:38:8a:c1:2b:e9:68:08:61:24:1b:f1:21:
                    d7:50:0b:41:2c:ed:69:12:79:91:49:11:5e:f6:29:
                    81:b9:95:ee:e4:6c:bf:de:1e:70:a1:6b:92:d0:c5:
                    a3:0c:ec:d9:56:06:57:e9:24:1e:df:9f:9e:6b:8e:
                    2c:a3:8b:2b:b2:7c:63:41:87:65:35:9e:ff:d7:53:
                    8d:ce:50:87:e4:22:df:23:ae:40:11:0a:a6:28:2b:
                    5e:31:a7:cd:6f:bc:3e:2f:45:2d:bd:37:7a:79:76:
                    46:84:d7:81:85:e2:23:f5:48:7d:f4:eb:a5:61:6d:
                    41:08:bf:34:69:cd:1a:6a:22:04:a7:13:80:e0:47:
                    14:17:ce:c8:7a:00:ac:d9:27:ff:f1:ef:f3:2f:aa:
                    34:e3:f6:61:22:e0:29:de:47:7a:29:80:89:57:c7:
                    fd:0c:fe:d8:b7:d8:87:25:6a:4d:55:2e:39:63:f5:
                    47:59:fd:9a:b6:f9:c6:7c:a2:9a:7d:0c:8f:37:b4:
                    fd:73:ed:f1:fe:5a:c0:f8:55:63:bf:2b:3c:3c:b8:
                    8b:2f:ba:2f:41:2e:3b:bf:3f:97:c9:10:05:ca:0d:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:9B:23:C1:1D:BC:43:E6:84:6F:53:5E:C7:05:C7:BE:EF:92:72
            X509v3 Authority Key Identifier:
                keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:63:08:fb:54:85:3f:66:7d:c0:da:85:2d:7d:24:cd:1d:4c:
         21:23:87:63:82:61:80:5d:ff:3b:ce:67:7d:6d:86:70:03:3d:
         60:6d:bb:ae:f1:4b:d7:00:ef:9d:00:7c:35:f4:46:39:46:7d:
         4b:a0:d0:6d:6f:c1:04:d5:6e:9d:10:fa:ed:71:7c:47:a6:3d:
         99:9b:b0:43:9b:87:93:e8:b6:3a:36:42:67:5c:d6:c6:9b:92:
         bb:96:05:42:a8:6d:1b:64:fc:35:04:c8:64:f3:b5:86:6c:74:
         a0:6b:e1:41:58:7c:c8:70:a4:73:8f:bf:d5:79:d5:e5:7c:8d:
         16:96:26:cf:50:86:06:e9:54:67:92:d0:30:18:00:d8:b9:20:
         07:02:bf:a1:9c:be:dd:a8:42:46:25:77:97:69:3e:6d:bc:95:
         4e:9e:d1:54:08:f6:98:62:90:76:29:70:6d:57:ea:9f:04:07:
         5f:4f:2c:25:bf:2f:59:a7:68:dd:55:dc:7d:32:be:65:08:5b:
         61:3b:b0:ff:d1:58:42:be:21:32:82:bb:be:35:e2:6c:19:d1:
         b3:9a:30:1f:a6:55:3a:4b:ae:be:99:59:01:99:bd:ee:8e:be:
         20:71:f2:78:85:39:bc:ba:f9:7f:38:a8:a6:28:26:19:f7:06:
         5a:8e:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:40 2026 by rpki-client