This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File:                     ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier:          28bS0YUv7qFhPdJf8f5chjz8w4mZ7Hs6AncUkdCywps=
Subject key identifier:   01:99:81:6E:6D:72:C6:0D:99:50:C4:8C:B4:24:34:A0:2D:9A:66:01
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer:       /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial:       019C43FDF07953231DA02CA7CC1BB15B33E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number:          1014
Signing time:             Mon 09 Feb 2026 20:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:41 +0000
Files and hashes:         1: Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa (hash: V2MLHL/okJ/3o6MZQXWdDGTI8xzQQww1eNzhJoWdwk8=)
                          2: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: QkeKi6frDwNStL0ewGBdfvXv4n2KcOhtTmsL443RO6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:f0:79:53:23:1d:a0:2c:a7:cc:1b:b1:5b:33:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
        Validity
            Not Before: Feb  9 20:00:41 2026 GMT
            Not After : Feb 10 20:00:41 2026 GMT
        Subject: CN=0199816e6d72c60d9950c48cb42434a02d9a6601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:d0:5a:71:52:dd:54:1c:67:e9:aa:24:6f:
                    3f:a0:f6:cc:d5:70:6f:91:b4:8e:7d:e2:78:83:fe:
                    b5:1c:94:c3:ec:2c:a3:ca:84:3f:d9:08:c4:5a:38:
                    c2:b6:2d:d7:4c:c7:eb:8a:c4:1d:90:f7:25:de:0f:
                    b1:f5:d4:89:ea:af:9a:82:41:07:1c:1b:92:05:cf:
                    c2:1d:86:1a:4b:3f:cc:84:2b:28:47:3d:38:aa:7d:
                    ed:b8:bb:a1:77:ba:2e:39:0d:05:c9:7e:79:a4:20:
                    6f:f1:c0:80:f6:64:87:20:31:1c:6a:3e:15:27:33:
                    07:6e:51:76:4c:11:11:1d:7a:71:3e:38:ae:85:43:
                    d6:f3:df:04:0f:b1:ea:29:e5:05:ac:9f:f0:c4:b2:
                    00:3e:35:10:9a:e9:db:f4:54:c7:fd:bb:7a:d5:34:
                    1b:cb:a9:9c:9a:ed:05:3b:ee:5c:ec:d8:e7:e4:d9:
                    45:cf:26:86:25:70:c2:a3:d6:40:f4:86:85:76:2a:
                    a0:0d:ae:ac:90:4d:b0:67:39:0e:16:af:7c:2d:0e:
                    88:5a:c3:55:81:e8:03:8e:65:9f:1d:5c:86:fa:73:
                    a7:ee:bf:e7:b1:85:ee:ca:e4:64:da:55:8f:36:e2:
                    be:c4:20:d7:0d:8c:0c:b3:89:38:ac:08:4b:e0:93:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:99:81:6E:6D:72:C6:0D:99:50:C4:8C:B4:24:34:A0:2D:9A:66:01
            X509v3 Authority Key Identifier:
                keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:03:31:4a:3d:0f:4f:21:b3:51:42:51:4f:74:1a:aa:76:b4:
         8a:89:bd:d7:34:bd:88:71:a0:74:f5:7a:ab:10:54:17:b8:0c:
         69:0a:67:59:93:a4:b0:19:c3:63:1c:c1:b3:af:0e:93:fb:82:
         cc:b4:cf:4c:ba:e6:b3:e3:6f:d4:83:78:9c:c3:5a:28:7f:f4:
         63:90:c1:89:96:00:a8:76:d5:b5:81:5e:e0:a0:04:04:6c:8a:
         b7:40:72:4b:e0:da:41:4a:81:86:3e:ea:fa:46:dc:d3:22:09:
         b2:67:29:b4:ee:da:5d:8e:ef:0a:07:e7:4b:f6:03:d3:b5:bb:
         69:ad:d6:2d:79:32:83:4e:dd:c4:7f:8b:9d:d1:3f:44:15:bb:
         e0:5b:d1:97:48:01:2b:e2:9a:be:ec:29:7f:e9:b8:3f:34:b2:
         1c:0f:00:7f:fb:ce:33:3a:07:70:39:05:ce:cf:fa:7a:f2:69:
         f5:8b:8d:67:50:df:c2:fd:85:04:65:ab:3d:8e:ed:03:7e:99:
         28:f6:61:7c:2f:8b:ba:be:90:5c:5e:fc:b2:fb:17:48:48:8c:
         fe:f6:66:f4:d8:ae:2c:1f:aa:58:01:b7:88:bb:b7:81:0e:da:
         8c:ff:5b:8b:09:78:aa:b5:f5:31:6e:d7:3b:f2:01:c8:f3:37:
         f0:ca:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:15 2026 by rpki-client