This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File:                     nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier:          xlEmntrBWm/JeMvvIn4qe3c7kUKSd/Eit6aq7Bhcy4Y=
Subject key identifier:   68:EF:81:EE:E4:81:24:B6:32:66:A3:45:06:F0:3A:55:41:6B:CD:41
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer:       /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial:       019C262B6A3BFB33844B19864263BD1093AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number:          0E9F
Signing time:             Wed 04 Feb 2026 01:01:45 +0000
Manifest this update:     Wed 04 Feb 2026 01:01:45 +0000
Manifest next update:     Thu 05 Feb 2026 01:01:45 +0000
Files and hashes:         1: 9N0xJc7gte-XfDm1ppoFxs2ZNfE.roa (hash: hax45O+BVL2OtEofupJNael1wssJob4JJ/bpd8OtYEo=)
                          2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
                          3: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
                          4: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
                          5: angqw-nGlqqGwVTjFIEuu4xT5yA.roa (hash: YgYXRPPnKRS6It/sEF4b8AjwwB0Zk4ROK3MWdgBVRYs=)
                          6: jGcgfjX-2VLeT-thJNq_EhCsLOs.roa (hash: vfhUER+MVyFd4cICZOxhLKN285pUX1g3EDDwGeuEuY0=)
                          7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: 9lNjN7DcY/8q8lCby3K86TQXoriLqk+BVM08POHGEg0=)
                          8: pTv7PXs_5ykkgZ_tEXsvJcIycU0.roa (hash: H/T7NBjQGdOIzAjwHMrrCkvyt/WYe0e9YcUKSlHTyJw=)
                          9: uNElo1bYBP4RtJsgE_31DZ35jNA.roa (hash: tDCdSTgFNoOH3KpQ7qCf+yWP+yhY5tZMjGcP8X0y8Zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:2b:6a:3b:fb:33:84:4b:19:86:42:63:bd:10:93:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
        Validity
            Not Before: Feb  4 01:01:45 2026 GMT
            Not After : Feb  5 01:01:45 2026 GMT
        Subject: CN=68ef81eee48124b63266a34506f03a55416bcd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:e5:bf:c5:ae:22:ba:ac:c5:77:fc:6f:a2:
                    03:de:a2:25:d0:74:32:e3:a4:86:4e:8a:03:90:9e:
                    42:5f:28:52:06:eb:c5:f4:9c:ec:4a:16:0b:94:cb:
                    bd:a6:77:98:ce:69:e6:95:b0:b3:47:d7:42:4c:03:
                    c9:b1:13:73:92:24:fc:b6:9a:82:7e:38:19:37:7b:
                    e8:c3:ff:dc:61:ae:01:d6:28:4a:38:f6:55:1c:4a:
                    74:57:be:f3:ef:a7:ee:9a:c7:65:7e:87:55:61:62:
                    fa:44:a2:8a:08:d4:69:8f:68:be:51:90:82:8c:26:
                    fc:ad:69:23:85:e1:c2:06:21:4c:41:5a:56:bb:62:
                    5b:ae:cb:b5:67:b6:11:f5:72:74:ac:1c:68:f3:49:
                    7b:6a:c3:33:ed:a8:45:02:ea:e7:f2:00:30:64:b1:
                    82:b5:56:6d:55:ee:c1:46:d8:30:ad:fe:9a:ce:3e:
                    63:fc:62:48:37:f4:08:74:89:2d:5b:ac:23:8c:ae:
                    65:28:f5:f6:00:71:bc:e0:88:de:68:6b:98:07:97:
                    9a:ba:9d:f6:52:02:b5:33:83:91:85:2a:c3:95:c8:
                    c3:a8:72:97:bd:29:7d:40:f7:dd:ec:65:4a:db:23:
                    48:7a:60:fd:bd:ec:c2:fe:79:e6:17:60:16:fc:8a:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EF:81:EE:E4:81:24:B6:32:66:A3:45:06:F0:3A:55:41:6B:CD:41
            X509v3 Authority Key Identifier:
                keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:06:99:53:51:c4:d1:86:e9:a7:30:d9:83:5a:31:58:4a:91:
         39:8a:eb:c1:d7:63:88:22:03:0d:c9:34:01:c2:32:01:05:0c:
         23:b7:18:d3:85:47:95:0a:f8:d7:04:6e:02:f8:f5:7e:11:c1:
         a7:d6:5e:20:35:f5:c1:4e:ca:58:67:6f:4c:d2:8d:2f:17:b8:
         cb:8c:6f:df:8c:8e:1c:5e:99:40:5e:75:3a:f5:18:f2:9b:31:
         c6:df:0e:db:a4:be:7d:d8:7a:56:f9:8b:da:38:0d:fb:3f:2f:
         63:a6:da:ed:e4:7f:ab:34:c6:81:5d:04:53:15:16:c6:17:51:
         09:d3:0d:0d:f8:ad:5d:0d:cf:4d:5e:92:59:ad:e9:ca:a1:8e:
         46:96:4c:d5:92:55:bc:d2:e8:63:6e:49:a1:bc:ef:1b:fd:5a:
         d2:af:9a:42:89:48:ab:24:b4:7f:74:7f:1c:9d:eb:da:6b:35:
         0b:81:a4:89:f5:5c:15:ce:0d:58:55:db:ab:1c:cf:1b:27:60:
         a9:bc:2e:20:3a:c2:3b:a1:9c:8b:2d:09:1d:ae:e6:1f:37:5c:
         f1:46:a8:79:26:55:2e:76:ec:96:40:dd:2b:49:62:51:c2:79:
         cc:da:7f:16:6f:c9:05:28:ea:0d:db:00:86:43:4d:ba:29:5d:
         50:f9:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 04:12:03 2026 by rpki-client