This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          4MriIn3ngmgeZwPCqfMwfzC016pOPiUp8A/WdxLVT1k=
Subject key identifier:   72:E5:8D:8C:1A:1D:91:85:40:02:6B:85:D5:7A:2A:58:7B:0C:A2:B3
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       019C427D1EBE137169C7D9CF1F641282C14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:21 +0000
Files and hashes:         1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
                          2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
                          3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
                          4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: zI6BWR0ZPIsPzw0pYiXSVEIGKks7A/wOgZtGvw8VpbY=)
                          5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:1e:be:13:71:69:c7:d9:cf:1f:64:12:82:c1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Feb  9 13:00:21 2026 GMT
            Not After : Feb 10 13:00:21 2026 GMT
        Subject: CN=72e58d8c1a1d918540026b85d57a2a587b0ca2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:41:9a:47:89:2d:67:33:ad:9b:4d:ea:b2:
                    ef:31:ca:fc:1d:4e:06:d9:3d:4c:24:e5:46:7c:6f:
                    a7:4a:71:49:60:36:5e:74:cf:b6:aa:cd:10:dd:91:
                    d6:e7:d1:f3:d2:ad:68:f9:ad:c0:aa:65:27:5d:bd:
                    9b:db:c7:d2:96:a9:d9:cd:18:31:0b:ce:05:d0:e5:
                    0b:b2:97:f8:9c:5c:35:8d:d8:e9:95:e6:16:ac:9b:
                    0c:79:8d:5b:4f:ac:31:c0:d8:eb:1e:c2:2c:42:9a:
                    89:79:7d:c3:1d:ee:ff:3e:17:ec:a3:c2:f6:59:20:
                    7b:9b:c7:60:99:f2:a0:13:65:8b:6a:d1:55:4a:0a:
                    3a:6e:4c:54:ea:0f:63:10:f6:70:c0:a8:8d:93:b7:
                    7b:af:59:3f:b2:b3:af:b6:e6:79:74:12:c6:fe:c9:
                    4c:d5:23:4f:ad:7a:99:6d:7c:be:23:c2:fd:29:fd:
                    35:23:48:2b:b9:59:0b:31:7e:1b:f0:cb:69:ea:66:
                    a5:57:ed:41:72:44:64:c5:8e:a8:8f:56:01:89:7b:
                    6d:10:93:b4:96:95:90:6c:92:bd:25:e6:cd:1e:2a:
                    74:04:85:d6:9a:26:0d:1c:04:fb:71:03:c0:c3:03:
                    fa:2b:52:f1:43:db:58:d6:4c:9d:0c:b8:7d:e2:0b:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:8D:8C:1A:1D:91:85:40:02:6B:85:D5:7A:2A:58:7B:0C:A2:B3
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:44:c4:34:b9:63:5e:b8:e4:4c:ed:20:bf:c1:a3:ff:f3:da:
         9d:e3:45:53:64:96:ef:85:ab:8e:44:98:62:91:97:ca:40:4c:
         a4:47:8a:f0:90:99:2e:ae:47:01:e4:24:29:20:a8:82:e4:dd:
         e9:51:3a:58:4e:19:58:7f:88:52:3a:25:de:6e:17:85:3c:13:
         c8:97:ec:c6:2b:8b:83:65:2e:38:34:14:1a:c3:b9:a2:d2:5f:
         f6:a2:7c:55:9b:9c:4b:48:23:a4:16:66:0a:6f:f2:5f:04:91:
         8e:20:6a:38:62:19:63:94:c8:a7:37:b9:47:84:e0:8f:60:69:
         b5:3e:3a:b3:ca:a2:b6:d0:bc:56:b2:ff:b4:69:37:e7:ba:03:
         04:ae:46:e3:a1:76:20:2c:0a:c7:33:2d:a2:17:aa:e6:b2:64:
         9f:bf:78:02:24:f1:4a:c4:dc:e2:75:08:41:ff:38:c8:2a:91:
         99:af:32:70:3b:4e:c1:d0:72:9c:7b:7e:da:ad:05:6b:58:c4:
         6d:95:d2:37:ea:b4:cd:51:e8:77:68:55:66:37:9e:12:6f:72:
         75:10:dd:78:89:d6:8a:13:6a:9d:23:46:df:63:58:24:6c:f1:
         7e:ca:da:43:02:a5:71:f7:34:b1:11:d2:67:ad:f3:82:8b:0a:
         00:6e:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:21 2026 by rpki-client