This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File:                     ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier:          2fNyGOu1lVLEYuI+HWXlhYxX6D5thJkX16aexJN1IZU=
Subject key identifier:   EC:C9:D4:4C:79:9B:DD:0D:EB:69:04:5E:42:84:AC:EB:13:A1:16:FE
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer:       /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial:       019BDEED6208AA38917E2B14ADCF5F06BC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number:          0AD1
Signing time:             Wed 21 Jan 2026 05:00:57 +0000
Manifest this update:     Wed 21 Jan 2026 05:00:57 +0000
Manifest next update:     Thu 22 Jan 2026 05:00:57 +0000
Files and hashes:         1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
                          2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
                          3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: ynNc0WWg2QnF7+fGcT5SM9Yz2aqGLfYXTRjhtBSbEks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:ed:62:08:aa:38:91:7e:2b:14:ad:cf:5f:06:bc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
        Validity
            Not Before: Jan 21 05:00:57 2026 GMT
            Not After : Jan 22 05:00:57 2026 GMT
        Subject: CN=ecc9d44c799bdd0deb69045e4284aceb13a116fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7e:2a:33:9e:cc:ce:37:b6:6f:70:ec:d7:39:
                    6d:e3:8a:e0:04:96:68:33:c1:d4:02:d6:20:14:f7:
                    f1:ba:c7:83:2c:11:f5:40:9a:4e:8c:93:2d:20:6f:
                    6a:c4:3f:d2:51:c1:56:c0:87:4a:87:b4:16:fc:5f:
                    97:7c:b4:62:17:d4:db:14:23:6b:b5:43:9f:ff:c2:
                    22:15:c0:db:51:19:fd:5f:f0:0a:c3:9c:c6:94:f6:
                    1b:fb:de:22:9d:9b:13:c9:a8:0e:1c:69:34:32:42:
                    7f:3e:18:90:bd:fb:f8:1b:03:82:86:d7:d8:2c:3f:
                    58:3a:de:08:61:6b:19:52:f5:88:31:e2:2f:98:63:
                    3f:01:a2:b1:24:d8:3c:34:20:aa:13:28:07:21:10:
                    ed:7a:53:0e:ed:f7:d6:ca:c8:4e:60:96:6f:46:88:
                    10:8a:6a:8d:cc:2b:f9:d6:fc:f0:ac:e9:17:56:02:
                    d0:30:ca:f5:81:0d:e7:fb:82:14:3a:1f:2a:a2:95:
                    ed:c3:c9:67:9b:76:77:66:bf:a4:3f:ba:62:a5:6a:
                    ba:bc:32:63:5c:11:dd:59:4f:78:4c:36:ad:9c:16:
                    d8:1e:03:b0:2f:76:3d:8c:c3:0a:69:05:4d:c0:41:
                    c1:0b:70:48:da:cb:7d:86:5a:54:ec:85:52:fe:e2:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C9:D4:4C:79:9B:DD:0D:EB:69:04:5E:42:84:AC:EB:13:A1:16:FE
            X509v3 Authority Key Identifier:
                keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:91:77:46:a3:62:53:fe:73:b3:a2:10:63:76:0b:3a:fa:
         a8:b7:26:0d:c1:41:3d:4d:d6:e2:08:e5:b1:6d:e2:d6:35:97:
         3e:f7:96:46:cd:70:d1:6f:4f:50:08:3a:d8:f5:32:62:94:a6:
         fe:3c:68:29:d0:ed:2d:64:de:df:f8:75:75:e2:3f:f3:d2:a9:
         da:69:fa:bf:36:51:4e:cb:59:d5:4a:c2:e7:17:5e:17:89:fe:
         a1:9d:76:f9:2a:d7:fc:99:74:14:52:10:72:59:a5:53:60:08:
         67:98:76:de:65:5e:a7:e9:a2:e3:db:66:fe:de:b9:ae:ba:d1:
         02:f9:cb:4f:c6:68:01:26:60:70:d2:c6:da:d6:e5:cf:d7:90:
         01:ae:bd:06:cb:8f:e3:43:fc:cb:f7:51:db:59:3d:9e:7e:83:
         a9:f1:67:98:34:45:a5:9e:d8:b6:7d:c1:09:fb:01:f0:9b:b4:
         8b:3a:42:c5:35:79:b5:94:fe:fd:cc:eb:1e:87:36:33:8b:2c:
         f7:59:98:8e:b7:db:6a:d6:cd:04:47:21:50:fc:ad:76:94:b0:
         cd:e7:df:4c:7a:6c:c4:6b:ae:c7:d5:82:57:dd:f0:99:45:18:
         90:75:23:4c:3c:4c:55:be:88:d6:a0:6d:ce:a9:bd:c7:51:b8:
         f4:98:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:37:08 2026 by rpki-client