This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File:                     zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier:          Pl+gkymBkB/OW8fn1PAOMJnnowjHF69rYNBxB1HF4Mk=
Subject key identifier:   1E:4F:3D:33:2B:7C:1A:D0:79:63:D9:33:09:5C:01:D8:4B:3D:EE:96
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer:       /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial:       019C43909A0FCBFD65C9980E150279E2998C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number:          1029
Signing time:             Mon 09 Feb 2026 18:01:15 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:15 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:15 +0000
Files and hashes:         1: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
                          2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: OzPZdIz+t6GB7PRqOygXI+Nqg6+KJEut3R48Pe3e6IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:9a:0f:cb:fd:65:c9:98:0e:15:02:79:e2:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
        Validity
            Not Before: Feb  9 18:01:15 2026 GMT
            Not After : Feb 10 18:01:15 2026 GMT
        Subject: CN=1e4f3d332b7c1ad07963d933095c01d84b3dee96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:1b:74:07:f4:ce:8b:22:3d:b4:7b:3a:70:
                    25:f8:29:4e:67:22:c7:07:96:78:67:02:11:2a:ab:
                    6e:f5:9a:d6:f0:02:cb:63:d8:47:49:e3:af:14:0d:
                    7d:6d:46:f3:d3:18:f7:d2:4e:6a:d0:73:05:25:05:
                    7b:6e:6f:7b:4c:fd:0a:b3:12:92:e6:7f:2b:d0:e6:
                    8e:da:42:6c:16:16:05:30:d5:26:da:db:0b:3f:37:
                    8f:10:ba:45:d0:ee:c9:d3:a3:80:83:b4:df:1d:22:
                    d3:92:24:e4:2b:68:1a:c9:08:71:60:e0:19:ef:cc:
                    c9:e3:f8:6a:62:94:8c:da:a9:29:30:97:c4:4f:c8:
                    7b:7e:ca:89:d9:79:5e:a0:e2:ed:c6:9d:54:cf:69:
                    6e:dc:b8:ba:65:77:b7:27:27:17:13:58:7f:42:6f:
                    07:35:f3:78:e1:44:ba:06:e6:e2:7b:0d:ee:00:d9:
                    37:75:8f:21:0b:32:ff:bc:49:a2:00:5f:6d:cd:0a:
                    de:81:fc:cf:45:f4:80:14:bb:37:49:da:36:14:01:
                    8a:97:97:b1:30:4a:0d:03:3f:c9:7d:c4:b2:3e:9f:
                    ec:2f:47:d0:29:cb:e9:49:d4:a0:84:bf:24:c1:53:
                    1e:29:2c:37:26:5a:62:67:07:c1:fb:e2:be:47:47:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4F:3D:33:2B:7C:1A:D0:79:63:D9:33:09:5C:01:D8:4B:3D:EE:96
            X509v3 Authority Key Identifier:
                keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:4f:ef:f1:f2:2d:b1:0d:34:63:11:1a:9c:a0:87:25:54:
         e5:e7:74:a8:bc:da:d7:9a:cd:53:39:0c:50:79:cb:31:aa:2d:
         bb:b5:5c:70:a1:62:83:de:cd:c7:f1:be:c2:c3:dd:8c:94:18:
         b4:d7:52:26:8d:92:7d:67:95:11:c9:2e:ff:ba:bb:19:34:fb:
         24:69:ab:99:ae:ce:e0:43:cd:33:8c:12:c6:2c:13:c2:39:89:
         32:1c:8c:88:7b:47:11:a9:34:6e:96:49:86:73:c3:8c:13:f4:
         52:17:89:b4:2c:d3:08:d6:3a:91:37:e7:52:16:52:ae:41:f9:
         e7:f9:9a:00:ea:49:36:3d:ca:71:0a:3c:1b:b9:2c:36:53:03:
         cf:07:27:93:1d:8e:b3:52:b3:68:96:65:a3:1f:25:d6:b6:2b:
         a3:ec:d3:4b:91:db:2c:69:23:e2:43:1a:73:64:71:c1:89:c7:
         33:4f:14:21:a1:95:7e:58:a8:a4:e3:67:82:c3:3a:9b:2f:90:
         4d:72:42:8d:db:6a:d0:59:f3:d3:77:fe:cd:51:9d:01:8d:85:
         af:89:06:0b:6b:fb:b4:ec:d5:78:d3:1d:30:bf:33:87:55:aa:
         e7:eb:a1:b2:9e:7f:a2:29:86:19:20:a3:ab:5b:d3:a2:63:3e:
         ce:90:18:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkJoPy/1lyZgOFQJ54pmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjYwMjA5MTgwMTE1WhcNMjYwMjEwMTgwMTE1WjAzMTEwLwYDVQQD
EygxZTRmM2QzMzJiN2MxYWQwNzk2M2Q5MzMwOTVjMDFkODRiM2RlZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslobdAf0zosiPbR7OnAl+ClOZyLH
B5Z4ZwIRKqtu9ZrW8ALLY9hHSeOvFA19bUbz0xj30k5q0HMFJQV7bm97TP0KsxKS
5n8r0OaO2kJsFhYFMNUm2tsLPzePELpF0O7J06OAg7TfHSLTkiTkK2gayQhxYOAZ
78zJ4/hqYpSM2qkpMJfET8h7fsqJ2XleoOLtxp1Uz2lu3Li6ZXe3JycXE1h/Qm8H
NfN44US6Bubiew3uANk3dY8hCzL/vEmiAF9tzQregfzPRfSAFLs3Sdo2FAGKl5ex
MEoNAz/JfcSyPp/sL0fQKcvpSdSghL8kwVMeKSw3JlpiZwfB++K+R0ea1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5PPTMrfBrQeWPZMwlcAdhLPe6WMB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeONP7/Hy
LbENNGMRGpyghyVU5ed0qLza15rNUzkMUHnLMaotu7VccKFig97Nx/G+wsPdjJQY
tNdSJo2SfWeVEcku/7q7GTT7JGmrma7O4EPNM4wSxiwTwjmJMhyMiHtHEak0bpZJ
hnPDjBP0UheJtCzTCNY6kTfnUhZSrkH55/maAOpJNj3KcQo8G7ksNlMDzwcnkx2O
s1KzaJZlox8l1rYro+zTS5HbLGkj4kMac2RxwYnHM08UIaGVfliopONngsM6my+Q
TXJCjdtq0Fnz03f+zVGdAY2Fr4kGC2v7tOzVeNMdML8zh1Wq5+uhsp5/oimGGSCj
q1vTomM+zpAYSg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:18 2026 by rpki-client