This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File:                     zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier:          IGwvoyS4McHadrZRiyqhRe4qar/YPLBzsjtIHtsJrU0=
Subject key identifier:   F8:40:BB:79:34:EF:D0:57:19:A0:1E:2C:87:67:D9:E6:AF:B1:AD:60
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       019BF72D84A3094F6E2237D7BB9F95D0CC94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number:          1529
Signing time:             Sun 25 Jan 2026 22:01:53 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:53 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:53 +0000
Files and hashes:         1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
                          2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: FOsTb1UDYYxYcaHppKiQH4OdeUAvLEepB45Plh3J3Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:84:a3:09:4f:6e:22:37:d7:bb:9f:95:d0:cc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Jan 25 22:01:53 2026 GMT
            Not After : Jan 26 22:01:53 2026 GMT
        Subject: CN=f840bb7934efd05719a01e2c8767d9e6afb1ad60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:02:86:87:1a:c7:c5:31:f0:e7:db:49:61:
                    55:a6:aa:e1:83:ff:42:7f:d4:5a:52:b7:75:d9:69:
                    97:c4:9c:c0:5e:e3:92:b1:76:93:e8:0f:d9:c2:ec:
                    bd:38:03:43:64:7e:7b:8b:b2:a3:71:0c:54:ef:c3:
                    69:bf:4c:f6:b7:48:b5:8b:6a:67:65:53:f5:44:8e:
                    b0:d6:62:f7:c6:24:55:22:20:e8:26:75:44:ff:fb:
                    32:db:65:db:0e:19:ba:da:5b:db:2a:7f:66:70:72:
                    9d:0c:08:19:2b:eb:99:96:a2:57:d8:4e:c2:29:6c:
                    98:cf:04:fe:1f:6f:ae:3a:53:9c:07:6a:18:0d:9e:
                    af:80:37:4a:4b:db:68:78:e0:18:fe:d4:6a:55:8d:
                    92:5e:be:f9:b6:e9:41:85:2e:95:df:d8:65:a7:73:
                    cd:72:46:5f:9a:16:9a:15:6b:3c:e8:62:9b:d7:bf:
                    50:f4:67:9c:13:f6:3e:41:04:47:d2:11:7b:ea:09:
                    97:d0:4d:07:18:03:0c:5d:cc:1a:04:16:56:9f:d5:
                    e6:54:02:21:9a:2d:4f:1f:e4:56:ca:84:7e:98:f2:
                    7d:9b:21:76:44:16:ef:83:fb:3c:f5:ba:99:23:00:
                    29:6a:c0:be:3d:70:07:00:d8:6b:40:ed:99:b9:15:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:BB:79:34:EF:D0:57:19:A0:1E:2C:87:67:D9:E6:AF:B1:AD:60
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b9:90:8a:52:b2:07:29:5c:d3:18:65:3d:0c:30:90:20:c8:
         aa:80:7a:b5:f0:fb:8a:97:31:ec:40:2e:ac:b0:d6:f7:41:b6:
         24:00:b6:4e:d9:00:07:95:02:3f:f8:39:14:a9:d3:96:32:bf:
         8f:74:59:b1:54:e7:38:10:f4:d3:d1:2c:0a:a9:7f:fd:24:4a:
         14:67:2b:e3:a7:26:19:9c:ea:d2:aa:61:9e:66:a3:a7:ef:d3:
         a8:d1:7b:e9:2d:54:fd:73:38:ec:82:be:df:ae:8f:85:cb:bd:
         30:d6:3a:0b:ab:93:a7:d8:63:3c:19:38:87:c9:73:1d:a9:d7:
         ad:30:6a:a5:5a:3a:b9:57:6e:72:92:0a:b7:f6:2d:b3:4f:0b:
         91:cd:68:2b:7f:b9:6a:81:dc:cc:90:e4:8d:26:7e:12:30:11:
         49:1e:a7:75:36:e8:41:96:57:90:84:89:69:91:82:51:33:db:
         03:af:51:7c:65:18:f2:7c:e6:cd:2a:14:57:14:6c:ee:8f:d9:
         b6:c2:8b:6f:13:18:f8:04:b1:03:cb:11:f8:1d:0b:d2:4a:ea:
         05:10:65:40:91:3a:a6:73:9d:d2:af:33:9c:02:23:8b:6a:54:
         f4:c6:b2:59:f9:8b:30:28:f1:a4:d1:ac:79:28:88:87:ad:d9:
         e5:2b:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:49 2026 by rpki-client