This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          aGD8NyisoViszjdVXMfuCUQIx4fndhtpWjF9/Qn1uWE=
Subject key identifier:   7B:47:B5:2B:6E:D2:36:7F:DE:E4:12:C1:BC:14:8A:BC:52:74:DD:DF
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       019C1EDEA761F240D9A4FCA7C68D989DF07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          1808
Signing time:             Mon 02 Feb 2026 15:00:34 +0000
Manifest this update:     Mon 02 Feb 2026 15:00:34 +0000
Manifest next update:     Tue 03 Feb 2026 15:00:34 +0000
Files and hashes:         1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=)
                          2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=)
                          3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=)
                          4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=)
                          5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=)
                          6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=)
                          7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=)
                          8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=)
                          9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=)
                          10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=)
                          11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=)
                          12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=)
                          13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: pkU3Ic6u4g/prwPLGfCMDbEw//yALG4ZFdjNq8scOhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:de:a7:61:f2:40:d9:a4:fc:a7:c6:8d:98:9d:f0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Feb  2 15:00:34 2026 GMT
            Not After : Feb  3 15:00:34 2026 GMT
        Subject: CN=7b47b52b6ed2367fdee412c1bc148abc5274dddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:16:0a:ce:8e:e6:6f:d5:d6:3e:fc:62:d9:
                    80:6b:24:bf:8e:be:f6:8a:bd:21:36:ce:08:7b:8e:
                    d8:d3:d3:d2:68:b5:5d:de:42:7b:b4:51:f7:f4:90:
                    fe:65:98:30:15:8e:2f:42:27:cb:ff:e2:35:20:f7:
                    7d:94:7f:c4:5c:d5:77:ce:dd:2a:51:22:f1:c1:8b:
                    3f:21:f3:f0:9b:61:94:11:e0:3d:5d:ec:dd:37:57:
                    cf:b6:fb:66:7c:9e:1e:a3:49:55:92:6d:13:47:cd:
                    9c:a8:3e:21:96:6b:9e:39:50:c7:4a:f4:0d:a5:3a:
                    ac:40:d9:59:e2:06:bb:ce:51:b5:0a:a6:7e:dd:a1:
                    10:e5:0a:32:8b:02:be:09:49:e9:37:a9:82:f1:b1:
                    b9:9f:71:56:d9:67:45:cf:a3:04:6b:8d:a0:9b:6e:
                    fd:ac:59:50:88:56:9a:a0:a9:f2:f1:f2:93:3f:1b:
                    14:12:f9:c5:0f:9a:9c:83:a7:6c:56:3a:b5:f3:5e:
                    04:30:7e:90:c3:28:b0:6b:df:f8:6b:8d:ee:18:17:
                    ba:6c:d1:99:f8:a6:11:f7:65:6a:76:fd:31:ff:f4:
                    6b:d8:6b:7e:40:16:66:d9:81:47:52:d0:df:58:a1:
                    49:e9:09:4b:45:fc:69:1f:9e:ee:df:8e:06:d2:fb:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:47:B5:2B:6E:D2:36:7F:DE:E4:12:C1:BC:14:8A:BC:52:74:DD:DF
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:47:94:de:ad:ed:20:41:69:b2:86:44:3e:a2:1f:07:1a:
         8b:2d:4c:e3:80:e8:1b:2c:e7:0c:ab:17:b1:3b:17:ae:ed:ed:
         7f:14:28:0d:72:25:5b:b8:a6:cc:67:29:82:9b:1b:2b:97:68:
         14:1b:2d:93:75:10:05:f3:0a:52:b3:a7:8f:19:38:15:b7:74:
         f9:9f:06:3d:12:ce:27:a6:9a:94:55:19:eb:1a:cb:9a:74:dd:
         cb:57:73:9f:be:c9:84:17:07:17:d6:20:2f:1c:e4:bf:d1:b7:
         ad:4b:2f:d1:07:52:43:7b:1b:12:7b:34:44:a7:2c:64:5a:93:
         d7:01:dd:57:24:57:f9:1c:0f:01:af:b4:4e:01:a4:04:f8:e1:
         bc:48:34:28:a2:45:c7:8f:81:e7:ca:7b:b4:f2:9c:4a:84:e4:
         40:30:b1:89:dd:78:5a:45:c2:87:b9:55:22:b0:f5:df:63:c9:
         2b:ba:04:33:04:5d:4d:f6:02:1c:15:26:79:5b:05:c0:27:a8:
         7e:45:57:17:ea:d8:cc:41:30:f3:d2:6d:95:52:18:d8:3c:43:
         d0:98:bc:eb:54:25:f9:2c:40:1e:b3:99:7b:45:13:4f:68:fb:
         12:f0:f8:2a:3d:9a:ce:95:97:da:9f:ae:65:08:24:a0:ac:f6:
         33:2c:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:34:56 2026 by rpki-client