This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File:                     ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier:          gnSYrD5188EG6c9U4zJHrogxSqR9UHiqkn4XKFXJnZU=
Subject key identifier:   05:67:AB:8D:8D:FE:E8:0E:82:A4:3A:68:68:9A:63:54:43:4A:89:46
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer:       /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial:       019C43225357B7869D0E57D4019DF5E2CA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number:          0407
Signing time:             Mon 09 Feb 2026 16:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:48 +0000
Files and hashes:         1: EUnFTRWldaAfP3ttaxhxXqfYqdo.roa (hash: gYqt+Z3YRVRIHbrQgyPMmbW69V1RFqwRxQgWMMMLwI4=)
                          2: LkF8ib4KSmMJn8KFr7Mo8Jsbl_I.roa (hash: H+EbsIZLpp43we2PwY+fe71qWJFbXMa5gMz7K0E3sIY=)
                          3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: Ss4e+wYgfbbaErnHNiFM3B7Bo7np1WrfPo3drsn0g1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:53:57:b7:86:9d:0e:57:d4:01:9d:f5:e2:ca:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
        Validity
            Not Before: Feb  9 16:00:48 2026 GMT
            Not After : Feb 10 16:00:48 2026 GMT
        Subject: CN=0567ab8d8dfee80e82a43a68689a6354434a8946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:cb:b3:1d:a8:61:f9:9d:76:04:9c:78:49:
                    89:ac:c1:fc:49:d3:cf:33:56:62:9a:5c:65:93:84:
                    8a:1d:76:dc:0e:0a:9c:04:75:1a:4d:e0:cd:de:8e:
                    3c:db:76:ad:25:b3:52:f8:d5:03:0f:ec:83:b0:92:
                    25:e8:8f:01:ce:5f:90:11:a2:83:00:6f:c7:80:5b:
                    2e:87:83:40:48:a0:86:15:a6:2e:52:22:df:ea:18:
                    b1:52:36:b8:ef:06:f4:cd:1c:2a:53:80:a9:81:44:
                    a1:4d:36:d6:6c:bf:7f:75:e6:35:79:de:c5:ee:5c:
                    d8:75:d0:77:12:19:f7:7a:2c:a2:45:a4:9f:82:b1:
                    60:49:e8:7d:d1:e7:40:72:52:e6:b5:a3:b9:e3:4f:
                    34:33:2f:b6:9e:26:45:a4:f2:e4:a7:08:b0:ac:f5:
                    b0:c6:1f:fb:16:ad:2d:79:a4:6e:93:34:66:52:01:
                    d4:e2:a7:49:89:bf:17:43:bf:4a:84:06:97:0d:db:
                    bb:22:8c:bf:30:f2:ed:2d:0b:c4:0d:01:9d:a5:e7:
                    84:53:23:88:b3:ae:ac:bb:02:3a:73:98:b8:6c:2b:
                    3b:18:fa:06:ad:11:21:b7:c0:ce:8b:20:40:8d:53:
                    1c:54:fd:dc:c1:10:b3:59:44:fe:bd:b6:a9:4d:2b:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:AB:8D:8D:FE:E8:0E:82:A4:3A:68:68:9A:63:54:43:4A:89:46
            X509v3 Authority Key Identifier:
                keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:ff:13:8b:a3:ec:d2:36:16:38:2b:6c:0a:8e:b0:83:a0:
         bc:fe:12:09:ce:88:a4:95:4a:ea:cb:5b:6e:c9:d3:15:31:49:
         a5:e8:70:4a:d0:2b:40:2e:b7:65:45:a6:e4:30:1e:34:6c:78:
         69:89:2b:da:ac:6a:f2:81:2b:c0:14:f5:51:63:74:87:a6:0b:
         d8:18:2c:1e:43:f6:e4:a0:60:02:48:df:e7:db:b0:35:2c:f2:
         3a:29:bf:76:39:b6:89:6f:69:8c:6b:8b:f2:fd:ae:54:09:db:
         e9:f3:11:53:86:45:bc:6f:d4:a8:44:83:a2:9d:2d:78:10:66:
         e5:0a:a7:3f:79:12:27:ba:0c:eb:8a:ae:e1:4d:1f:0e:f3:3a:
         80:0e:d8:91:ae:53:8c:49:17:d7:51:13:02:84:0c:2a:e6:4c:
         d2:da:34:c7:01:18:0b:3c:d6:ec:e0:7e:ee:73:d3:df:15:68:
         29:a7:3f:fe:72:57:c2:cc:8c:69:ca:4b:32:ad:6f:b0:04:ab:
         63:21:90:70:c8:39:fe:c4:a2:8a:f8:bc:c0:45:98:1d:d8:fa:
         72:2e:f5:12:d7:58:20:34:bc:a5:0a:48:84:88:e0:95:d4:1c:
         35:d4:ff:95:fe:78:b2:41:f5:95:e6:1d:de:72:6d:02:6d:ab:
         17:0e:f8:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIlNXt4adDlfUAZ314spMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0
NzE0ODkwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD
EygwNTY3YWI4ZDhkZmVlODBlODJhNDNhNjg2ODlhNjM1NDQzNGE4OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNHLsx2oYfmddgSceEmJrMH8SdPP
M1Zimlxlk4SKHXbcDgqcBHUaTeDN3o4823atJbNS+NUDD+yDsJIl6I8Bzl+QEaKD
AG/HgFsuh4NASKCGFaYuUiLf6hixUja47wb0zRwqU4CpgUShTTbWbL9/deY1ed7F
7lzYddB3Ehn3eiyiRaSfgrFgSeh90edAclLmtaO54080My+2niZFpPLkpwiwrPWw
xh/7Fq0teaRukzRmUgHU4qdJib8XQ79KhAaXDdu7Ioy/MPLtLQvEDQGdpeeEUyOI
s66suwI6c5i4bCs7GPoGrREht8DOiyBAjVMcVP3cwRCzWUT+vbapTStyEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVnq42N/ugOgqQ6aGiaY1RDSolGMB8GA1UdIwQY
MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt
NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0
LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw3/E4uj
7NI2FjgrbAqOsIOgvP4SCc6IpJVK6stbbsnTFTFJpehwStArQC63ZUWm5DAeNGx4
aYkr2qxq8oErwBT1UWN0h6YL2BgsHkP25KBgAkjf59uwNSzyOim/djm2iW9pjGuL
8v2uVAnb6fMRU4ZFvG/UqESDop0teBBm5QqnP3kSJ7oM64qu4U0fDvM6gA7Yka5T
jEkX11ETAoQMKuZM0to0xwEYCzzW7OB+7nPT3xVoKac//nJXwsyMacpLMq1vsASr
YyGQcMg5/sSiivi8wEWYHdj6ci71EtdYIDS8pQpIhIjgldQcNdT/lf54skH1leYd
3nJtAm2rFw745Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:36 2026 by rpki-client