This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File:                     _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier:          /Dxsu0pBUx3EqvdFEdr+PTkGBn1JShPnvPSY4Dl2cJw=
Subject key identifier:   08:69:68:75:83:49:B8:DD:1A:4B:7C:27:24:1F:09:23:10:5F:19:AE
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer:       /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial:       019C420FA5A84374A97E09BF4B3B30CE9853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 11:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:47 +0000
Files and hashes:         1: 1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa (hash: aw9rHGkSfZiIUgRqcbBY40U13wLpn52XPqFkofANffo=)
                          2: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: j4TBdKEEhnLf0E/J3ZSpgP5Gap9Q7SfiXRhfZjDbwPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:a5:a8:43:74:a9:7e:09:bf:4b:3b:30:ce:98:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
        Validity
            Not Before: Feb  9 11:00:47 2026 GMT
            Not After : Feb 10 11:00:47 2026 GMT
        Subject: CN=086968758349b8dd1a4b7c27241f0923105f19ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:49:77:d2:7e:fb:f8:3d:1a:33:90:d6:e2:
                    a9:6b:29:f0:c3:a8:24:9b:9f:1f:8c:c7:3a:04:ba:
                    40:1d:13:13:23:46:6c:bc:59:a7:86:06:9c:78:ce:
                    fb:0d:52:4d:77:03:07:bb:df:4a:0c:80:7c:07:f1:
                    48:35:14:4b:0d:5b:80:71:88:17:f4:6c:5c:28:2a:
                    54:33:18:84:4c:88:63:0a:17:d4:57:f0:a1:e9:76:
                    45:f3:70:54:2e:35:5d:97:4b:c6:1e:c1:9a:7e:79:
                    a4:a0:ef:6d:64:91:62:9f:e1:7c:89:e2:37:cc:e2:
                    1b:42:ce:75:3b:0a:a0:85:6d:d7:6d:f6:90:02:f2:
                    0c:7d:e9:c0:b0:33:23:cb:13:75:1e:58:b3:b8:d4:
                    5a:f0:c6:57:76:64:0a:63:d9:cf:7f:f5:56:ec:0c:
                    71:21:69:e4:aa:b7:5f:d5:90:4e:dc:93:62:10:68:
                    09:6d:5b:be:5b:ed:d4:bb:7e:af:3b:fc:5c:df:e5:
                    e9:bb:16:8a:a4:f3:d1:03:11:e2:d5:93:c7:6a:28:
                    83:a2:18:56:33:5f:c5:59:f1:e2:95:b6:40:16:51:
                    31:1f:ad:c3:8c:71:01:61:da:67:c7:04:19:34:4d:
                    8f:6b:59:ad:14:07:78:f6:4b:3f:b2:c0:15:6b:e9:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:69:68:75:83:49:B8:DD:1A:4B:7C:27:24:1F:09:23:10:5F:19:AE
            X509v3 Authority Key Identifier:
                keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3c:64:66:d3:96:39:d4:cb:fb:1c:2a:1a:ee:6c:55:69:8f:
         0b:30:b2:92:9a:20:ca:b5:16:50:03:c6:a5:1b:81:06:2f:44:
         32:8c:f5:8b:cd:f7:65:ac:ca:b4:f9:53:0c:25:f4:3c:e8:0b:
         66:21:54:10:0d:30:8a:4c:5f:fc:63:62:67:94:94:fc:81:16:
         74:65:f4:b9:30:e9:ad:9c:ec:a4:ee:15:d7:95:9b:f9:05:67:
         d3:0b:6b:8b:26:f2:5b:23:3f:98:c9:a2:34:ab:df:b3:14:19:
         5a:28:17:5f:93:e7:d8:8f:29:f9:c0:1e:2b:a2:18:7a:ce:d0:
         b8:08:ce:57:84:37:a6:06:a1:b8:b3:82:49:8d:72:fe:f3:02:
         4d:10:3e:77:73:68:24:4b:09:80:a5:4a:2d:8c:7a:36:e5:24:
         eb:18:13:60:1e:f8:f7:2b:ae:07:07:d0:71:2f:e4:d2:8a:c1:
         b3:a8:bb:b4:90:cd:aa:b4:0e:08:e9:2c:12:d4:b5:27:e8:c0:
         28:68:88:c9:cf:5a:80:da:0f:8d:cb:ad:4c:3c:22:29:42:80:
         a6:56:bf:e5:6c:bf:67:d4:d6:4d:4e:a3:e1:9e:29:c1:9f:e1:
         40:bf:65:0d:31:a6:32:4c:1c:21:5d:65:e0:1f:d2:3f:dd:20:
         94:c7:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:48 2026 by rpki-client