This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File:                     Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier:          u09M5AZ7oQMyhE00WwWervPoljM9CTOCn7A2tgcMxRY=
Subject key identifier:   E9:78:21:FC:BA:3D:D2:B1:13:D7:57:B3:39:52:F5:0C:E7:E1:B4:D7
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer:       /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial:       019C43C71080FFFB7F196B1DB01AF881DECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number:          131C
Signing time:             Mon 09 Feb 2026 19:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:45 +0000
Files and hashes:         1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: aY0o9LORJmhtohbcRuxsBzOZhtQWH1fMBl7T7pLrlqo=)
                          2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:10:80:ff:fb:7f:19:6b:1d:b0:1a:f8:81:de:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
        Validity
            Not Before: Feb  9 19:00:45 2026 GMT
            Not After : Feb 10 19:00:45 2026 GMT
        Subject: CN=e97821fcba3dd2b113d757b33952f50ce7e1b4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:41:de:d7:3a:48:44:79:e9:d5:61:49:5b:9f:
                    72:18:8e:3a:85:4a:e3:12:93:fd:08:d5:0d:0c:3f:
                    cd:28:cb:b3:05:87:99:ad:35:e9:35:c9:b5:14:1f:
                    de:0f:16:ea:b0:3b:7d:60:4a:62:13:1f:19:97:6a:
                    63:a7:1c:1d:cb:ad:85:e0:04:1b:2d:6c:f1:22:a2:
                    e0:96:51:c0:f1:c1:6a:57:d9:b3:1b:f8:db:e8:34:
                    fa:57:bb:f3:cb:11:86:aa:65:9d:99:13:66:b4:db:
                    87:22:c0:f1:49:b5:02:34:83:f5:a5:e9:7e:4b:1f:
                    27:24:9f:b0:e4:b7:93:ed:6b:5b:39:e9:89:df:f3:
                    96:09:45:c7:da:d2:d9:b0:b2:1f:92:d8:27:fb:35:
                    aa:ac:92:9c:ab:37:42:43:ae:e0:f9:b7:e9:57:26:
                    b2:f6:c6:69:72:28:1b:ac:81:4c:bb:5d:4f:f9:8c:
                    93:c1:eb:84:f1:6e:cc:e1:e0:20:ec:80:ae:2f:ec:
                    6c:48:d0:dc:19:05:b0:03:9c:c8:19:70:53:32:0b:
                    8d:4e:35:10:c2:45:d4:67:c6:62:5e:93:e8:31:45:
                    82:b4:30:62:85:ed:64:04:cd:af:17:a5:aa:c3:b7:
                    45:79:81:c1:58:d8:fd:da:57:70:0b:f2:01:51:25:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:21:FC:BA:3D:D2:B1:13:D7:57:B3:39:52:F5:0C:E7:E1:B4:D7
            X509v3 Authority Key Identifier:
                keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:95:40:ea:02:f3:cb:c1:9f:99:7e:2a:81:fd:33:3c:f4:
         9f:02:13:6b:20:8e:a3:2c:65:22:6d:c6:7f:27:b1:51:3a:d8:
         5e:78:06:c5:e8:11:af:5c:91:3d:28:14:b1:0f:f6:c5:e2:45:
         d3:43:f3:2d:84:69:b7:dd:44:cd:58:54:6b:28:09:39:74:06:
         2b:ad:2e:c6:78:b1:1e:ea:0f:bd:1a:9d:46:46:cd:ac:47:e0:
         41:a1:6c:90:a5:f3:07:be:00:81:f7:5a:60:c3:16:f9:76:e7:
         45:96:84:20:05:b1:6e:a2:ee:b7:62:36:60:17:38:f5:43:ea:
         16:f5:ac:7d:2e:d4:f9:20:4f:eb:ca:e9:72:8c:03:72:5f:e7:
         7e:8e:df:eb:61:88:30:63:37:17:99:e8:19:55:ef:fb:4e:08:
         19:40:71:60:bc:53:f6:e3:04:fb:83:63:cd:eb:6a:5a:af:5c:
         9b:22:98:51:78:65:31:f4:0b:a3:d1:7c:9a:a8:37:7b:0e:41:
         24:f2:00:36:06:d9:46:aa:1d:1f:18:6a:34:9f:8f:0e:56:48:
         26:3c:2b:46:2c:0c:6f:9c:36:f5:00:f7:28:88:5d:bc:e2:ec:
         26:10:e7:46:b4:d8:4c:22:97:7a:70:23:2b:76:e8:ff:1a:9f:
         7f:46:4e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxxCA//t/GWsdsBr4gd7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjYwMjA5MTkwMDQ1WhcNMjYwMjEwMTkwMDQ1WjAzMTEwLwYDVQQD
EyhlOTc4MjFmY2JhM2RkMmIxMTNkNzU3YjMzOTUyZjUwY2U3ZTFiNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0He1zpIRHnp1WFJW59yGI46hUrj
EpP9CNUNDD/NKMuzBYeZrTXpNcm1FB/eDxbqsDt9YEpiEx8Zl2pjpxwdy62F4AQb
LWzxIqLgllHA8cFqV9mzG/jb6DT6V7vzyxGGqmWdmRNmtNuHIsDxSbUCNIP1pel+
Sx8nJJ+w5LeT7WtbOemJ3/OWCUXH2tLZsLIfktgn+zWqrJKcqzdCQ67g+bfpVyay
9sZpcigbrIFMu11P+YyTweuE8W7M4eAg7ICuL+xsSNDcGQWwA5zIGXBTMguNTjUQ
wkXUZ8ZiXpPoMUWCtDBihe1kBM2vF6Wqw7dFeYHBWNj92ldwC/IBUSUqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl4Ify6PdKxE9dXszlS9Qzn4bTXMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShOVQOoC
88vBn5l+KoH9Mzz0nwITayCOoyxlIm3GfyexUTrYXngGxegRr1yRPSgUsQ/2xeJF
00PzLYRpt91EzVhUaygJOXQGK60uxnixHuoPvRqdRkbNrEfgQaFskKXzB74Agfda
YMMW+XbnRZaEIAWxbqLut2I2YBc49UPqFvWsfS7U+SBP68rpcowDcl/nfo7f62GI
MGM3F5noGVXv+04IGUBxYLxT9uME+4NjzetqWq9cmyKYUXhlMfQLo9F8mqg3ew5B
JPIANgbZRqodHxhqNJ+PDlZIJjwrRiwMb5w29QD3KIhdvOLsJhDnRrTYTCKXenAj
K3bo/xqff0ZOdQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:24 2026 by rpki-client