This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File:                     zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier:          t6C7hDMDpzpUzgc7GBYbo18xtokOa/3VuhQlbVLvuTQ=
Subject key identifier:   23:24:D0:DE:C5:D3:95:E1:1B:14:F6:96:1C:F7:E6:9C:94:BA:66:05
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer:       /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial:       019C432213BAC79D29D137B5AAE5876CEB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number:          0320
Signing time:             Mon 09 Feb 2026 16:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:32 +0000
Files and hashes:         1: sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa (hash: TYha/rKs1ePCSrjre9LK7iVoQd2uvPGLNTbl1Ahn9QU=)
                          2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: E9lgwoRUNpZBOARLQPypCH9CrHhZ1Mq2iyC4rKZfQR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:13:ba:c7:9d:29:d1:37:b5:aa:e5:87:6c:eb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
        Validity
            Not Before: Feb  9 16:00:32 2026 GMT
            Not After : Feb 10 16:00:32 2026 GMT
        Subject: CN=2324d0dec5d395e11b14f6961cf7e69c94ba6605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:7b:3b:78:77:5e:54:93:cf:96:8c:95:5e:
                    21:c3:56:ec:02:bd:15:d9:91:1a:6c:18:26:09:1d:
                    30:96:9a:ee:75:1c:6c:51:1e:4d:b7:74:ec:b9:6d:
                    c7:d9:6c:32:59:47:0a:0f:b9:91:e9:cb:72:84:68:
                    1e:69:af:5d:06:28:70:49:e9:e4:27:92:8f:e4:a9:
                    34:4e:9d:27:84:62:fb:af:01:79:ba:d3:9d:cf:ce:
                    5b:05:77:ea:b5:eb:df:c2:29:0f:2d:6d:a9:8e:85:
                    b1:ea:50:31:ac:8f:b1:2d:bf:24:46:88:9b:9e:f1:
                    5d:a8:ce:2a:57:41:0f:22:ed:cc:6f:1b:a7:1a:26:
                    65:1f:9f:bc:c6:68:5e:86:7e:07:47:5e:31:d6:11:
                    3e:8b:c0:52:4f:7f:68:f3:73:cd:e9:e8:c5:d6:14:
                    38:74:34:37:d4:c1:d5:eb:41:eb:de:5a:48:d7:be:
                    3b:99:bd:44:4c:a6:fa:e2:71:75:4c:b5:18:a4:83:
                    3f:db:00:b2:f1:25:ec:0c:2b:2f:bb:7d:5f:5f:5d:
                    69:8b:43:ea:94:65:d9:c5:2b:60:2c:49:ef:6b:44:
                    bc:f5:b6:a7:36:9c:ff:b2:85:0c:c9:86:aa:8c:32:
                    32:24:84:86:97:da:84:26:1b:30:80:dc:9b:f7:74:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:D0:DE:C5:D3:95:E1:1B:14:F6:96:1C:F7:E6:9C:94:BA:66:05
            X509v3 Authority Key Identifier:
                keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:1e:fd:fd:47:2e:f5:5e:31:5a:47:13:c4:ac:35:75:96:
         cb:ba:1d:76:ee:8e:bb:8d:4f:e6:e4:90:fe:8c:03:bc:95:f3:
         c9:2e:36:74:da:3c:51:af:37:a3:ed:7f:9a:df:bf:29:9d:e1:
         c1:49:0f:d2:3e:09:09:30:64:de:79:76:c2:8f:96:f3:3c:0b:
         2b:71:7e:34:cd:f7:ca:76:3a:c3:c3:60:04:d5:80:a2:61:c5:
         9a:eb:ab:c8:a4:ba:e7:60:af:c8:3d:20:25:8f:9b:9c:7d:a9:
         9b:4f:7d:1f:02:76:56:8b:3f:b5:ab:68:91:54:b2:15:93:55:
         fa:8f:ee:97:d5:1e:c1:81:b3:7f:9f:29:cf:10:bd:45:d2:de:
         60:11:ae:4c:67:7c:6a:08:0e:ff:9f:a5:c5:ba:f6:2c:c9:f6:
         d9:a4:74:80:20:ab:ea:0b:05:71:8c:58:4e:9f:4d:21:64:16:
         cd:47:a0:49:7c:c4:d5:e1:6a:dc:af:4a:a8:2a:63:76:c3:33:
         27:8b:88:32:18:60:af:10:4a:77:ec:7c:80:a9:ad:4f:d5:91:
         ed:7a:e2:68:d5:19:8d:29:c3:22:d0:89:33:e7:f5:23:cd:e2:
         20:19:98:aa:bd:2e:04:32:27:6d:89:76:bc:41:28:e9:99:c7:
         45:62:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:26 2026 by rpki-client