This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          Wb32166z1tAscZQTh7/wujGeEO6Cob85huIu5TUm0VE=
Subject key identifier:   61:FE:D7:35:D0:8C:28:97:4B:B6:16:28:00:32:6E:42:D4:02:2E:70
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       019C43C6B6B112991D64D1396B9913691F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          094F
Signing time:             Mon 09 Feb 2026 19:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:22 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: MLsGVqIL2sxzo8i5gBnUk7yI3I2hvZbG/5JHNy1O+uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:b6:b1:12:99:1d:64:d1:39:6b:99:13:69:1f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Feb  9 19:00:22 2026 GMT
            Not After : Feb 10 19:00:22 2026 GMT
        Subject: CN=61fed735d08c28974bb6162800326e42d4022e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:12:d0:40:9c:3a:69:d0:6f:6e:52:7d:b6:
                    a2:70:49:c7:11:6e:b5:84:cb:f4:8b:a2:7c:00:c2:
                    ae:b7:66:af:29:66:d5:5f:79:f6:8b:33:16:4b:bb:
                    dd:ef:bb:1d:eb:28:5a:95:19:35:19:ae:c5:4c:d3:
                    06:10:20:81:20:5f:9d:d2:1a:de:36:4d:50:fc:81:
                    b8:55:5a:a1:3b:ea:13:11:14:e0:09:1e:4e:22:da:
                    27:96:2c:40:ce:1d:31:08:f3:83:88:64:3e:51:1c:
                    ce:31:c8:05:8c:6a:93:6b:6e:02:b8:56:57:f1:dc:
                    90:7a:6a:13:ec:a6:a6:89:8c:bb:f4:6e:61:df:19:
                    f2:c4:2f:18:5d:5c:89:69:b9:b9:ee:c8:e5:82:90:
                    51:b0:11:3a:70:42:b9:94:ba:4c:fd:21:3a:4e:ee:
                    34:10:b8:81:d0:9b:60:b2:b5:fe:7b:4a:11:0b:92:
                    47:a6:fd:0a:14:d9:31:e7:86:e5:8c:d4:17:fa:a1:
                    c6:1f:62:de:05:df:ad:72:ce:31:ea:83:eb:7c:8d:
                    df:7c:a5:98:71:67:e5:0d:e6:96:df:c6:f9:14:66:
                    28:a8:2d:03:14:2e:3d:60:51:ce:e5:88:e1:ae:4d:
                    68:8a:35:7e:80:c7:8d:6f:68:25:50:47:0d:f7:9a:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:D7:35:D0:8C:28:97:4B:B6:16:28:00:32:6E:42:D4:02:2E:70
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:14:46:a0:17:a2:4c:7e:2e:d0:bb:78:81:f4:31:2c:b6:
         dc:a8:5a:02:8e:ce:fe:59:a6:ec:4a:44:06:93:f2:3a:00:5a:
         9a:16:25:eb:16:1a:c1:e2:fb:79:66:e4:25:42:e2:77:e8:c4:
         99:cc:05:b0:e2:ed:07:f3:55:c0:ac:7b:12:af:89:e3:e7:9e:
         51:a8:68:be:c1:5d:89:24:91:26:e7:11:3e:9a:e1:ce:3e:b5:
         2f:bb:3e:a2:ef:ec:46:04:86:d0:ea:61:5c:cd:ce:e7:58:98:
         ae:3e:25:60:23:78:a0:a9:34:4c:4d:cc:c4:da:30:7b:fa:3a:
         a6:94:c0:68:8c:66:ce:35:23:a8:72:67:95:d8:7d:1e:28:ad:
         cb:dd:0a:be:54:57:c8:56:49:b4:11:27:a9:92:43:84:9a:08:
         e9:97:c4:33:e1:8d:29:f0:d8:b1:f6:a7:f5:bf:eb:84:02:09:
         c6:a3:a6:a2:40:b7:85:3d:d7:cc:54:63:4c:15:0d:6f:59:31:
         da:f1:6f:6d:f5:53:ad:1e:6d:2e:3c:e4:00:55:3a:c1:3e:11:
         14:fa:de:be:28:53:37:5e:13:77:00:04:02:fb:de:e0:f0:6e:
         7c:30:a6:13:61:ea:4c:94:8b:83:1b:8d:33:83:f5:a0:45:84:
         62:fc:53:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxraxEpkdZNE5a5kTaR8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWI0N2EyZWFhYWU0YzEwMzRjOTEwMDNlN2NmZTNkMzhk
MWU1NTUwHhcNMjYwMjA5MTkwMDIyWhcNMjYwMjEwMTkwMDIyWjAzMTEwLwYDVQQD
Eyg2MWZlZDczNWQwOGMyODk3NGJiNjE2MjgwMDMyNmU0MmQ0MDIyZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJwS0ECcOmnQb25SfbaicEnHEW61
hMv0i6J8AMKut2avKWbVX3n2izMWS7vd77sd6yhalRk1Ga7FTNMGECCBIF+d0hre
Nk1Q/IG4VVqhO+oTERTgCR5OItonlixAzh0xCPODiGQ+URzOMcgFjGqTa24CuFZX
8dyQemoT7KamiYy79G5h3xnyxC8YXVyJabm57sjlgpBRsBE6cEK5lLpM/SE6Tu40
ELiB0JtgsrX+e0oRC5JHpv0KFNkx54bljNQX+qHGH2LeBd+tcs4x6oPrfI3ffKWY
cWflDeaW38b5FGYoqC0DFC49YFHO5Yjhrk1oijV+gMeNb2glUEcN95phQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH+1zXQjCiXS7YWKAAybkLUAi5wMB8GA1UdIwQY
MBaAFM5bR6LqquTBA0yRAD58/j040eVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMWYyNWYtZWVkNS00N2FkLTkyZDQt
ZTI3MzYwNzk2ZTE4LzEvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zMWYyNWYtZWVkNS00N2FkLTkyZDQtZTI3MzYwNzk2ZTE4
LzEvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7oURqAX
okx+LtC7eIH0MSy23KhaAo7O/lmm7EpEBpPyOgBamhYl6xYaweL7eWbkJULid+jE
mcwFsOLtB/NVwKx7Eq+J4+eeUahovsFdiSSRJucRPprhzj61L7s+ou/sRgSG0Oph
XM3O51iYrj4lYCN4oKk0TE3MxNowe/o6ppTAaIxmzjUjqHJnldh9Hiity90KvlRX
yFZJtBEnqZJDhJoI6ZfEM+GNKfDYsfan9b/rhAIJxqOmokC3hT3XzFRjTBUNb1kx
2vFvbfVTrR5tLjzkAFU6wT4RFPrevihTN14TdwAEAvve4PBufDCmE2HqTJSLgxuN
M4P1oEWEYvxTnQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:48 2026 by rpki-client