This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File:                     Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier:          E/l0+uJ7HfheNWb259/aPWaw+usTfDxAgPBUStFBHCI=
Subject key identifier:   5D:08:38:31:61:61:CD:24:AE:8E:91:EB:24:74:5C:BE:0F:EB:7C:1A
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer:       /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial:       019C43220E745865094600DEB43D6F872997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:31 +0000
Files and hashes:         1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: ej4bL62Tp3F1Qglvq1QLeddGk/qoimyjgquwzbT7f7s=)
                          2: murlFmYx_3jII0U53z-9rIh7SG8.roa (hash: w5yfDhjnwIlIIwe71gL9gqS+X/CBCtrwx72RMbEM/eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:0e:74:58:65:09:46:00:de:b4:3d:6f:87:29:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
        Validity
            Not Before: Feb  9 16:00:31 2026 GMT
            Not After : Feb 10 16:00:31 2026 GMT
        Subject: CN=5d0838316161cd24ae8e91eb24745cbe0feb7c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:04:04:16:18:f6:60:3f:97:f9:80:9b:46:
                    82:6b:95:bb:27:a6:37:c9:76:f9:f4:f1:09:a7:d6:
                    41:90:8b:06:a3:2a:a9:d1:1d:22:14:8a:60:af:cc:
                    f5:4a:71:f2:85:b5:ca:c7:0b:d9:7b:c2:5b:a7:f2:
                    45:6a:c2:db:18:75:30:2e:0f:64:96:e5:ca:d8:cf:
                    97:9c:44:5b:97:e5:fd:e9:97:0d:1f:7d:9c:c2:2c:
                    6f:44:3a:ee:06:d2:73:70:e3:c0:ca:fa:e1:06:7e:
                    54:2a:78:ad:52:b1:02:3b:41:55:62:af:e9:1a:ba:
                    53:25:90:07:e6:e5:74:e4:ac:e7:43:3b:f1:0a:37:
                    21:35:b4:a4:0d:3a:e5:bd:85:4c:56:3f:85:0f:6d:
                    8a:4a:b0:df:df:0f:15:50:16:aa:3c:13:3c:e6:4a:
                    55:36:96:bd:b6:e9:69:cc:2b:8f:5a:a2:19:ca:85:
                    16:94:9d:7e:98:58:05:71:67:86:61:cb:c4:3a:c2:
                    4c:2d:4c:2c:9e:9b:12:94:17:bc:d9:dc:fc:13:e1:
                    ea:58:f8:12:e4:9f:f2:d7:a7:ff:d3:4b:0b:83:e0:
                    fd:49:78:46:10:6f:ff:ed:d7:98:73:9b:73:01:35:
                    14:fd:6c:8d:a6:67:06:94:06:a4:cd:7a:43:cb:d2:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:08:38:31:61:61:CD:24:AE:8E:91:EB:24:74:5C:BE:0F:EB:7C:1A
            X509v3 Authority Key Identifier:
                keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:3b:eb:c5:4a:08:56:b0:5a:d6:47:2f:8a:55:26:e4:88:
         7c:90:e6:c2:6a:29:91:9e:8e:26:8b:15:85:eb:07:33:9f:0f:
         cd:14:29:f7:a0:55:1f:c9:f6:13:a4:9a:6d:93:44:cb:fa:e1:
         90:0b:dc:ce:96:7e:54:06:37:39:f7:0e:67:d2:70:9b:77:37:
         cf:bb:9d:83:89:14:6b:b9:14:19:e4:49:94:a1:88:6c:68:a6:
         35:2b:39:76:24:da:6f:3b:2c:85:7c:2f:bb:8a:45:81:87:a3:
         71:34:2c:88:c5:f7:57:de:42:ea:47:1e:31:e2:4e:65:f2:b4:
         51:ba:0b:ec:a8:82:90:b8:d6:ea:da:94:25:88:b5:78:bd:b5:
         47:1c:11:40:c3:db:fe:8b:78:59:80:3a:4b:e8:0b:99:49:bd:
         a2:d0:5f:8b:04:5d:00:e7:a6:2b:38:e5:a6:d5:86:74:94:d9:
         3e:2e:8e:50:b6:41:b5:cc:a7:58:0a:14:cd:d9:86:0d:d5:b6:
         f1:4a:72:77:4b:09:cd:c6:a4:4e:3a:a5:8a:f2:fa:93:74:92:
         d7:b1:d0:cc:58:a0:48:2a:ee:30:51:35:ae:a6:99:bb:ff:82:
         42:48:81:89:e6:81:19:37:f9:fa:cc:12:b3:43:f6:9d:ec:cf:
         45:6d:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:02 2026 by rpki-client