This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File:                     Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier:          Hasq4LwREuVPcmRmNcmO6eQMzEM3eXNhmvTPM5s/2Ag=
Subject key identifier:   53:D4:07:4C:39:12:6D:BA:6B:C1:F7:00:C9:CB:2B:56:37:F8:46:6A
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer:       /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial:       019C45109D5E3197D0EC2976EF377613128C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number:          07AD
Signing time:             Tue 10 Feb 2026 01:00:42 +0000
Manifest this update:     Tue 10 Feb 2026 01:00:42 +0000
Manifest next update:     Wed 11 Feb 2026 01:00:42 +0000
Files and hashes:         1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
                          2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: PzsHVhObgciJwaWePN+ZchN/1UUuq1y/E1d/ah2wkls=)
                          3: wDaukqq7DBMLY3tz0NlY1IroUx0.roa (hash: 3J9MoAyfecCeK4hgjY1lICytZk6haCoZrI0pumvGF1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:10:9d:5e:31:97:d0:ec:29:76:ef:37:76:13:12:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
        Validity
            Not Before: Feb 10 01:00:42 2026 GMT
            Not After : Feb 11 01:00:42 2026 GMT
        Subject: CN=53d4074c39126dba6bc1f700c9cb2b5637f8466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:e8:e8:8b:7e:01:d6:c0:e8:90:d5:6f:87:
                    b9:01:46:e9:f6:6a:81:58:0f:a8:c7:dd:56:85:d4:
                    d7:d7:22:d6:42:01:70:0c:ef:9f:98:40:4f:61:64:
                    2e:f9:1b:2f:5e:5b:d0:c1:77:2d:12:cb:06:34:c8:
                    a3:7f:41:e4:b2:a7:df:56:37:33:1a:ff:e8:8f:16:
                    35:59:d1:06:66:ba:bd:ce:81:d7:03:cd:84:68:1d:
                    6d:be:8c:66:16:b4:0e:83:2b:62:06:24:6c:60:e7:
                    83:cb:15:08:cb:11:69:fa:82:40:2b:95:06:32:0f:
                    be:80:1c:1b:ef:32:a5:d1:88:d4:14:3a:e4:07:7d:
                    f5:20:db:a0:fc:32:5c:bb:d1:fb:da:26:29:c4:5f:
                    95:8f:9d:71:4f:36:ba:fa:ed:2e:86:b5:8d:05:32:
                    f5:e1:9f:c5:59:f1:a7:3f:77:67:98:b5:94:b2:48:
                    a7:07:d3:1f:22:00:41:fd:af:6c:e3:7b:52:ef:a4:
                    ae:f3:ad:f1:9e:57:c2:87:dc:b8:e2:14:55:b7:5d:
                    24:87:47:4a:4c:11:d0:fe:dd:4f:09:94:34:19:9e:
                    a4:4a:08:93:1d:50:37:c7:7a:a1:23:be:5c:60:1a:
                    51:af:66:8b:dd:da:4d:e5:10:40:fd:5d:69:31:66:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:07:4C:39:12:6D:BA:6B:C1:F7:00:C9:CB:2B:56:37:F8:46:6A
            X509v3 Authority Key Identifier:
                keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:51:0b:5d:ae:c8:19:ea:35:bf:c3:3e:79:eb:04:e0:34:
         f7:0a:2b:b7:e5:0d:a1:1a:06:8a:e8:03:b3:6d:ed:e1:dc:52:
         1b:6d:30:a8:88:96:f8:89:d8:22:c8:9c:29:d1:31:7a:ee:88:
         bb:f9:3f:68:10:21:f7:b0:0c:a3:2a:1d:95:00:31:d7:e2:4b:
         e9:84:a8:3a:43:3e:5a:b3:55:b7:78:b6:7d:a5:1e:bb:ae:89:
         e4:eb:dc:a7:79:96:4a:1c:e4:0a:8c:23:da:ff:ea:47:cb:15:
         88:7c:83:7a:a6:bb:f1:d5:93:75:5c:e1:8c:2a:59:f7:89:11:
         04:94:2f:33:17:b3:9a:85:8b:fd:27:09:bc:22:e4:27:33:ad:
         ca:85:3b:8c:db:b5:d0:ca:c1:dc:27:ee:73:b8:c4:19:b1:0d:
         bc:55:88:f6:4d:73:53:0f:6c:7c:17:ca:e1:05:43:ac:c5:d2:
         70:bb:46:e4:2a:7c:87:d3:77:c5:9f:6a:62:8c:7f:f5:10:8a:
         17:53:b8:7e:9e:f3:29:49:7e:b0:9d:08:de:a1:4c:06:26:37:
         a6:dc:5a:af:a5:01:78:db:43:21:87:32:7f:23:85:44:58:bf:
         ad:93:2c:56:56:62:0b:e5:53:4d:87:f1:16:9d:6e:fa:f8:90:
         ec:0a:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:40 2026 by rpki-client