This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File:                     ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier:          OGVBTmcnpaVdmW7YWDWirg7ZzoYkm//He/8/CCaKPLw=
Subject key identifier:   65:98:3A:5B:E8:66:CD:50:7F:07:FF:A1:1E:9B:57:B8:1E:CF:CE:63
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer:       /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial:       019C4359069BDA0079E5034371F4FDF263D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number:          13F9
Signing time:             Mon 09 Feb 2026 17:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:33 +0000
Files and hashes:         1: R4biYlru54aTOhXabFWJZhdtNlE.roa (hash: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU=)
                          2: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: AGodiY6P4NT7kKg5xShRFs7XaBvo0QqjVqRRBaW5djo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:06:9b:da:00:79:e5:03:43:71:f4:fd:f2:63:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
        Validity
            Not Before: Feb  9 17:00:33 2026 GMT
            Not After : Feb 10 17:00:33 2026 GMT
        Subject: CN=65983a5be866cd507f07ffa11e9b57b81ecfce63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:f8:4c:15:af:d4:d8:64:c0:fc:c7:2e:1b:
                    98:80:0b:4c:01:c3:96:9a:91:2e:bd:c8:10:d7:c2:
                    7c:20:65:3f:43:fe:6d:4a:19:3c:53:20:4f:b9:52:
                    ce:0a:be:df:b1:4a:db:dd:26:b1:5c:47:52:49:f1:
                    43:20:4d:92:6f:80:26:64:4c:b5:5d:89:0d:2b:26:
                    95:1a:44:30:ef:1e:d0:0f:2f:92:f1:24:f1:bd:b4:
                    81:81:13:76:37:de:56:df:6a:32:a4:07:a0:a6:3d:
                    fb:6e:4b:5b:6e:eb:d2:fc:8a:51:62:e7:9b:b2:4d:
                    9c:83:0f:f5:d2:ec:5f:d6:c3:77:2d:82:20:9a:55:
                    d6:c0:d6:62:d2:2d:28:46:ea:3c:24:f0:2d:b8:53:
                    d2:9d:f8:f0:09:02:57:7b:a0:fc:4d:82:c9:23:4a:
                    ab:2c:44:09:f6:f1:42:6f:cc:df:8c:58:26:bf:0e:
                    9b:75:ed:29:f4:18:d4:6e:34:d2:6e:24:bb:d6:73:
                    26:45:e1:80:0c:48:b6:ea:b6:d3:8e:d1:a4:3a:9b:
                    53:69:b0:64:b0:7e:bb:34:47:e7:8b:eb:33:07:42:
                    7b:87:ca:d3:16:e7:da:b4:bd:47:21:9c:f7:17:45:
                    d6:b0:4c:b4:72:6d:94:33:89:72:69:6c:12:18:00:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:3A:5B:E8:66:CD:50:7F:07:FF:A1:1E:9B:57:B8:1E:CF:CE:63
            X509v3 Authority Key Identifier:
                keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:7a:30:6b:8f:bb:68:80:4a:6f:be:fc:9b:21:ed:8a:fd:
         0a:6d:18:a2:95:db:1e:a2:a0:b4:e5:d7:dd:0b:98:14:00:62:
         c4:07:7c:a3:63:80:31:5a:8d:a6:17:8e:07:40:53:80:83:b2:
         b2:28:c1:22:d8:c1:bd:89:37:a5:90:57:d9:a7:50:76:a7:23:
         c4:aa:6b:0c:df:8e:12:4c:7d:63:3b:a7:43:62:c0:8c:36:28:
         9f:04:58:ff:b3:cf:30:c2:51:6c:71:d2:b4:2b:1e:dd:6b:c1:
         00:02:71:90:58:79:ea:c6:67:cc:63:ad:32:a3:ac:63:fd:d2:
         86:03:4f:a1:6b:64:59:47:6d:38:8e:c4:42:cf:44:27:34:c0:
         39:e1:e7:9c:fb:c4:9d:66:78:0d:a2:91:ae:8d:f0:3c:14:58:
         07:fb:3e:5a:96:17:61:17:85:a0:7f:b3:bf:13:1a:35:1f:e6:
         ee:34:f1:54:71:95:02:55:e2:26:2b:3f:ca:da:a9:86:ab:60:
         ee:f0:32:19:74:5b:39:ea:00:dc:db:f1:ce:fe:45:67:34:25:
         ab:fe:b4:7d:21:c3:e6:9d:fb:bf:9d:5b:22:b0:a0:1a:78:83:
         c7:9a:c4:b0:5a:b3:01:b4:6d:da:97:69:95:74:4d:9c:74:ab:
         cc:34:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:26 2026 by rpki-client