This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File:                     zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier:          Lk1dJp3m8K9+8waKgeG71gboAoRT2EqhkHDX7U7JjC0=
Subject key identifier:   2D:AB:BD:F0:98:C4:F1:61:D1:30:42:C9:9C:F8:27:18:93:84:2E:AA
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer:       /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial:       019C41A1B5014C5412997D0F32334F30076E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number:          110C
Signing time:             Mon 09 Feb 2026 09:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:42 +0000
Files and hashes:         1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
                          2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: U/VGC/k6dJ+THZ4E98c8sQwJR9xpQ+jjQdzMk0L2SGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:b5:01:4c:54:12:99:7d:0f:32:33:4f:30:07:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
        Validity
            Not Before: Feb  9 09:00:42 2026 GMT
            Not After : Feb 10 09:00:42 2026 GMT
        Subject: CN=2dabbdf098c4f161d13042c99cf8271893842eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:97:e6:63:59:5a:1f:4d:48:f7:43:50:29:
                    1c:7f:5e:6a:c6:f4:d5:ea:3e:4a:83:f3:71:c2:c0:
                    c9:4a:75:95:26:6e:50:a9:2c:fd:69:7a:67:a0:70:
                    93:5c:b0:f2:b7:d2:90:02:da:7b:52:ec:71:a6:14:
                    55:37:a1:ed:1a:79:26:12:cd:05:80:40:c9:af:fb:
                    9f:3c:7e:37:f7:3d:ad:0f:58:85:61:da:5e:bd:11:
                    af:f5:7e:8b:ca:65:2f:3d:78:f0:9e:58:92:a4:3c:
                    df:a0:8d:cd:99:92:a7:e4:4c:a6:7d:9a:0c:a8:d3:
                    ed:ba:c4:5d:c8:78:d5:d4:50:23:ab:9a:32:64:2b:
                    ea:ea:ff:9b:b6:d2:ba:6a:d9:bb:b8:33:13:94:ed:
                    33:03:b1:6c:aa:13:21:3b:5e:33:90:41:31:95:88:
                    f1:80:43:b9:25:5d:e2:1a:6f:9c:cc:31:d6:a6:a5:
                    50:14:3e:05:e9:e9:a0:97:2f:4b:25:d6:57:96:ee:
                    d1:0e:88:18:71:c4:ee:c2:37:34:ec:03:77:bf:b2:
                    fa:eb:7d:73:be:f0:16:a6:86:e2:6c:2e:94:99:53:
                    ce:0e:d3:de:84:96:6f:b2:82:9b:22:76:75:cb:5f:
                    a6:50:59:29:80:33:fb:95:e5:6a:df:e2:94:31:ac:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AB:BD:F0:98:C4:F1:61:D1:30:42:C9:9C:F8:27:18:93:84:2E:AA
            X509v3 Authority Key Identifier:
                keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:52:6e:fd:00:ca:6d:9a:41:18:bd:14:d0:5c:87:bc:d2:7e:
         b7:7d:99:35:9f:3b:2d:46:a0:3f:3e:9a:50:af:40:a1:59:00:
         2a:f2:53:40:ce:62:32:66:a2:74:8f:71:72:6e:74:a6:69:cb:
         2d:0f:0b:1e:ce:2e:04:7c:a3:20:84:8f:46:db:af:b2:ad:95:
         32:67:9f:c2:e4:3f:eb:dd:07:49:9d:ce:57:1d:d6:35:7e:f4:
         a7:de:bd:cd:51:ee:65:77:a0:32:68:90:ae:28:98:85:22:34:
         ca:e2:b1:55:30:39:a4:f3:6b:cf:71:6f:51:b5:88:07:18:45:
         6c:ca:f1:e6:8a:cb:66:10:9e:4a:a9:0d:34:ba:41:d7:cf:56:
         ab:71:73:1b:de:9d:d9:19:5b:33:80:a2:20:5d:8a:f9:36:76:
         3d:ca:39:df:26:1b:fc:d6:a1:ae:3f:6d:b1:5c:7b:c3:04:60:
         f1:bd:2e:dd:4f:c1:50:eb:bb:bb:3c:8c:60:ad:ad:4a:4e:cd:
         7b:9b:8a:98:da:90:13:17:5c:2d:19:97:53:e6:60:ed:4a:c3:
         2d:ab:76:f5:d8:03:29:2d:4d:8d:29:96:fa:93:31:fa:b5:4f:
         24:fe:ef:7d:cd:18:0f:78:11:11:5c:88:40:af:64:39:da:38:
         f8:e0:35:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBobUBTFQSmX0PMjNPMAduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjYwMjA5MDkwMDQyWhcNMjYwMjEwMDkwMDQyWjAzMTEwLwYDVQQD
EygyZGFiYmRmMDk4YzRmMTYxZDEzMDQyYzk5Y2Y4MjcxODkzODQyZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LiX5mNZWh9NSPdDUCkcf15qxvTV
6j5Kg/NxwsDJSnWVJm5QqSz9aXpnoHCTXLDyt9KQAtp7UuxxphRVN6HtGnkmEs0F
gEDJr/ufPH439z2tD1iFYdpevRGv9X6LymUvPXjwnliSpDzfoI3NmZKn5EymfZoM
qNPtusRdyHjV1FAjq5oyZCvq6v+bttK6atm7uDMTlO0zA7FsqhMhO14zkEExlYjx
gEO5JV3iGm+czDHWpqVQFD4F6emgly9LJdZXlu7RDogYccTuwjc07AN3v7L6631z
vvAWpobibC6UmVPODtPehJZvsoKbInZ1y1+mUFkpgDP7leVq3+KUMazpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2rvfCYxPFh0TBCyZz4JxiThC6qMB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1Ju/QDK
bZpBGL0U0FyHvNJ+t32ZNZ87LUagPz6aUK9AoVkAKvJTQM5iMmaidI9xcm50pmnL
LQ8LHs4uBHyjIISPRtuvsq2VMmefwuQ/690HSZ3OVx3WNX70p969zVHuZXegMmiQ
riiYhSI0yuKxVTA5pPNrz3FvUbWIBxhFbMrx5orLZhCeSqkNNLpB189Wq3FzG96d
2RlbM4CiIF2K+TZ2Pco53yYb/Nahrj9tsVx7wwRg8b0u3U/BUOu7uzyMYK2tSk7N
e5uKmNqQExdcLRmXU+Zg7UrDLat29dgDKS1NjSmW+pMx+rVPJP7vfc0YD3gREVyI
QK9kOdo4+OA19g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:03 2026 by rpki-client