This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File:                     ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier:          Y4Unto8hI8tzmeF2BUQFZ3xLhYetDsSqoblwEV6RArA=
Subject key identifier:   0A:FE:A4:D3:B2:13:51:59:A1:BB:80:69:36:C0:FB:0B:43:B3:BB:A5
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer:       /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial:       019C427D59ADFB4E21E1D184CB6A77A63241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number:          139C
Signing time:             Mon 09 Feb 2026 13:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:37 +0000
Files and hashes:         1: HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa (hash: ijFhOfJ/0CwOhPEkrD+B1c1Juz952plWRqWilLY1GJ0=)
                          2: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: 3i2HHbEDNbY1Mn6EpNJahxYsec6/FcHss3icSNkmvgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:59:ad:fb:4e:21:e1:d1:84:cb:6a:77:a6:32:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
        Validity
            Not Before: Feb  9 13:00:37 2026 GMT
            Not After : Feb 10 13:00:37 2026 GMT
        Subject: CN=0afea4d3b2135159a1bb806936c0fb0b43b3bba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:0c:62:c8:ab:4b:05:97:04:35:4b:ab:41:
                    0f:d6:f2:19:38:14:3f:42:ff:40:cd:64:9c:e3:4b:
                    e3:80:80:cf:9e:bb:55:6e:84:8b:84:7a:1a:84:cf:
                    04:fd:db:64:0d:e7:1d:60:d3:fe:73:5c:24:3f:f2:
                    80:9d:42:51:01:b7:f6:f5:97:54:96:0b:e3:0e:ed:
                    2e:08:85:d4:08:1e:e4:f4:eb:cb:b7:22:9d:2d:dd:
                    86:e9:90:11:b8:98:74:34:23:ac:84:ac:5c:4c:f4:
                    cb:ee:46:10:1c:e0:98:ad:ea:90:ae:f5:61:30:58:
                    03:b4:c7:1f:6a:b1:91:2f:fa:5d:8f:e6:ce:9f:20:
                    ce:5d:77:19:8b:00:4b:1f:3e:62:ca:29:a2:bb:75:
                    00:f3:f1:23:b2:12:0c:16:ee:8c:92:4e:8a:c3:ad:
                    8e:ef:a3:0d:38:df:e6:1c:84:2e:48:23:d0:2c:51:
                    67:83:fc:e4:51:19:2c:de:54:c8:4e:46:c1:6f:3f:
                    f3:72:b1:23:c5:17:09:8d:53:36:5a:e0:e3:86:2c:
                    5d:06:aa:ba:cb:d1:52:7b:1d:8c:57:e0:5e:25:56:
                    bb:e1:0e:d7:7b:a0:5d:d9:0f:73:a6:71:33:5a:44:
                    12:42:62:e5:5c:b0:a6:8a:f3:d2:ed:29:d5:26:33:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:A4:D3:B2:13:51:59:A1:BB:80:69:36:C0:FB:0B:43:B3:BB:A5
            X509v3 Authority Key Identifier:
                keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e7:09:c8:7e:c3:9f:3d:30:cc:6d:cc:f0:1a:08:ae:94:e1:
         ae:ed:96:6e:5a:52:9b:56:ee:84:b1:f9:5c:dd:9f:9b:57:21:
         eb:c1:61:92:35:12:a3:09:40:c2:95:ce:a7:76:46:15:0c:79:
         18:c6:5e:dd:4a:a9:84:c4:d0:be:8c:8e:7c:d0:2b:23:0b:05:
         fa:8b:c6:e9:f4:2b:d7:b1:19:42:1d:92:3d:9c:3e:63:79:6b:
         fa:1c:47:81:9f:ee:46:1b:24:86:7b:54:9c:4f:28:29:6a:6d:
         65:4c:1d:14:c8:82:b2:e8:81:36:53:e6:04:76:02:76:d8:61:
         80:f7:7f:3f:f5:eb:95:58:db:eb:35:b9:f1:a5:ed:75:6c:64:
         3c:88:a6:9d:17:bd:6f:b8:a4:30:78:08:ca:ee:e0:a8:25:0f:
         3c:f4:a0:90:f1:0d:ca:40:57:6d:3b:83:98:3f:c5:71:a7:e3:
         86:a7:e3:06:c4:54:b8:a9:3d:c8:10:6b:fa:35:c1:7e:9a:c1:
         24:78:30:2b:15:f0:b4:22:c2:c4:6b:e1:01:2a:c5:17:ec:7e:
         12:eb:58:a9:fb:82:fa:c3:0b:14:85:0e:26:cc:76:c2:16:36:
         dd:5e:4e:42:93:54:52:af:ea:07:68:6f:87:2a:6b:2b:be:3d:
         7f:4e:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:00 2026 by rpki-client