This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          0kVnQiJa+DfuA1c2E0jae92Cy910y0InlYL1aua/eKE=
Subject key identifier:   33:36:65:36:4A:53:60:6B:6D:30:A4:66:5C:E9:13:F4:10:2B:FF:BC
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019C41A1425A7C60D5286C6D51974BE3BC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          1099
Signing time:             Mon 09 Feb 2026 09:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:13 +0000
Files and hashes:         1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=)
                          2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=)
                          3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: hzZWUGhBjlsF7572IK5YFo/G3VkmfTNerJU43lXrkMQ=)
                          5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=)
                          6: fUMkR8oLIxzDg5t3sIti8WEBY30.roa (hash: 38Z6yw8kMZdeEBs0/GMX1Xr3k7daRBkZk1bVdKcb/3U=)
                          7: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:42:5a:7c:60:d5:28:6c:6d:51:97:4b:e3:bc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Feb  9 09:00:13 2026 GMT
            Not After : Feb 10 09:00:13 2026 GMT
        Subject: CN=333665364a53606b6d30a4665ce913f4102bffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c3:da:1b:83:c7:ee:66:6f:04:aa:ff:46:3d:
                    13:40:e1:bf:83:99:07:0f:24:86:09:cc:b5:ff:57:
                    34:e4:ce:da:f4:97:fa:78:72:8d:00:89:e4:db:7f:
                    e0:dc:30:97:d0:5c:6d:e5:bf:ac:af:71:99:3c:a6:
                    89:7e:39:cc:c2:77:74:c0:1d:dc:6f:66:bd:80:23:
                    ed:3d:82:03:6c:90:99:eb:73:b3:d0:73:ae:36:b1:
                    fc:5a:32:c0:6e:6a:7a:49:15:38:a0:e2:af:6b:02:
                    dd:54:2e:fb:22:e1:79:f4:72:15:df:ca:90:af:27:
                    44:3d:ac:23:04:b2:d7:63:80:c2:c9:6f:61:5b:97:
                    62:26:7c:30:a1:8a:7b:3c:da:b9:44:b5:8b:1b:fc:
                    bb:f8:a5:82:51:05:e9:7a:d2:ab:59:e8:88:c0:cb:
                    40:04:5d:6e:2a:54:92:5c:97:e7:66:4f:73:0e:2f:
                    60:28:98:5b:c0:1c:49:2a:c5:6e:a7:54:f0:1a:f7:
                    4b:13:b3:55:3c:cc:4f:64:72:d3:53:a5:9b:6c:a8:
                    2d:d6:4f:eb:4e:2d:fc:af:6b:1b:15:c8:9b:e3:d7:
                    e5:b9:67:27:63:2c:c6:47:cf:69:cb:28:a5:00:94:
                    f8:fb:a4:11:95:79:8f:42:35:f4:64:ce:1b:47:39:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:65:36:4A:53:60:6B:6D:30:A4:66:5C:E9:13:F4:10:2B:FF:BC
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:9b:f2:42:2b:f3:13:5f:3b:cf:f2:0b:49:2b:2c:c1:a3:6f:
         4d:0d:9c:d9:3f:44:9a:3d:44:f1:97:88:cb:41:c3:1f:e1:a1:
         4b:12:24:b4:23:6c:be:b0:62:26:3a:09:00:3a:55:d8:65:52:
         73:c5:24:0b:c3:4d:a3:32:95:40:40:7a:58:bc:98:c8:26:31:
         85:38:91:9b:33:42:f8:b9:18:51:e4:a4:a9:3d:42:6b:d7:50:
         e1:60:c6:55:79:5f:b9:22:de:b6:98:e6:46:ab:98:8b:a9:b2:
         95:20:46:35:c6:19:3a:ba:33:36:37:57:b8:fa:6c:4c:03:26:
         7b:cf:ea:5f:07:e7:bb:df:79:07:5f:6e:de:2c:73:6c:aa:93:
         b4:99:fa:66:af:15:0e:13:97:85:84:7c:38:e3:81:55:03:51:
         8a:8d:3f:51:c3:02:c2:1e:57:20:40:ba:02:b9:d3:dd:ae:60:
         4b:03:97:77:87:6e:7e:3b:9c:24:b2:8e:33:64:f6:d2:0f:3b:
         2f:a0:c5:d5:00:d9:9d:f4:97:b7:bf:09:9b:17:4c:ed:d4:dd:
         e7:0d:c0:52:db:5b:6f:aa:31:39:75:a0:19:9c:e4:af:ac:66:
         90:43:d7:af:c9:eb:de:28:dc:21:be:85:e7:97:c2:80:f0:bc:
         81:5a:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:42 2026 by rpki-client