This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File:                     zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier:          4j1C+tUCcCziPNH/LrfGXE+RizrVE44e3csXTkuOOCk=
Subject key identifier:   34:FD:30:90:55:D8:2D:F9:37:8C:C4:BE:72:BC:55:98:DF:C5:45:BF
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer:       /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial:       019C4246986F920B97BDCDA9D74CAAE0C47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number:          0E66
Signing time:             Mon 09 Feb 2026 12:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:48 +0000
Files and hashes:         1: XrmmbPIgnA61rh6z_5Wfj4vJ374.roa (hash: DtOM3AG98xq9adArrqetx0s2cyFgsSbYyCzOOvAoXqc=)
                          2: wm5FHuXn0yj2Fzs7mssloklRCsc.roa (hash: nSYa0rr7dwu5dctQzszV3Gq5wfYwUX466+D2hjWAmcE=)
                          3: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: kBtIQ+UIwfULsZJ69S2ISculrqX/kYpTchBwK+yscyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:98:6f:92:0b:97:bd:cd:a9:d7:4c:aa:e0:c4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
        Validity
            Not Before: Feb  9 12:00:48 2026 GMT
            Not After : Feb 10 12:00:48 2026 GMT
        Subject: CN=34fd309055d82df9378cc4be72bc5598dfc545bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:83:48:3e:bc:73:e6:65:61:0b:2a:94:a4:
                    37:51:b0:a1:29:47:4c:5e:1c:7c:d6:31:b4:af:f5:
                    49:4f:67:b8:4a:01:34:2f:a0:43:ff:23:4b:b9:ae:
                    50:e3:0c:cb:7c:15:36:07:1d:38:69:08:a0:04:f8:
                    0e:27:2a:e7:ef:3f:f3:49:e8:00:6c:7f:92:f2:6c:
                    ea:8e:96:e1:b5:1c:b3:aa:af:2f:80:08:ad:af:ba:
                    d0:ee:09:80:40:73:4d:c5:2b:c5:73:9f:c5:1c:b7:
                    7d:4b:4d:1b:ff:6b:f8:62:cb:95:da:f1:70:05:d6:
                    16:5f:0e:e4:86:76:8d:2d:3f:b0:4a:cf:1b:1a:aa:
                    fe:d8:37:1d:a8:e3:92:88:b6:6e:e6:26:80:38:54:
                    f2:ce:54:87:f0:78:78:e4:29:51:36:6a:24:eb:12:
                    b5:c1:dc:79:ec:10:47:0c:17:3b:11:24:f9:02:7b:
                    e6:9b:47:8b:18:68:12:25:26:02:f2:5f:2d:61:12:
                    76:29:8f:82:68:02:76:6f:da:da:a4:5a:ab:e8:c3:
                    10:bf:07:2a:e3:bc:f3:0d:de:26:4a:87:e4:e1:c1:
                    9b:d4:ec:81:6e:04:94:84:fa:84:ce:2a:f3:2f:32:
                    3f:3f:77:27:0c:1c:97:ed:43:d2:82:0e:e6:8e:d8:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:30:90:55:D8:2D:F9:37:8C:C4:BE:72:BC:55:98:DF:C5:45:BF
            X509v3 Authority Key Identifier:
                keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1c:dd:49:8b:5c:cf:30:f9:93:50:68:a7:01:c1:6a:9a:c5:
         87:a0:75:cc:c4:ab:05:80:a7:fc:34:79:51:83:11:a4:02:c6:
         1a:24:61:03:31:08:ae:40:1c:9a:d0:95:6a:43:2d:fb:bf:8b:
         70:50:8e:2f:03:da:97:a6:a7:53:d3:65:88:0b:25:b4:d0:4b:
         83:86:c2:42:02:b6:79:e1:67:89:c5:6d:48:84:4e:17:7d:97:
         dd:ad:af:b0:72:52:ad:55:7a:90:2b:b1:c3:59:6c:56:16:e6:
         a7:7a:fd:1a:91:f3:e1:eb:68:8f:3a:0b:d0:ae:59:b9:15:32:
         dc:4a:e6:85:50:cf:79:00:97:1a:c4:12:66:19:0a:50:12:d2:
         49:0f:8d:8c:fd:25:c4:6a:c1:34:22:e5:14:b1:20:5f:da:ec:
         b9:76:6d:f4:b7:74:4e:1a:f9:28:cc:96:2c:68:25:86:8f:2c:
         f6:70:37:b2:43:28:01:bc:3f:6d:47:68:dd:b4:32:5a:27:e2:
         5d:df:41:60:4d:61:f2:63:01:1e:fc:f2:fd:b6:42:d7:3d:6f:
         26:d8:db:66:ab:31:be:d8:b9:21:e3:d2:5e:27:ac:6c:5b:bb:
         38:a7:d5:80:d2:61:9d:ad:68:dd:05:31:5b:25:db:f2:1a:07:
         f3:8a:82:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRphvkguXvc2p10yq4MR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDA2NTk2N2RlYzA5MmI1ZmM5MDE1MmU0YTk1MzM5YmEx
ZDIyODkwHhcNMjYwMjA5MTIwMDQ4WhcNMjYwMjEwMTIwMDQ4WjAzMTEwLwYDVQQD
EygzNGZkMzA5MDU1ZDgyZGY5Mzc4Y2M0YmU3MmJjNTU5OGRmYzU0NWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCqDSD68c+ZlYQsqlKQ3UbChKUdM
Xhx81jG0r/VJT2e4SgE0L6BD/yNLua5Q4wzLfBU2Bx04aQigBPgOJyrn7z/zSegA
bH+S8mzqjpbhtRyzqq8vgAitr7rQ7gmAQHNNxSvFc5/FHLd9S00b/2v4YsuV2vFw
BdYWXw7khnaNLT+wSs8bGqr+2DcdqOOSiLZu5iaAOFTyzlSH8Hh45ClRNmok6xK1
wdx57BBHDBc7EST5Anvmm0eLGGgSJSYC8l8tYRJ2KY+CaAJ2b9rapFqr6MMQvwcq
47zzDd4mSofk4cGb1OyBbgSUhPqEzirzLzI/P3cnDByX7UPSgg7mjthMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT9MJBV2C35N4zEvnK8VZjfxUW/MB8GA1UdIwQY
MBaAFM1AZZZ97AkrX8kBUuSpUzm6HSKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2Qt
ZWRjZWY3NDUxZWY0LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0
LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhzdSYtc
zzD5k1BopwHBaprFh6B1zMSrBYCn/DR5UYMRpALGGiRhAzEIrkAcmtCVakMt+7+L
cFCOLwPal6anU9NliAsltNBLg4bCQgK2eeFnicVtSIROF32X3a2vsHJSrVV6kCux
w1lsVhbmp3r9GpHz4etojzoL0K5ZuRUy3ErmhVDPeQCXGsQSZhkKUBLSSQ+NjP0l
xGrBNCLlFLEgX9rsuXZt9Ld0Thr5KMyWLGglho8s9nA3skMoAbw/bUdo3bQyWifi
Xd9BYE1h8mMBHvzy/bZC1z1vJtjbZqsxvti5IePSXiesbFu7OKfVgNJhna1o3QUx
WyXb8hoH84qCCg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:31 2026 by rpki-client