This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File:                     Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier:          DipkyDQvEFxQ6LzUzISUNoR8GCgpXkXjOWFbiXjifW8=
Subject key identifier:   B0:BE:18:0F:BF:F9:27:E7:CB:D3:6E:D0:D2:62:68:C0:D7:92:32:B1
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer:       /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial:       019C427D1551D93D123370964A0B98A34524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:19 +0000
Files and hashes:         1: 1xMZz9pSGq85vXf20FbCjYLr-kg.roa (hash: GLQz1TL8Rtkw2tIKftRi3ZiQjePeddOKBNexMBK6YVc=)
                          2: HEzbpkGlixMJMAH4xLJPiJ7HjDw.roa (hash: TdJqBEj+bob33O1NnFNh0HeCwlgemJTrTUX71e8Q5Ig=)
                          3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: 5l795CzYXTKWCeStBJZFKGzy6fHsrmy7dxRczd8BzH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:15:51:d9:3d:12:33:70:96:4a:0b:98:a3:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
        Validity
            Not Before: Feb  9 13:00:19 2026 GMT
            Not After : Feb 10 13:00:19 2026 GMT
        Subject: CN=b0be180fbff927e7cbd36ed0d26268c0d79232b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:35:de:b7:34:c4:0a:14:2b:e7:61:ee:f4:
                    39:b5:2f:36:f8:df:87:d1:2f:98:c3:c8:66:db:ba:
                    01:af:7d:7e:25:47:ba:a7:fe:62:7e:6f:dc:6e:67:
                    ba:85:43:13:0a:db:07:c2:9c:50:4c:1c:f6:d9:ee:
                    d1:56:fa:3a:e7:83:18:13:45:0d:b1:0e:08:2c:50:
                    97:e0:56:5f:24:d4:cd:ea:11:31:95:0f:4f:f1:4e:
                    e1:6e:be:c2:39:d7:d1:cd:08:82:15:85:1c:51:5e:
                    cf:dd:97:c5:f9:cc:df:e8:27:58:50:1c:51:d7:5f:
                    96:e4:0a:3a:22:ba:d1:a5:bf:d4:4d:b0:76:7c:17:
                    9d:02:f6:87:19:95:8b:45:bd:0a:88:6a:1d:c4:d1:
                    dd:1d:91:09:27:70:a3:87:74:97:87:4c:36:cd:27:
                    68:bb:46:eb:22:c4:47:62:7b:95:db:c8:8e:5b:f7:
                    ed:ec:d1:2d:d2:7e:df:2c:29:f1:9c:b9:52:26:57:
                    9d:4b:3c:54:6c:14:9b:25:8e:15:00:fd:a9:f1:80:
                    90:73:2a:12:10:d2:1a:36:4a:6b:22:50:53:a7:78:
                    53:1b:fb:15:21:be:6e:e5:e9:6b:b7:f7:e2:13:18:
                    cc:de:93:bc:4e:72:5d:c3:ad:36:01:93:f0:a8:11:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:18:0F:BF:F9:27:E7:CB:D3:6E:D0:D2:62:68:C0:D7:92:32:B1
            X509v3 Authority Key Identifier:
                keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:3a:be:64:71:fe:ea:4e:c2:9b:e1:55:c4:d5:f0:50:52:
         04:f1:3b:b1:bc:f4:f3:88:35:1c:93:0d:d4:77:9d:bd:d3:fb:
         54:5e:d9:8e:a4:b9:ec:7c:e0:60:b1:0c:97:7e:27:fd:3e:d5:
         65:6a:e6:07:24:62:e8:ef:4f:38:79:89:fc:a2:eb:65:23:a6:
         4a:b9:89:09:27:ba:6a:91:70:f2:de:42:e8:9b:27:5d:9a:24:
         c2:f3:6f:e7:fb:9f:f0:45:d6:f8:9b:4f:67:bb:8b:dd:c2:85:
         b3:28:fd:1f:c7:6f:64:2d:52:a7:9e:76:4c:05:3d:f3:09:e0:
         6a:96:30:10:29:99:95:13:0d:34:82:2d:e0:ec:a2:e9:7d:e5:
         d8:6a:18:f7:a9:8f:6d:8f:5b:9d:6d:ac:7b:9e:71:06:a2:28:
         b5:ec:4a:f3:61:4a:20:59:e4:73:e3:93:97:76:84:e5:78:0d:
         0a:eb:f3:86:23:47:3a:f0:a6:0a:00:ad:95:a9:09:1f:89:8d:
         35:b1:7c:4e:db:ac:89:8f:f6:92:7d:fd:95:c8:6b:8f:f6:1c:
         fc:ca:84:f9:47:5f:22:73:e6:07:e0:80:21:a6:f3:cf:7e:97:
         7c:19:57:d7:52:24:78:95:78:f2:53:8a:80:ff:ef:a1:c5:31:
         95:52:32:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfRVR2T0SM3CWSguYo0UkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWRhZGM3NjVmYThmMmZhMTllYjIwOTYzY2Y1YmQyMzVk
MDFiNDMwHhcNMjYwMjA5MTMwMDE5WhcNMjYwMjEwMTMwMDE5WjAzMTEwLwYDVQQD
EyhiMGJlMTgwZmJmZjkyN2U3Y2JkMzZlZDBkMjYyNjhjMGQ3OTIzMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rY13rc0xAoUK+dh7vQ5tS82+N+H
0S+Yw8hm27oBr31+JUe6p/5ifm/cbme6hUMTCtsHwpxQTBz22e7RVvo654MYE0UN
sQ4ILFCX4FZfJNTN6hExlQ9P8U7hbr7COdfRzQiCFYUcUV7P3ZfF+czf6CdYUBxR
11+W5Ao6IrrRpb/UTbB2fBedAvaHGZWLRb0KiGodxNHdHZEJJ3Cjh3SXh0w2zSdo
u0brIsRHYnuV28iOW/ft7NEt0n7fLCnxnLlSJledSzxUbBSbJY4VAP2p8YCQcyoS
ENIaNkprIlBTp3hTG/sVIb5u5elrt/fiExjM3pO8TnJdw602AZPwqBFkbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC+GA+/+Sfny9Nu0NJiaMDXkjKxMB8GA1UdIwQY
MBaAFGftrcdl+o8voZ6yCWPPW9I10BtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODIt
MjFlMGE2NmQ1NDQ0LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODItMjFlMGE2NmQ1NDQ0
LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZg6vmRx
/upOwpvhVcTV8FBSBPE7sbz084g1HJMN1HedvdP7VF7ZjqS57HzgYLEMl34n/T7V
ZWrmByRi6O9POHmJ/KLrZSOmSrmJCSe6apFw8t5C6JsnXZokwvNv5/uf8EXW+JtP
Z7uL3cKFsyj9H8dvZC1Sp552TAU98wngapYwECmZlRMNNIIt4Oyi6X3l2GoY96mP
bY9bnW2se55xBqIotexK82FKIFnkc+OTl3aE5XgNCuvzhiNHOvCmCgCtlakJH4mN
NbF8TtusiY/2kn39lchrj/Yc/MqE+UdfInPmB+CAIabzz36XfBlX11IkeJV48lOK
gP/vocUxlVIyqw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:45 2026 by rpki-client