This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
File:                     Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json)
Hash identifier:          1t03FoAxKJbeCoTVM4xmVimyxvIV+LWkMDqfjDHf300=
Subject key identifier:   8D:C3:2D:00:F8:FA:F4:D5:2D:3A:F4:C8:12:23:72:21:0D:8D:63:6C
Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1
Certificate issuer:       /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
Certificate serial:       019C427D7A5CF415991AA3D2706958B0CD68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
Manifest number:          1521
Signing time:             Mon 09 Feb 2026 13:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:45 +0000
Files and hashes:         1: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (hash: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os=)
                          2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: 8YkhOUhpo12dA2vgqc43xZX2JTQUGabDPdAwVVF1YX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:7a:5c:f4:15:99:1a:a3:d2:70:69:58:b0:cd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1
        Validity
            Not Before: Feb  9 13:00:45 2026 GMT
            Not After : Feb 10 13:00:45 2026 GMT
        Subject: CN=8dc32d00f8faf4d52d3af4c8122372210d8d636c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:80:8b:c1:53:0d:84:a2:ab:60:a4:a3:7a:
                    59:53:68:2f:74:2b:72:b9:e3:f1:7c:9e:12:0a:76:
                    b1:b4:71:0b:ac:1f:7f:1b:22:b8:78:b9:a7:44:ff:
                    b5:41:fe:56:fc:db:cf:b1:34:c3:05:5d:4f:df:29:
                    e6:5c:8d:f6:c0:22:09:9d:c1:50:44:91:e2:fb:5d:
                    b5:3f:00:db:51:f7:3b:32:2e:ae:84:bd:67:5c:40:
                    56:ae:c3:fc:39:f7:b8:78:5f:0a:ed:4f:97:5e:32:
                    cf:b0:2a:f2:a6:4e:ac:e2:78:5d:05:48:ca:fb:12:
                    8d:81:cb:c7:a7:50:57:e5:ae:6d:1c:9a:e8:e8:18:
                    1c:32:47:5e:71:d2:35:19:90:19:2c:8f:f0:83:a6:
                    24:2b:a7:68:7b:99:0e:e9:9a:b8:5f:ad:f5:a8:40:
                    90:02:e7:af:df:bb:f0:0e:96:3f:73:ff:69:fd:19:
                    14:d7:f0:60:d2:05:f6:3e:49:39:48:db:46:87:b0:
                    b8:1d:ea:19:17:aa:8a:24:5a:a8:d3:34:62:15:44:
                    bc:e2:82:df:30:1c:23:22:9a:dc:30:63:06:53:93:
                    06:59:d2:68:b4:ae:20:cf:26:1f:40:4f:53:43:c7:
                    b3:95:7a:16:8e:53:4d:d5:b2:de:54:8a:ea:e8:32:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:2D:00:F8:FA:F4:D5:2D:3A:F4:C8:12:23:72:21:0D:8D:63:6C
            X509v3 Authority Key Identifier:
                keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:2d:26:cd:08:b8:62:f0:c8:ca:15:2a:ce:34:be:8b:cb:
         12:66:f8:e4:ae:4c:76:9e:bb:94:80:32:e6:73:92:d5:2c:5a:
         72:33:4d:5f:49:fd:03:5a:b8:de:5d:64:0b:c6:d7:6e:00:c1:
         bf:e4:1f:34:9d:0f:e2:24:f5:af:6f:63:d7:5e:17:b6:7b:ad:
         a7:f1:48:27:8c:6b:7b:16:c6:91:5a:f6:ab:25:9d:42:ae:ad:
         b4:b7:70:9b:97:f6:c1:30:06:3a:b8:e3:0b:96:bc:92:5b:f6:
         8d:ad:45:84:5a:c7:f5:00:c5:bd:6f:89:58:29:6c:cc:27:95:
         6c:42:ab:be:c0:87:8f:c1:0b:25:f7:66:13:aa:16:9d:aa:63:
         06:86:4d:39:db:1e:fa:63:b7:25:1c:7d:c5:ed:98:67:0c:6b:
         82:f4:5b:ab:f6:cb:30:99:fb:b1:26:a2:cc:07:b2:03:46:4d:
         1a:0f:10:9f:3f:16:ec:d4:8d:f6:b5:ec:56:db:fd:86:00:66:
         a2:40:31:76:90:79:04:77:f0:90:ab:f3:3f:e4:f0:92:c7:72:
         6a:b7:2c:cb:75:e4:29:af:82:16:7c:6b:75:c9:cf:05:5f:14:
         85:b3:e3:04:af:8f:a7:f8:07:b0:b5:0b:b3:82:97:7f:e2:c5:
         e3:65:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:22 2026 by rpki-client