This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          pamMIHFsArmkUv72cYCJp17NQJOdpdMo+O+ucM9l0Go=
Subject key identifier:   42:21:62:D3:4E:E5:A1:7B:1A:CC:17:08:11:08:52:B2:20:0A:50:20
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       019C4358F6C766EC9862EBC3697CEF4DFB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          181F
Signing time:             Mon 09 Feb 2026 17:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:29 +0000
Files and hashes:         1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
                          2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
                          3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
                          4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: fXIlK+xe84dGfhtdsxYIyM9TMkkDZ/t5CDbTQpc/tTM=)
                          5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
                          6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
                          7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:f6:c7:66:ec:98:62:eb:c3:69:7c:ef:4d:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Feb  9 17:00:29 2026 GMT
            Not After : Feb 10 17:00:29 2026 GMT
        Subject: CN=422162d34ee5a17b1acc1708110852b2200a5020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:08:13:7f:8b:b8:ce:dc:cc:9b:ab:9d:03:
                    d8:c5:ae:13:42:52:84:3f:86:8d:58:41:bd:86:da:
                    70:08:92:ab:6e:a9:a3:77:ad:dc:fd:32:0b:50:22:
                    f6:1e:41:01:6d:fc:62:a4:9d:73:fd:c8:0d:1b:11:
                    4c:8d:4e:53:9a:aa:ff:c6:18:c1:d2:77:32:65:26:
                    89:8b:53:d2:88:d5:aa:ff:87:a3:67:cb:f6:df:c2:
                    ae:6b:b2:c8:bc:44:c7:9f:a7:ca:b7:58:d8:12:52:
                    a9:02:98:9e:da:85:04:29:d9:d5:3a:5b:29:89:f0:
                    8f:f8:cd:cd:ef:54:7b:12:25:8b:b2:5e:22:8d:a0:
                    e5:8f:03:20:4c:8a:79:ac:11:51:f1:43:af:68:18:
                    3c:48:46:aa:ec:5e:c7:10:2d:f4:f8:8a:f3:8b:c4:
                    ad:22:6e:31:15:d5:b8:c8:a9:b8:b2:a6:4f:4a:4b:
                    1d:8e:c5:8e:ae:7b:fa:a0:f8:5a:dc:68:6c:61:1c:
                    fc:03:77:83:9c:ee:fa:21:c7:63:7d:fb:cf:21:eb:
                    7e:0b:5a:9e:4f:7b:e1:7f:e6:77:00:06:dc:46:ba:
                    cd:05:dc:20:2d:57:3a:e8:25:96:e2:cd:89:9e:8b:
                    f6:b0:20:cc:86:df:b8:78:b7:e9:4a:52:74:5a:01:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:21:62:D3:4E:E5:A1:7B:1A:CC:17:08:11:08:52:B2:20:0A:50:20
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:c0:e2:4e:4e:31:6b:d7:0c:6d:1c:4a:cb:0d:5f:b7:84:
         be:4b:c4:a7:60:f7:78:e8:48:d0:2d:f3:69:1f:4d:fe:73:03:
         98:c0:bf:92:90:b4:8a:2a:d5:0c:11:7e:63:c8:78:78:2c:50:
         a4:a3:b3:58:f5:31:3c:d4:2d:4c:af:eb:72:5f:df:d9:eb:c8:
         58:b7:2c:22:a6:7d:1b:55:70:e7:ec:f0:7b:d5:e4:05:99:4e:
         14:fb:3e:65:a2:e6:d7:d5:dc:bc:48:7c:98:26:8f:cf:ef:4f:
         4a:50:97:66:ce:56:6d:da:37:f9:24:d1:30:b3:95:98:c4:bc:
         a8:a0:fa:f3:12:85:3c:e6:62:7b:19:1e:f1:7d:b3:15:6a:61:
         37:f6:a2:db:e3:fa:f6:e8:94:e4:ac:ca:66:bc:8e:5a:fe:be:
         ec:c3:37:63:37:57:c2:af:2a:99:8a:36:bc:cf:cf:27:19:46:
         08:6b:89:07:d3:43:ec:2e:43:91:2e:df:66:07:32:c8:62:5c:
         67:8f:44:4e:49:2c:c5:ba:59:f8:2b:0e:ea:14:ef:22:38:5f:
         8c:54:cb:2c:07:f9:5c:62:4c:7c:4f:f4:d3:ff:70:22:18:69:
         ca:0d:a4:98:26:67:62:87:6f:e9:af:ec:a8:f3:8d:34:07:28:
         e4:c8:3b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWPbHZuyYYuvDaXzvTfsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm
MGIwNWMwHhcNMjYwMjA5MTcwMDI5WhcNMjYwMjEwMTcwMDI5WjAzMTEwLwYDVQQD
Eyg0MjIxNjJkMzRlZTVhMTdiMWFjYzE3MDgxMTA4NTJiMjIwMGE1MDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncYIE3+LuM7czJurnQPYxa4TQlKE
P4aNWEG9htpwCJKrbqmjd63c/TILUCL2HkEBbfxipJ1z/cgNGxFMjU5Tmqr/xhjB
0ncyZSaJi1PSiNWq/4ejZ8v238Kua7LIvETHn6fKt1jYElKpApie2oUEKdnVOlsp
ifCP+M3N71R7EiWLsl4ijaDljwMgTIp5rBFR8UOvaBg8SEaq7F7HEC30+Irzi8St
Im4xFdW4yKm4sqZPSksdjsWOrnv6oPha3GhsYRz8A3eDnO76IcdjffvPIet+C1qe
T3vhf+Z3AAbcRrrNBdwgLVc66CWW4s2Jnov2sCDMht+4eLfpSlJ0WgFz6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIhYtNO5aF7GswXCBEIUrIgClAgMB8GA1UdIwQY
MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTHA4k5O
MWvXDG0cSssNX7eEvkvEp2D3eOhI0C3zaR9N/nMDmMC/kpC0iirVDBF+Y8h4eCxQ
pKOzWPUxPNQtTK/rcl/f2evIWLcsIqZ9G1Vw5+zwe9XkBZlOFPs+ZaLm19XcvEh8
mCaPz+9PSlCXZs5Wbdo3+STRMLOVmMS8qKD68xKFPOZiexke8X2zFWphN/ai2+P6
9uiU5KzKZryOWv6+7MM3YzdXwq8qmYo2vM/PJxlGCGuJB9ND7C5DkS7fZgcyyGJc
Z49ETkksxbpZ+CsO6hTvIjhfjFTLLAf5XGJMfE/00/9wIhhpyg2kmCZnYodv6a/s
qPONNAco5Mg7dw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:50 2026 by rpki-client