This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File:                     mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier:          cJ/cHnB7EmHQipRIJp8tHTBzy12JFo71sLqddQxFGSM=
Subject key identifier:   13:46:1B:F6:B3:93:1C:E8:BD:55:DA:34:A5:6E:B4:F5:28:A9:AB:0B
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer:       /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial:       019C40FD67657E6551C43A0852F93AC8BF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 06:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:14 +0000
Files and hashes:         1: lGrsQ8J0cYhpi_O1N1sHWyrA2Fs.roa (hash: HoHhq099O+Q5npgf30dRiAWZ2csPL4g8k9fpkhuGo9w=)
                          2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: FRCKzDU5e4B9dc5pVrWqMHcsVe4ALa+qv0bup63uzNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:67:65:7e:65:51:c4:3a:08:52:f9:3a:c8:bf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
        Validity
            Not Before: Feb  9 06:01:14 2026 GMT
            Not After : Feb 10 06:01:14 2026 GMT
        Subject: CN=13461bf6b3931ce8bd55da34a56eb4f528a9ab0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:48:50:2f:38:06:36:be:4d:b6:d6:22:72:
                    88:1b:b5:db:81:88:57:d9:f0:04:bc:d5:b6:4d:57:
                    40:87:93:8c:33:8c:37:0f:c5:ff:71:b7:eb:aa:d7:
                    36:56:28:ac:c4:4b:b7:9e:b8:fd:dc:41:21:44:d3:
                    de:58:56:41:47:05:44:5b:60:3d:75:7b:a0:41:af:
                    e5:46:1a:8f:e2:a2:89:65:2a:f9:ae:db:77:55:15:
                    3d:48:a8:f2:66:fe:60:e9:19:75:52:98:3c:40:34:
                    d0:d6:87:d8:c5:09:92:cd:38:22:49:9f:f5:b6:c2:
                    61:67:15:fc:7d:59:ca:2a:73:62:a7:72:a7:0d:42:
                    29:da:0c:f1:97:b9:f3:5d:14:44:c5:cd:47:3b:4b:
                    63:4f:eb:69:06:7c:eb:ad:64:ed:0d:d0:df:b3:e0:
                    46:27:fc:33:21:da:96:27:90:ff:de:44:3c:c6:a7:
                    5a:e6:cb:f2:7d:93:68:02:a0:67:57:1c:25:25:e5:
                    7c:87:f2:7a:93:08:4a:83:8f:3d:e1:d9:95:b8:8e:
                    28:d5:9c:d0:ad:d6:05:0a:6c:eb:aa:e3:20:ba:08:
                    7d:bb:3c:aa:a7:8f:ba:56:c8:38:bc:e5:c3:84:8d:
                    33:16:7e:02:61:bf:d4:0e:c4:bc:d2:6b:c1:5f:5e:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:1B:F6:B3:93:1C:E8:BD:55:DA:34:A5:6E:B4:F5:28:A9:AB:0B
            X509v3 Authority Key Identifier:
                keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:84:cc:1a:da:61:ef:f4:cc:25:21:9a:55:3b:96:0b:5c:fc:
         58:b1:ad:41:05:b8:15:54:ae:dc:0d:03:88:3a:85:0a:e5:95:
         80:95:6a:96:d0:3f:dc:f1:58:e1:5a:8c:0c:66:fb:5a:e9:89:
         42:63:5b:6e:0d:b8:76:cb:6f:b7:59:00:70:32:6e:ab:5f:4a:
         4c:ee:14:cb:98:80:79:35:a2:90:31:f6:9d:6f:fe:0f:89:de:
         6f:ab:2b:5e:2e:2e:cb:9b:ec:48:27:31:9b:bd:38:23:66:08:
         3c:35:53:4e:8c:e2:0c:68:89:ed:d5:33:d5:4b:14:4e:c6:7e:
         d5:8e:91:d3:1d:d9:98:e7:33:90:cd:a4:c2:59:81:68:a4:74:
         66:fc:c4:64:c5:84:96:af:c0:b7:fa:40:44:c7:2c:0e:f7:9b:
         9c:ec:11:90:b3:9e:c5:9c:4a:50:50:9d:80:27:50:31:45:e4:
         69:06:86:b4:7f:6d:35:36:05:21:ea:df:bc:2e:d2:28:c9:7b:
         59:d5:33:71:9d:f3:c8:99:1b:e5:26:a4:ce:45:df:cd:7c:0d:
         b4:24:e8:5e:91:7a:7b:30:a1:a5:f8:f4:70:42:a9:e9:a7:89:
         70:5d:27:6b:fc:f7:9e:7e:7a:9f:ca:36:3c:aa:b9:c1:8b:85:
         82:e8:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:10 2026 by rpki-client