This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
File:                     ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json)
Hash identifier:          XJgOV7h249Tp46OVYyTFhwcMx4f4djM00rNhOlmqrYI=
Subject key identifier:   D2:AC:9C:A9:EF:21:10:1C:40:18:5A:F1:5A:C6:E2:13:10:F1:E6:2C
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Certificate issuer:       /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial:       019C42B425BBADA27D1F4BCFB79CBB512F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
Manifest number:          12FF
Signing time:             Mon 09 Feb 2026 14:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:27 +0000
Files and hashes:         1: 0K2GHqkNtHFH0tB9nWXJ94AFGAw.roa (hash: 5NSYWTgnAdKm8Hqko31XGdj55Gsj1FCzKYaW0vszh0w=)
                          2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: vrluG+5REXKHvckrj4/f/1H5KhwJ5ISeQI2A0jnIr4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:25:bb:ad:a2:7d:1f:4b:cf:b7:9c:bb:51:2f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
        Validity
            Not Before: Feb  9 14:00:27 2026 GMT
            Not After : Feb 10 14:00:27 2026 GMT
        Subject: CN=d2ac9ca9ef21101c40185af15ac6e21310f1e62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:4c:9c:d0:54:33:c8:24:1d:cf:1e:24:b6:
                    8e:1f:3e:db:4d:6d:af:80:5c:ae:71:33:51:f0:23:
                    9e:7d:01:05:82:29:0b:e0:aa:43:91:85:08:69:b5:
                    9f:f5:da:c0:a3:84:0c:cc:9d:ca:9c:23:60:b5:7f:
                    2a:79:b7:ca:04:70:9a:5b:19:65:46:8d:ef:00:20:
                    74:3a:53:18:66:80:11:f3:f5:6e:88:d3:b8:14:89:
                    37:21:eb:aa:9d:ac:95:6f:2a:65:42:85:4d:4b:1f:
                    db:72:37:96:8b:c7:3a:e9:ef:d7:b8:29:b4:4d:e8:
                    bc:ea:54:12:1e:da:92:50:1e:14:f6:a1:54:66:1d:
                    4d:b0:35:c8:2b:57:c9:3b:27:10:ae:16:9c:53:78:
                    d4:e7:0e:34:d6:85:0f:ef:b0:62:06:f1:df:da:41:
                    6d:e1:a4:7e:a0:28:d8:d1:0c:5f:2d:03:d2:a2:7c:
                    70:a8:56:3f:74:5e:c9:74:df:15:0f:aa:fa:0d:2b:
                    6d:16:ee:aa:46:1e:54:c2:62:3d:73:a8:11:96:be:
                    aa:b3:1c:61:71:59:04:4d:2a:9a:5c:5b:2c:65:56:
                    0d:23:5e:c6:6b:21:0f:65:df:9a:83:68:55:19:1c:
                    9b:33:88:22:a8:6e:22:31:34:db:4e:8c:ca:05:29:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:9C:A9:EF:21:10:1C:40:18:5A:F1:5A:C6:E2:13:10:F1:E6:2C
            X509v3 Authority Key Identifier:
                keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:80:5b:bf:7f:5b:0f:af:1d:a4:d1:63:d4:1b:9f:ef:ad:7b:
         ae:2b:62:47:48:bc:72:cc:7b:16:0b:f8:0b:49:b0:92:a3:8f:
         93:3a:94:90:56:46:ac:55:01:27:9c:2b:98:96:f4:52:c3:00:
         a3:91:26:c7:a3:7a:61:fc:0b:e7:ff:4a:f5:64:91:c5:42:5d:
         fd:55:91:b6:c5:f1:bd:57:62:48:75:6c:b8:b9:e4:98:82:ef:
         b6:80:8f:d2:c1:30:13:79:4a:df:f5:7b:0e:9e:e3:6f:aa:ff:
         88:6e:36:5f:a3:6f:f0:80:f4:15:86:65:72:38:9a:f5:49:c6:
         cb:ed:a1:01:84:b4:91:f1:8a:dc:3b:be:ec:04:01:97:4f:a6:
         7c:4d:3c:60:79:0d:fe:31:4a:5f:8c:fb:b5:d3:5a:0e:d7:ac:
         20:d3:88:3e:01:32:87:10:97:83:68:aa:9f:88:11:2a:a4:14:
         fd:51:25:0b:46:df:fa:3c:5c:39:49:d1:2b:06:37:ca:e5:a1:
         43:2d:39:5b:e9:58:32:7d:35:74:08:2e:c4:bd:32:b0:95:54:
         c2:13:88:31:72:5b:19:6b:fa:f5:62:3f:9e:ca:8a:61:1d:a5:
         88:0b:31:a2:a5:06:8c:da:91:b2:45:63:86:43:36:26:05:53:
         c5:d5:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:44 2026 by rpki-client