This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File:                     zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier:          2OvTmQGL1A5+QL2aZ6LxZjcPGncfdJVr2fkSGqhIFHM=
Subject key identifier:   43:22:6D:66:F1:FA:D1:72:5A:F3:9A:78:CF:8D:B9:AC:4E:89:61:B2
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer:       /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial:       019C420F3D138C0AC5BE02E7D4DDCAFAC043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number:          07C0
Signing time:             Mon 09 Feb 2026 11:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:20 +0000
Files and hashes:         1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
                          2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
                          3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: +qzifejTXj4tKVvX7FpgONebeGa5IXxSuL9CUIHGTTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:3d:13:8c:0a:c5:be:02:e7:d4:dd:ca:fa:c0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
        Validity
            Not Before: Feb  9 11:00:20 2026 GMT
            Not After : Feb 10 11:00:20 2026 GMT
        Subject: CN=43226d66f1fad1725af39a78cf8db9ac4e8961b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:2e:f8:8c:2f:89:4a:68:6e:78:67:c6:09:
                    8e:f5:86:3a:b4:cd:f0:62:3d:58:40:df:1c:07:02:
                    bc:62:48:be:3c:95:32:1b:f9:dc:76:11:13:38:7c:
                    b4:65:d1:21:d6:cb:17:6e:77:8c:67:e2:6e:83:43:
                    c9:36:cc:a6:5b:5f:41:4f:2d:a1:0b:66:6c:2c:d1:
                    52:12:4f:bc:43:5e:5d:17:91:96:cb:ff:cc:28:56:
                    a5:52:48:92:a5:61:8c:eb:22:71:50:85:31:41:3d:
                    37:fa:43:90:c3:8c:06:fa:b9:dc:17:1e:72:42:79:
                    81:7c:ca:79:84:1f:24:4e:1c:b5:62:c8:9e:59:19:
                    c5:2a:04:28:53:05:43:fa:0b:05:41:43:b7:ed:46:
                    e0:db:ac:f8:c1:f7:5b:aa:7f:f4:8b:7a:6e:09:82:
                    0a:7f:57:9b:83:32:28:06:1f:7b:fe:87:0b:e6:c5:
                    36:e8:de:f0:80:89:b4:9c:2c:05:18:22:17:48:bd:
                    68:e4:7d:7d:52:81:3d:6f:66:92:10:5e:45:47:a4:
                    f2:39:f1:14:bf:ee:76:ef:b6:69:3e:91:03:ae:02:
                    19:8d:6c:28:df:ba:4f:5a:8c:d1:fa:b3:57:23:8d:
                    75:f5:24:7e:2c:70:f6:63:2c:47:8f:8f:71:f4:79:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:6D:66:F1:FA:D1:72:5A:F3:9A:78:CF:8D:B9:AC:4E:89:61:B2
            X509v3 Authority Key Identifier:
                keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:56:e0:a8:29:8e:80:f3:d7:5e:98:99:a3:54:13:3d:dc:
         69:0d:94:6e:e3:88:4b:6a:bf:85:0a:be:98:a7:e0:e1:36:7e:
         49:42:95:cb:66:6e:9f:e3:b2:51:06:1e:2e:09:b5:9d:b2:bf:
         2c:4b:2e:61:ca:67:7d:e5:b9:81:c3:c4:8f:27:49:ac:68:80:
         49:f5:e6:82:c6:30:a8:37:49:94:06:47:2c:65:cb:8a:27:d4:
         9e:aa:d4:33:ff:3d:d6:52:57:8c:7b:d7:50:a4:ec:6a:6e:c1:
         8f:95:1b:ac:57:ae:68:68:7a:26:bf:1b:d3:bc:17:ea:40:76:
         c3:aa:63:ac:a6:75:74:2e:06:65:36:76:45:46:e2:6a:df:4e:
         f1:ea:f0:ea:32:77:72:dc:d6:b6:bf:67:6b:20:63:9a:d9:aa:
         af:4e:16:63:75:20:51:fb:4e:b2:8f:74:2b:bb:ca:21:c8:e6:
         35:87:a6:e3:04:41:79:02:3a:1d:39:a1:66:6e:ab:68:27:65:
         ed:65:b3:3b:1f:d3:f9:76:f3:73:41:db:ea:96:98:69:5e:1c:
         96:85:e7:b6:f9:28:9c:34:35:9b:e0:9c:15:8b:45:a5:6c:61:
         9e:ec:8a:ce:35:36:65:fc:22:e6:52:23:2c:20:a7:92:b7:5b:
         70:7a:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:54 2026 by rpki-client