This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          puOm3Kes1RvBINZ/d+x61RELGf9nDSIIwtBkVPokyqQ=
Subject key identifier:   83:FD:E3:97:5A:3C:42:A8:62:75:1A:94:05:FA:C8:97:2D:8B:E8:97
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       019C1B02F2B0A967BD9A0C0CA3F1E2FE2488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          0F8D
Signing time:             Sun 01 Feb 2026 21:01:43 +0000
Manifest this update:     Sun 01 Feb 2026 21:01:43 +0000
Manifest next update:     Mon 02 Feb 2026 21:01:43 +0000
Files and hashes:         1: 0L1L67jVugXzE__lTJGfbb8-q-Y.roa (hash: Qt2g1ctMd8cFHOzrewKQ8FYPO0z3lmCYJaL3Sc8ATow=)
                          2: aULXxwpV3n01msELu6FKmFfUQt0.asa (hash: NByj/5BS6ETg8U2+SS44eCFMC2AU9TZ/aruJFrPVAYA=)
                          3: e0EdhFf01seKM2ee00Orq33djUI.roa (hash: CXwllvMBMtWoZlpgKk44gW6slpYawA4OLdB4YkoWj8c=)
                          4: rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa (hash: M2Sx/zjlYAhCYCRsT+YiI+82fP7xUoFDJFNJGn+EKeA=)
                          5: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: NcGO0iuzLUsYBPnXeHcyBDfgR3yeelisBbSXy86JUTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:02:f2:b0:a9:67:bd:9a:0c:0c:a3:f1:e2:fe:24:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Feb  1 21:01:43 2026 GMT
            Not After : Feb  2 21:01:43 2026 GMT
        Subject: CN=83fde3975a3c42a862751a9405fac8972d8be897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:2a:3c:71:3d:ee:d8:a7:c2:28:19:4b:45:
                    a5:b6:75:60:c0:9e:f9:fe:4f:a1:82:3c:2e:2b:b7:
                    57:6e:e1:d1:0f:0b:c6:9a:0b:e4:89:7d:c9:6b:e3:
                    fe:c0:01:94:26:c8:c2:cc:b2:bf:77:59:17:af:40:
                    40:0c:ee:2a:ee:e1:c7:5a:11:fe:17:a8:18:c3:c6:
                    d9:5c:60:9e:1f:74:2f:08:d9:0d:ef:ed:d4:d8:52:
                    bb:e4:ec:ec:95:2b:cb:dc:1a:c9:69:0f:39:6e:9c:
                    b8:94:9d:0a:ff:be:98:1a:34:8f:b3:62:17:37:fd:
                    61:bc:65:49:97:4f:fa:1b:cc:70:e0:c6:08:f8:20:
                    ca:b6:ab:b9:ae:28:b6:07:be:bd:98:d0:fd:9e:8d:
                    1f:c8:ce:f6:b6:82:ae:16:77:74:13:14:19:a4:ad:
                    df:ee:3d:d1:c6:56:95:8e:ba:d7:d9:e8:23:5d:39:
                    98:fb:92:4e:60:1e:42:1e:69:1a:5f:cd:91:80:5e:
                    fd:59:95:74:4f:83:20:2e:4e:fb:d5:ad:ab:4c:35:
                    6d:48:02:a9:87:5d:c0:d8:90:e0:b2:1e:e1:a2:70:
                    a1:c4:51:4f:3f:35:c1:84:0f:1a:42:da:2e:a9:9c:
                    2d:51:13:8d:7c:0e:e3:0e:62:b8:3d:da:4c:cb:25:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FD:E3:97:5A:3C:42:A8:62:75:1A:94:05:FA:C8:97:2D:8B:E8:97
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:d9:b5:4a:7f:4b:ca:64:cf:b4:0c:b1:e8:4e:c6:70:4a:
         66:2a:e0:ea:99:df:f1:c1:74:8d:9c:71:86:f3:b9:fa:92:cd:
         08:0f:c7:8a:2d:1f:29:e9:f4:5b:5a:90:5e:85:ea:e5:91:52:
         80:52:63:80:86:87:ef:87:f2:f4:ab:1f:e6:65:d6:52:49:8d:
         80:7b:b7:8b:2b:af:28:0c:ea:00:2d:01:c7:8e:ed:c6:1e:bb:
         50:f9:00:a5:b1:72:ce:0b:9f:97:a2:5f:35:7d:fe:01:e7:7c:
         4b:f7:17:11:07:07:76:ae:2f:f0:74:4b:14:f5:7c:d0:2d:8f:
         f3:53:3c:fa:45:5f:ff:e7:ac:02:37:ac:d4:9c:13:f4:26:86:
         65:26:24:fb:db:53:a5:80:97:a0:37:cd:44:f2:26:08:bf:73:
         58:35:a1:ac:f2:86:05:b2:c2:c0:6f:6d:5b:d7:17:a3:c7:5c:
         b7:ba:9c:dc:b6:56:e6:d7:17:50:5a:31:66:3c:27:b9:d8:31:
         d1:3b:5c:36:5e:56:7d:3f:d3:77:90:bb:5b:61:1c:d3:01:41:
         bc:5b:4b:69:60:66:b7:9d:25:db:1a:dc:db:4d:62:57:b8:a8:
         45:76:4d:56:97:ed:6b:59:46:a9:9e:f2:31:5c:3e:82:4e:da:
         eb:31:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:56 2026 by rpki-client