This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File:                     zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier:          zHxvOdY96qf6ZonZGNwvqHPkzISKygO8yR4BH7/80ds=
Subject key identifier:   3E:01:65:45:B1:01:E5:FC:34:B6:B8:61:38:0E:57:E5:C5:85:2E:52
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer:       /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial:       019C1CF15F0856CB51B70AE84C1EE49C1D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number:          0F8E
Signing time:             Mon 02 Feb 2026 06:01:46 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:46 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:46 +0000
Files and hashes:         1: 0L1L67jVugXzE__lTJGfbb8-q-Y.roa (hash: Qt2g1ctMd8cFHOzrewKQ8FYPO0z3lmCYJaL3Sc8ATow=)
                          2: aULXxwpV3n01msELu6FKmFfUQt0.asa (hash: NByj/5BS6ETg8U2+SS44eCFMC2AU9TZ/aruJFrPVAYA=)
                          3: e0EdhFf01seKM2ee00Orq33djUI.roa (hash: CXwllvMBMtWoZlpgKk44gW6slpYawA4OLdB4YkoWj8c=)
                          4: rxIkGrLn_pCH1KJ5mFJS5xrcm1c.roa (hash: M2Sx/zjlYAhCYCRsT+YiI+82fP7xUoFDJFNJGn+EKeA=)
                          5: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: 85Rgih5fRHD0FXzMs7cmSJs7EcwUq4VtvNuUxr4pw8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:5f:08:56:cb:51:b7:0a:e8:4c:1e:e4:9c:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
        Validity
            Not Before: Feb  2 06:01:46 2026 GMT
            Not After : Feb  3 06:01:46 2026 GMT
        Subject: CN=3e016545b101e5fc34b6b861380e57e5c5852e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:9a:ce:fb:ef:88:8a:0a:02:78:f0:dc:a8:
                    72:18:95:fd:c1:11:33:14:2b:43:47:bb:d6:78:5c:
                    af:fd:d5:c9:4e:53:0f:2a:d1:f5:a2:77:9d:67:06:
                    d5:67:a1:d3:d0:90:a1:27:26:03:40:c7:90:06:63:
                    7f:62:92:2c:70:d7:db:c8:c6:31:21:eb:57:e8:63:
                    3a:b1:4d:f7:34:d3:5c:41:fa:e7:cb:96:1b:28:b1:
                    e1:ab:40:3d:40:c2:74:57:61:cc:17:db:bb:b1:a8:
                    ff:68:31:4a:9d:68:9f:60:e9:32:6e:a4:47:91:fc:
                    e5:1f:c2:64:cb:be:cd:b3:c3:41:53:0e:58:a0:16:
                    00:b7:40:27:b9:79:85:bd:f3:c2:7b:ba:ed:3b:63:
                    0c:30:12:f6:a5:f9:f2:e1:93:51:01:91:8e:81:a1:
                    01:bc:d5:80:f4:64:19:3e:a7:79:f7:33:ef:6c:20:
                    0d:67:81:81:02:a8:45:16:d8:85:55:6c:e7:d0:e6:
                    b9:28:b9:37:e9:d0:7b:cb:81:2b:9a:fc:a9:e6:b4:
                    1b:37:8a:a5:9a:81:9b:c8:dc:f1:17:62:5f:a6:8e:
                    b3:19:6e:a9:8c:5c:06:b3:98:07:97:28:8b:a8:03:
                    8e:58:85:80:c3:5a:ee:b3:6b:f0:00:1d:49:7b:aa:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:01:65:45:B1:01:E5:FC:34:B6:B8:61:38:0E:57:E5:C5:85:2E:52
            X509v3 Authority Key Identifier:
                keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:40:1a:fc:d6:f2:86:ed:ec:9f:d3:15:40:c8:03:26:5d:
         fa:6f:ba:42:28:9e:56:0b:b9:46:05:d4:5b:88:91:31:a6:6c:
         d4:66:00:5b:3c:30:e8:23:8e:59:b5:83:fc:3b:47:44:7a:25:
         c6:f8:bd:52:e6:62:73:b8:fc:6a:c6:7f:12:2b:78:1b:ac:09:
         08:d1:35:1d:e8:96:a4:b9:27:29:2f:2b:4b:80:36:a4:7c:13:
         69:98:c6:c2:dc:74:53:63:06:ff:57:99:34:80:fe:5a:ac:be:
         3c:34:d1:95:22:b9:57:43:47:4d:61:20:5b:af:ac:7d:8f:64:
         86:ed:15:c6:68:ed:32:22:e0:2b:57:7c:88:11:95:0b:15:af:
         26:7c:3f:02:50:06:de:09:5b:0b:b6:69:7d:4d:b4:a7:fb:e5:
         1f:fe:af:20:2c:dc:c9:60:ab:e8:91:f6:3b:1c:7d:94:d3:c8:
         b5:96:8e:c0:9c:a0:54:8b:38:03:c0:ca:ea:9a:c2:57:2d:5b:
         14:5a:f1:bb:87:6f:08:2d:f4:90:c1:6a:70:23:70:97:07:4b:
         c3:c1:e2:21:b0:cf:17:0d:4a:aa:54:72:03:c3:72:f3:01:f8:
         99:50:40:3e:57:70:6c:29:93:fc:8d:b9:82:44:93:e0:3b:fd:
         b2:78:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:31 2026 by rpki-client