This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File:                     zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier:          QsQutnA2Gpl24zW8+gIErUk65CR2n02o7TEanFBQyho=
Subject key identifier:   2D:3A:54:77:FF:9D:CF:62:C7:F4:A2:A1:2E:91:19:2C:DD:B3:79:D7
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer:       /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial:       019C42464D81ECFE363B91B6508C5CB51B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number:          0B23
Signing time:             Mon 09 Feb 2026 12:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:29 +0000
Files and hashes:         1: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (hash: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI=)
                          2: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (hash: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=)
                          3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: /RtCZPpubkCEi8OqKfR6MOyy2tYK74RpGD+9GHV7K9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:4d:81:ec:fe:36:3b:91:b6:50:8c:5c:b5:1b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
        Validity
            Not Before: Feb  9 12:00:29 2026 GMT
            Not After : Feb 10 12:00:29 2026 GMT
        Subject: CN=2d3a5477ff9dcf62c7f4a2a12e91192cddb379d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:02:19:f4:a3:9f:03:d6:af:d7:f2:0a:64:
                    1b:03:bc:e0:9f:f3:4f:49:b0:4a:e4:f5:b4:3a:ef:
                    1a:58:2a:6a:45:fa:e5:24:94:97:30:4d:b2:a8:2c:
                    7d:b3:b7:c8:45:11:24:ac:30:f4:68:0a:26:71:5d:
                    bc:19:1b:74:41:0b:ad:c3:4d:4e:ea:7a:3d:2b:ee:
                    69:12:87:80:3c:c2:f4:2f:82:6a:1e:2e:a4:97:d1:
                    12:73:a8:08:27:b9:61:86:23:a8:8a:0d:1b:7a:e9:
                    68:57:f8:6c:82:bc:5b:e2:f3:91:c1:94:b9:85:0a:
                    5e:b0:63:ea:e2:30:71:c8:16:f5:f4:09:69:f5:49:
                    ff:6f:b3:8d:ff:51:7b:71:c9:fa:3f:df:65:36:d6:
                    fb:21:e3:96:ea:fc:42:d4:d6:2c:80:6a:e6:95:5d:
                    f9:a8:f5:91:3e:d8:f7:ae:48:e3:68:fc:1d:58:86:
                    fe:6e:0d:3b:29:a7:98:a3:00:f2:89:58:14:da:40:
                    38:69:cc:c0:69:f8:db:84:3f:81:da:70:7e:7b:69:
                    a0:9f:33:c2:d6:8e:78:b2:bc:24:5c:43:4a:f5:30:
                    3f:16:a8:44:72:57:1e:57:28:e6:0c:98:61:9d:d2:
                    20:9a:ec:7d:73:4c:88:7f:f4:4b:44:39:34:2a:42:
                    c5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3A:54:77:FF:9D:CF:62:C7:F4:A2:A1:2E:91:19:2C:DD:B3:79:D7
            X509v3 Authority Key Identifier:
                keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c2:ac:e6:2d:0f:85:34:ba:20:29:a2:cd:9d:72:ac:3a:fd:
         a7:4c:81:3a:e2:89:ed:22:f8:12:8c:eb:0a:4d:69:24:12:52:
         4c:9d:5c:43:4a:b6:06:74:93:54:4c:ac:7d:c9:31:34:ad:66:
         4a:cd:82:f9:74:8d:f6:e8:bd:b2:5b:d3:ab:ad:e4:72:02:e3:
         21:f4:c1:a0:57:04:33:2d:42:63:ef:2e:09:94:05:a8:aa:ea:
         59:e3:77:d4:c8:ff:f2:6d:b4:05:09:46:ad:ea:dd:2c:fc:d6:
         51:5b:1e:3a:90:59:1c:9e:57:ee:f8:cb:54:18:5b:21:ad:51:
         e9:6c:20:15:c0:93:35:7c:a0:9f:87:a7:c6:87:03:a4:4f:9c:
         59:80:69:f4:e2:13:d4:db:70:0f:b1:59:3d:1d:b1:13:1b:88:
         7e:ab:94:5a:00:69:6e:e9:55:1d:b5:b1:df:90:fd:dc:79:15:
         d4:bb:6b:ec:83:02:79:e2:4e:7c:6c:f1:1e:47:40:5d:9a:ce:
         b6:e6:c9:26:9e:1a:6e:ab:d8:4f:87:93:0b:08:e5:34:79:3d:
         31:10:18:5b:3f:75:de:e7:89:77:03:16:64:f2:d0:48:3e:ad:
         41:34:8b:26:29:77:b7:b2:5b:41:56:38:2e:cd:3d:b9:12:2a:
         92:60:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:09 2026 by rpki-client