This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File:                     ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier:          eNRNOjWcxeffGPWv5563c598B8iDW7M5aCW3/SAzmZg=
Subject key identifier:   05:F6:3A:85:96:87:7D:8B:1C:EA:9E:E6:8D:8D:7F:6B:1F:DE:73:40
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer:       /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial:       019BF4998D48648E783AEC5E079A5DBFA9A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number:          0209
Signing time:             Sun 25 Jan 2026 10:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:02 +0000
Files and hashes:         1: JDzjknDhu6Y_YYn0PdVHwiTr2YA.roa (hash: GohFVvvq+XYJmNC5kEf/pp9o0uUty9wky/EpnIbRt08=)
                          2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
                          3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
                          4: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
                          5: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
                          6: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: 6X/hADv+zUbSqtrBs8soW213D49/c68AnGwywqKk1k0=)
                          7: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
                          8: l_b58pljUUJymixbVYg_j7s7_b4.roa (hash: tkw9nfwUKY8DeE3LkaxnF3Ie+Qlq21vHeZW4yxJTxd4=)
                          9: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:8d:48:64:8e:78:3a:ec:5e:07:9a:5d:bf:a9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
        Validity
            Not Before: Jan 25 10:01:02 2026 GMT
            Not After : Jan 26 10:01:02 2026 GMT
        Subject: CN=05f63a8596877d8b1cea9ee68d8d7f6b1fde7340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:7f:02:e7:b7:9d:73:a4:12:27:6e:1f:26:
                    42:52:be:80:63:e7:2f:64:85:41:d6:ff:cc:83:51:
                    a7:bd:28:56:fd:20:67:29:03:81:2d:3d:59:c7:66:
                    52:dd:ba:cc:85:f7:fd:8d:a5:8c:79:ae:af:ad:b0:
                    2d:03:bb:a1:c1:18:da:31:f3:30:86:d7:74:92:f2:
                    d8:bd:f4:58:62:2e:cb:6a:ec:ab:3e:c9:dc:0e:14:
                    60:bf:e1:3f:3a:aa:c7:57:2a:68:64:9a:e5:6e:f9:
                    e5:b4:a9:f6:eb:66:75:f0:c6:4d:92:f0:7d:3b:b8:
                    7c:0a:27:4b:89:29:a0:39:87:c6:dd:34:9c:c3:5d:
                    49:f8:e5:ca:d5:8d:78:0a:73:9b:e9:86:6e:21:92:
                    5f:ea:fa:7e:3b:58:ef:e6:56:ec:36:fb:3c:ea:da:
                    f9:2f:f5:ab:ca:b8:ea:b0:6e:bf:41:d9:0b:8e:47:
                    11:c4:a1:9a:ac:f8:d0:d4:6b:c9:04:b3:30:2c:cb:
                    bf:8c:59:e0:5b:ce:db:6b:85:8d:2e:3e:ac:cd:9c:
                    d7:e0:18:a6:dd:12:87:72:6f:4b:cd:79:b4:1b:5e:
                    6b:6a:3e:ed:4d:07:ce:4c:2a:1e:d5:a0:c6:a9:fa:
                    b4:b4:b5:72:b4:c5:dd:28:21:bb:2e:7c:6d:4d:dc:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:3A:85:96:87:7D:8B:1C:EA:9E:E6:8D:8D:7F:6B:1F:DE:73:40
            X509v3 Authority Key Identifier:
                keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:9c:32:d7:f5:58:06:2c:b1:03:9c:f2:30:ac:60:08:38:
         33:c4:18:1c:e2:80:dc:8b:6b:6f:82:ba:42:78:a6:22:39:d1:
         2c:42:bb:b5:8a:aa:81:2d:0d:a0:cf:9a:99:30:cb:04:e9:4c:
         b3:92:a1:f1:74:16:41:76:ae:90:7c:07:67:85:32:f8:0c:33:
         cd:a2:9f:26:52:6b:c9:21:bb:e4:9d:4e:43:ec:6e:3d:15:c5:
         7f:77:63:57:93:a3:17:6c:fb:1e:2b:f3:30:40:23:3c:56:21:
         37:a9:d8:81:65:36:f2:db:89:9d:08:b7:b7:60:c9:bf:a5:84:
         e9:7e:da:b7:76:18:19:c8:98:e1:35:f4:4b:df:0a:fd:4c:ba:
         3b:3a:7a:f6:fe:f0:01:a2:16:0d:cf:0a:ce:39:29:8c:f4:0d:
         36:87:f9:57:26:d3:8c:60:6a:07:6f:19:04:62:ad:f4:e4:1e:
         65:3b:c7:cb:d8:0b:4f:c4:31:62:46:65:4e:e1:f3:05:a6:d9:
         b8:cf:2d:ab:23:2c:d4:7d:59:b4:ce:cf:0e:fe:2d:ba:2f:b1:
         b8:e3:16:e8:48:4d:05:19:71:9b:ea:05:f1:77:72:b9:e4:a7:
         4c:46:3d:36:5a:8b:e0:7a:9d:ea:d3:c9:1f:f7:36:33:e3:79:
         33:45:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:46 2026 by rpki-client