This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File:                     OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier:          dzw01QMxH9y6SLlBPkCeMP4331EWSr7zuw4PTf6tqO4=
Subject key identifier:   03:5D:69:E0:F5:72:BE:80:76:EB:EF:18:69:2F:67:83:D8:EC:07:66
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer:       /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial:       019C1CF17AFCA7B1E6BCDA87F95D694FCC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number:          17FF
Signing time:             Mon 02 Feb 2026 06:01:53 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:53 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:53 +0000
Files and hashes:         1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: YvHVnChjPACKGW3IeaQaIPTFmNqTDw66/PW0u97c0Og=)
                          2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
                          3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:7a:fc:a7:b1:e6:bc:da:87:f9:5d:69:4f:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
        Validity
            Not Before: Feb  2 06:01:53 2026 GMT
            Not After : Feb  3 06:01:53 2026 GMT
        Subject: CN=035d69e0f572be8076ebef18692f6783d8ec0766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:49:a0:28:c7:05:a2:cb:46:1a:6d:cf:fd:
                    d2:fe:8a:95:7a:54:c1:be:18:91:93:2b:dc:28:19:
                    0d:2c:37:82:29:b5:81:8f:d3:61:3c:45:1e:94:b1:
                    81:73:62:bb:66:f1:36:49:8e:10:04:d8:d9:ad:53:
                    73:d4:02:13:bf:e1:8e:d2:a5:a4:21:a1:bb:62:ad:
                    7a:57:22:a0:bf:f6:f7:0b:9e:a8:ec:b0:25:15:f9:
                    4e:b1:74:13:45:d7:c3:88:ee:b9:68:ac:63:18:59:
                    6f:8c:d9:b1:ec:f0:75:63:cb:43:90:72:7b:d0:6d:
                    4e:f5:a3:de:3f:92:99:31:db:e6:92:31:d8:ec:12:
                    ed:7a:0d:e1:fc:96:91:48:ac:60:f0:9c:43:00:0c:
                    2f:48:96:a0:e0:74:0b:5b:65:6f:d2:ab:1b:62:da:
                    ea:aa:da:a7:fe:23:ea:ef:dc:7a:7b:fd:7d:d2:7f:
                    d3:4c:8a:dd:84:18:35:41:b6:b0:85:98:10:0e:01:
                    31:ae:d1:ad:f7:e5:78:f4:0e:ac:ef:d5:84:9a:67:
                    cf:e5:ee:52:e4:fc:d2:8c:3b:6d:c8:30:08:da:83:
                    3d:3c:c5:51:17:6a:7f:36:73:03:13:d1:91:22:3a:
                    92:05:3f:e0:e9:bb:43:12:ed:ff:83:bb:d8:13:ab:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:69:E0:F5:72:BE:80:76:EB:EF:18:69:2F:67:83:D8:EC:07:66
            X509v3 Authority Key Identifier:
                keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:36:c1:63:a2:5c:bb:09:64:95:e0:3c:4f:87:0e:28:f2:c4:
         50:2c:03:72:2e:45:70:a0:95:66:c4:19:f7:b8:19:18:ba:88:
         ab:59:aa:19:e1:df:18:2b:41:83:cf:d0:dc:14:f3:19:ba:e1:
         ce:06:ac:5a:f2:24:98:26:68:9e:c1:6f:f7:60:39:01:fc:b0:
         9b:23:3e:6e:e7:06:68:e6:a0:19:ed:bd:ce:c7:3b:35:6f:3b:
         b3:4c:d9:5a:80:0e:1e:c7:66:8e:45:02:18:a6:d5:2b:92:12:
         c3:f6:01:46:6b:b8:7a:56:60:16:a2:b5:53:de:11:41:ed:3d:
         99:56:fd:4c:ff:7c:c5:04:85:af:ac:69:3f:ae:bc:a6:05:e9:
         3f:63:7a:fc:a6:20:75:c2:bd:f9:2d:59:10:e9:44:cc:0e:4b:
         e5:e9:cd:97:75:be:ab:c4:93:31:48:36:55:88:65:cb:42:5e:
         76:49:15:f7:70:a4:dc:8b:5c:1e:d6:42:18:f5:39:9d:c7:d1:
         f8:8b:06:8e:bb:f3:88:77:62:dc:b8:6a:fa:b0:5f:e0:40:c7:
         17:19:3c:ff:36:91:93:30:16:96:97:33:0b:42:af:a2:5a:b4:
         21:4b:70:51:4a:ab:33:ed:9f:c0:40:e8:df:49:e2:9b:79:65:
         7b:b1:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:58:44 2026 by rpki-client