This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          vyM0gFkPt/QzywcRZDvvcw2/Uwzqs6k/HcFHl7L7V04=
Subject key identifier:   5E:77:8B:D2:D6:E4:C7:08:13:EF:18:85:01:32:55:CE:CF:55:B8:73
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       019C420FA1EA60B9D6663423337F3B0DF892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          05A1
Signing time:             Mon 09 Feb 2026 11:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:46 +0000
Files and hashes:         1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
                          2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
                          3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: DYUGbz5W+3hdluvzAGv34vNPIm7m9n+w/VfG9G38qdw=)
                          4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:a1:ea:60:b9:d6:66:34:23:33:7f:3b:0d:f8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: Feb  9 11:00:46 2026 GMT
            Not After : Feb 10 11:00:46 2026 GMT
        Subject: CN=5e778bd2d6e4c70813ef1885013255cecf55b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:81:e2:0c:ba:3d:c2:fd:db:3d:75:1a:72:25:
                    38:62:35:5f:34:19:97:76:4b:a2:59:fc:62:bd:2b:
                    27:da:5f:80:94:99:91:eb:f5:dd:5b:9f:a5:92:ae:
                    aa:52:fc:3d:4e:ad:01:d8:2e:08:ec:76:83:1f:b3:
                    40:ac:29:b7:dc:e4:b0:93:f2:3c:db:8d:a9:13:c0:
                    64:d1:80:25:54:6f:79:67:ef:96:e1:c8:8d:ce:82:
                    a4:33:0b:7e:eb:5c:29:63:59:e1:f5:bd:39:15:88:
                    38:d0:94:b1:c4:52:45:8a:f4:29:22:16:97:cd:1c:
                    f5:b3:d4:52:9a:28:76:ae:14:17:db:9b:8c:44:cd:
                    99:35:b7:45:be:d2:d4:35:9f:75:1b:36:56:1d:a1:
                    0e:8c:38:ca:b4:02:e6:ef:25:79:95:ad:90:6c:e7:
                    fd:e9:39:4b:1a:15:d4:ce:57:36:04:16:4f:1d:52:
                    2d:ca:f7:17:7e:a6:33:ea:f6:13:4f:32:e8:9f:f6:
                    b7:3a:76:56:14:9f:74:02:b7:5e:c9:08:80:67:b5:
                    2e:35:71:bd:e4:70:14:7e:9b:4f:c3:1d:58:54:3b:
                    a3:c7:e7:bf:09:cb:4c:32:3d:9a:d7:c8:ee:dc:67:
                    cb:bc:01:a0:64:5d:7f:8a:03:cd:82:47:14:b2:02:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:8B:D2:D6:E4:C7:08:13:EF:18:85:01:32:55:CE:CF:55:B8:73
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:29:e8:7d:d2:5c:5e:f5:dc:4d:ea:ad:54:3b:6f:ad:3d:c8:
         1b:0f:42:32:2d:1c:be:61:b2:0c:ab:7b:aa:94:a1:5e:e8:97:
         5b:e4:66:02:4d:a2:73:f5:59:6b:11:86:1e:62:8d:de:99:ec:
         ca:25:3e:73:c5:ea:a0:24:f4:b4:b1:05:2a:6f:6d:d5:e6:ff:
         08:09:08:20:fa:45:ed:25:24:8a:8b:c6:8f:5a:f2:13:ca:46:
         27:28:f0:bc:0e:d2:95:05:ff:a6:b9:d4:db:62:6a:55:d6:4a:
         78:b9:55:45:06:f9:2b:83:6c:ed:76:7e:4f:35:48:35:41:78:
         07:f1:78:50:d5:43:57:c8:c4:99:49:74:89:22:65:19:58:37:
         17:49:9d:cf:db:7e:59:f6:43:be:b3:3c:c0:df:a7:4d:87:ac:
         ef:26:48:8a:69:bb:e4:0a:80:51:d8:ba:3b:9e:35:32:3d:37:
         12:9f:a3:79:69:c7:5c:06:bb:0f:98:6d:c3:97:5b:5f:8b:44:
         d2:83:3f:b3:35:ee:18:86:ed:ba:ba:89:50:03:c6:73:00:1f:
         7a:4e:19:e1:cd:0c:6c:31:86:20:1c:8f:db:78:81:85:fd:60:
         33:ba:a5:7f:09:7e:25:a4:df:07:1d:4d:af:c7:ec:e8:8c:f9:
         84:35:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:39 2026 by rpki-client