This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File:                     oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier:          eaGaNeAUjaSCmt44rSMWV7e0i2pnFfE1VIwo9Rn4CJo=
Subject key identifier:   2B:4A:01:8D:0F:E1:0F:D6:BA:74:F6:B7:60:8C:D1:8F:D4:5F:89:DF
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer:       /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial:       019C427D2D07FB19CBF3AAC9A0356160365D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:25 +0000
Files and hashes:         1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: nuDja6ZYL/OJ3axKiIiPRNjUCBnK9FyaevBprLgF/Jc=)
                          2: qlUMTY8f9xMZJf_wYNKsX0Jnm9o.roa (hash: 6TBYCzPo1M2XR2SlsB1vR5t4Ago4gsLphNAfezL8f1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:2d:07:fb:19:cb:f3:aa:c9:a0:35:61:60:36:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
        Validity
            Not Before: Feb  9 13:00:25 2026 GMT
            Not After : Feb 10 13:00:25 2026 GMT
        Subject: CN=2b4a018d0fe10fd6ba74f6b7608cd18fd45f89df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:c1:33:13:14:80:50:50:d0:82:28:c5:7d:
                    f9:e3:dc:69:88:d5:1b:e2:31:f1:d6:81:a9:c6:cf:
                    e7:bc:5d:85:1a:5e:75:17:56:1e:16:00:33:8f:e3:
                    2d:63:56:99:20:07:91:6a:26:54:3f:aa:63:e0:46:
                    38:cf:fe:df:fb:e8:60:6e:b3:59:8f:5b:19:87:3c:
                    48:e3:d6:c7:20:71:e5:11:1e:06:12:67:a4:a4:eb:
                    9f:2d:78:e7:0d:44:1c:8f:a0:30:0a:86:26:a6:19:
                    89:48:c1:a1:60:0b:22:e5:a6:a7:36:f5:81:f5:a1:
                    91:91:92:c6:1c:e0:36:20:6e:14:cc:a2:56:a3:fc:
                    4e:aa:1c:90:bb:73:93:f5:c1:fe:de:cc:2c:f1:c3:
                    88:1d:1b:c2:99:af:b1:55:8f:72:76:b7:17:fd:23:
                    49:ff:d3:0e:67:2d:ed:5d:d9:f0:d6:aa:cf:c9:e9:
                    46:50:07:d5:bb:fc:80:6f:76:c2:bf:6d:4c:b2:b0:
                    8e:d9:1b:48:7a:e1:06:9e:56:cd:73:f9:00:26:54:
                    98:40:5c:0d:56:16:d6:dc:22:8d:3b:d0:a1:b6:78:
                    19:a7:d2:ed:f1:33:a2:15:a0:9d:a2:92:21:82:56:
                    08:07:7f:ff:1a:5c:d6:50:b8:fc:69:04:dc:f7:87:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4A:01:8D:0F:E1:0F:D6:BA:74:F6:B7:60:8C:D1:8F:D4:5F:89:DF
            X509v3 Authority Key Identifier:
                keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ea:46:09:53:39:e0:a1:78:55:b4:0e:6e:b0:43:21:67:d6:
         46:3e:96:f3:65:90:7b:06:53:d1:7e:62:9b:62:65:1e:10:31:
         45:b2:13:45:b0:e0:50:3f:c0:6d:7c:4a:f1:b5:30:6e:eb:da:
         6f:c2:40:45:f2:9a:34:83:67:b0:7b:13:a2:87:c4:a6:0a:50:
         af:04:d7:20:d9:0b:51:80:87:90:9b:30:28:d1:62:cf:c7:e1:
         48:a8:c8:2c:75:3c:32:e2:bd:1c:be:02:e0:84:8f:f7:3e:2a:
         c1:e8:bb:77:d3:3c:3d:65:23:57:90:d2:3f:25:8c:6a:41:8e:
         76:3b:c5:f8:48:5f:13:e5:3c:73:3c:ad:c7:1a:77:cc:0e:d2:
         cb:6f:0f:45:d5:e3:49:0b:16:94:3d:7e:bc:d6:56:ed:eb:9c:
         68:50:ed:fb:7b:74:65:da:9b:3a:2f:43:66:c0:f1:4c:bf:0d:
         23:a1:85:d4:7e:11:ad:8f:1f:59:94:a6:4f:14:ab:c0:86:8b:
         63:3c:2b:83:49:83:ff:6c:4d:8f:42:c6:ab:b4:96:35:01:8d:
         52:0b:f1:e1:d8:f0:77:3b:fb:6e:67:df:90:31:d9:38:3c:47:
         8c:db:60:88:76:01:e4:bb:0c:87:0c:06:33:e6:08:dc:59:18:
         5a:e9:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:50 2026 by rpki-client