This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File:                     O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier:          Un9pqrdJ51HEUVL4LgecBU5DGUt+xfiRWQ5LSGAoOx0=
Subject key identifier:   5A:9D:C4:6B:4C:7D:6F:FE:F6:48:B6:8B:F4:79:A7:03:38:AE:B6:63
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer:       /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial:       019C4322C261BF77A48D7EAE70E8CE88098F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number:          0D68
Signing time:             Mon 09 Feb 2026 16:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:17 +0000
Files and hashes:         1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: VMdhU9Y9c3Q4k/HkY8fRx0QM+Xu1J7uRocQXGjcHnoo=)
                          2: haiqd0uROE9igzZ6U-8DLmT0_wo.roa (hash: zy3b1gRK2HZuT5n0a04wvFSWWQ7+eD23DEYn7FkuZuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c2:61:bf:77:a4:8d:7e:ae:70:e8:ce:88:09:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
        Validity
            Not Before: Feb  9 16:01:17 2026 GMT
            Not After : Feb 10 16:01:17 2026 GMT
        Subject: CN=5a9dc46b4c7d6ffef648b68bf479a70338aeb663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:53:43:17:78:fc:f9:e1:54:2c:c9:f8:5b:
                    30:a1:d5:e5:d6:77:76:52:81:26:1b:66:c4:98:7b:
                    e2:3f:a4:7e:a1:11:d6:00:e9:48:b9:96:79:cf:a3:
                    dd:16:27:44:5e:88:73:48:2a:38:36:2b:ed:07:79:
                    eb:9b:0c:d5:66:ac:1a:c1:6f:9f:07:ed:9d:64:2e:
                    e1:17:80:3e:71:ac:02:61:bd:15:a0:46:88:82:5a:
                    a4:58:6b:57:a2:e8:88:f0:79:0f:a0:1f:e9:ea:30:
                    df:12:e1:51:b3:99:ec:6b:a3:a8:f9:a9:ef:51:11:
                    42:dc:e3:77:13:76:8a:ad:95:f1:4b:a7:c7:6b:be:
                    ff:a8:7f:d4:47:be:c3:15:be:06:d8:38:ba:f9:21:
                    22:98:71:b3:74:60:85:ca:54:ac:60:bf:20:3e:6e:
                    1c:a6:54:20:9a:3b:7b:8f:e0:75:d0:3c:9a:c1:24:
                    f8:33:7a:d5:e9:99:5e:f8:c8:e0:7c:c8:d9:73:3a:
                    6f:f7:28:c7:2d:7c:e5:ba:ba:c6:d9:45:ea:34:eb:
                    52:82:02:a7:4d:c0:52:9f:15:b3:13:18:3c:23:16:
                    92:6e:f9:5c:1e:22:41:a0:5e:13:d0:0c:8c:21:51:
                    b2:40:91:33:d6:59:53:bd:70:a6:e8:80:67:a0:03:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9D:C4:6B:4C:7D:6F:FE:F6:48:B6:8B:F4:79:A7:03:38:AE:B6:63
            X509v3 Authority Key Identifier:
                keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:24:37:57:62:3d:57:be:b9:e8:3a:a5:c7:36:84:4b:d7:41:
         47:65:0d:e0:15:1a:af:eb:8e:a6:d5:25:2f:1a:a1:e8:bd:3a:
         38:41:f0:08:f6:b1:a3:26:4a:35:bb:ee:d5:bc:64:c0:60:a0:
         1a:cf:71:ad:61:6e:26:77:4e:af:51:65:6d:91:37:fc:6a:31:
         36:a9:84:94:ad:36:33:82:f0:54:a8:db:74:88:ea:97:fa:ac:
         b5:38:2d:b2:b6:b4:93:e2:26:0d:66:12:82:8e:ac:0b:4c:18:
         5e:52:cd:db:f4:19:e3:bb:ce:03:db:37:99:11:eb:8a:6d:76:
         ce:c4:b9:17:2b:d0:44:72:21:34:36:06:ff:40:a2:21:c1:f0:
         94:11:f7:48:0d:9b:94:ce:fd:f0:6a:f9:40:e2:48:15:5d:01:
         b3:94:ad:58:97:47:c8:57:a7:ab:23:e4:b5:bb:49:8a:a5:34:
         51:c4:4d:22:03:5f:ec:28:0f:bf:8e:6f:1d:6e:d9:df:26:e0:
         16:69:bc:1a:17:5d:21:31:6f:cf:c3:d5:a3:59:1a:46:1c:fb:
         a9:32:5a:bd:a1:58:2c:33:98:b0:4a:29:75:e4:dd:45:ba:1b:
         4a:26:cc:be:89:1b:1d:f2:22:e4:53:21:00:3b:1c:8c:d6:b5:
         b7:c4:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:31 2026 by rpki-client