This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          VJ4CvP1+FU9PubtFA1h01EFPIeUR3Ddatwh7aJA7Q6o=
Subject key identifier:   DB:1C:0E:01:16:5E:07:3B:90:85:9C:76:D3:A5:D3:C4:3A:60:2E:D8
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019C284F9972121B6D025F4AD27A446B079C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0D95
Signing time:             Wed 04 Feb 2026 11:00:30 +0000
Manifest this update:     Wed 04 Feb 2026 11:00:30 +0000
Manifest next update:     Thu 05 Feb 2026 11:00:30 +0000
Files and hashes:         1: 1AdLwVTQwnRojaJc6oKg4bE5e10.roa (hash: SmldC7KFTFrB2ovoO23QX0S7PhV2KBqhDfb2PIUZ9dY=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: y6vboNCT1O+ayk8rY6xWGHa3Llcqu7v+h4RU1RZlc4A=)
                          3: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (hash: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk=)
                          4: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (hash: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o=)
                          5: qw0bNos2uMNz09JenRAlkTtNmd8.roa (hash: SLKj00aaETL606oUEHzZc3k3yjfYWagWu8LRBWMxnBA=)
                          6: sYth0C5gNTA4Nn0ZVlj2vFu-rcA.roa (hash: YQlDl2GO98hMqxb9t2YAM1lWkbesF46HgOB5GJrP+Og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:4f:99:72:12:1b:6d:02:5f:4a:d2:7a:44:6b:07:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Feb  4 11:00:30 2026 GMT
            Not After : Feb  5 11:00:30 2026 GMT
        Subject: CN=db1c0e01165e073b90859c76d3a5d3c43a602ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:92:ce:51:61:97:0a:80:7b:91:80:f1:4c:
                    d7:8d:d4:f9:07:9e:1e:34:d1:b1:4e:00:56:66:76:
                    e7:a5:28:00:2e:56:73:5e:c4:6b:5d:1b:aa:76:36:
                    bb:ad:03:8a:f0:29:a0:c4:4f:c9:25:04:bd:0d:2d:
                    65:bd:a8:e9:7d:9a:ea:0b:30:a5:9d:f4:c4:e8:17:
                    b0:b1:e4:95:20:ce:e6:da:6b:91:33:9a:d4:23:14:
                    f6:d9:cd:76:57:60:99:f0:4c:70:d9:ac:7f:93:bf:
                    f8:b2:bf:b4:fe:b3:ec:37:21:bb:1a:0b:23:16:c6:
                    01:08:32:f4:c2:cb:fe:b6:8b:11:0e:1f:5f:56:ba:
                    d1:5b:a2:06:c1:14:3a:a5:6c:d7:1e:01:7b:b7:e1:
                    e4:66:c3:88:65:6d:76:7c:3d:67:67:5f:4c:d3:60:
                    4b:29:4c:5f:7c:a8:93:e0:7e:da:01:eb:19:19:5a:
                    4a:37:a7:9a:c2:1c:19:e9:fe:01:04:6f:3c:e4:33:
                    d4:70:26:6c:6e:ab:d0:f9:4f:1d:5b:e8:00:57:91:
                    e9:b5:70:1b:ad:ef:82:99:6a:8f:a7:8d:f3:f4:fe:
                    08:7b:53:9c:d1:37:e2:1d:f6:60:d8:a9:9e:b2:a9:
                    da:4b:69:d4:5b:00:ff:bc:59:f9:38:7d:55:c2:e7:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:0E:01:16:5E:07:3B:90:85:9C:76:D3:A5:D3:C4:3A:60:2E:D8
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:42:c1:6c:b9:d1:c2:82:1e:df:24:a8:54:59:3d:0e:e1:d2:
         22:9c:15:ee:e6:41:33:a7:5a:28:7d:7e:7b:6d:b5:06:1d:0c:
         23:96:33:2a:1d:a4:10:eb:90:15:24:56:26:41:5c:a0:f4:96:
         72:d4:06:9d:53:84:99:63:2b:58:b7:07:e8:ee:e4:b2:e1:08:
         e9:bc:f6:5e:f6:af:e4:4a:bd:18:c4:f2:34:83:e9:1f:14:5b:
         3b:25:16:f5:9a:2a:54:c8:50:05:cc:e1:e9:be:66:93:51:b5:
         f7:c2:72:8d:2c:fe:e4:8c:ba:a6:06:d5:56:c4:8a:9c:23:fe:
         25:c3:e8:63:ce:cb:63:e0:f2:db:81:af:f4:9f:db:2a:02:bf:
         02:e9:3f:f4:3d:cb:5e:25:63:46:2e:f2:22:a4:12:d4:df:9a:
         ec:00:dd:12:c1:bb:48:91:fc:f8:06:18:ef:c2:ee:ee:e7:c2:
         f0:bb:63:f1:97:72:ed:a8:55:84:e3:7f:d0:5e:b7:df:b0:17:
         5a:90:2b:5f:e0:b6:7b:d3:81:d5:41:58:c6:aa:a1:19:8d:03:
         ee:a1:ae:d1:16:c8:c5:9c:a5:bb:fe:77:cf:39:d9:ae:2b:2d:
         e2:5e:59:c3:ca:de:90:74:a5:26:d7:e5:0b:28:b6:1f:a1:d4:
         7a:b0:dd:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwoT5lyEhttAl9K0npEawecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjYwMjA0MTEwMDMwWhcNMjYwMjA1MTEwMDMwWjAzMTEwLwYDVQQD
EyhkYjFjMGUwMTE2NWUwNzNiOTA4NTljNzZkM2E1ZDNjNDNhNjAyZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eiSzlFhlwqAe5GA8UzXjdT5B54e
NNGxTgBWZnbnpSgALlZzXsRrXRuqdja7rQOK8CmgxE/JJQS9DS1lvajpfZrqCzCl
nfTE6BewseSVIM7m2muRM5rUIxT22c12V2CZ8Exw2ax/k7/4sr+0/rPsNyG7Ggsj
FsYBCDL0wsv+tosRDh9fVrrRW6IGwRQ6pWzXHgF7t+HkZsOIZW12fD1nZ19M02BL
KUxffKiT4H7aAesZGVpKN6eawhwZ6f4BBG885DPUcCZsbqvQ+U8dW+gAV5HptXAb
re+CmWqPp43z9P4Ie1Oc0TfiHfZg2KmesqnaS2nUWwD/vFn5OH1Vwuee9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNscDgEWXgc7kIWcdtOl08Q6YC7YMB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATULBbLnR
woIe3ySoVFk9DuHSIpwV7uZBM6daKH1+e221Bh0MI5YzKh2kEOuQFSRWJkFcoPSW
ctQGnVOEmWMrWLcH6O7ksuEI6bz2Xvav5Eq9GMTyNIPpHxRbOyUW9ZoqVMhQBczh
6b5mk1G198JyjSz+5Iy6pgbVVsSKnCP+JcPoY87LY+Dy24Gv9J/bKgK/Auk/9D3L
XiVjRi7yIqQS1N+a7ADdEsG7SJH8+AYY78Lu7ufC8Ltj8Zdy7ahVhON/0F6337AX
WpArX+C2e9OB1UFYxqqhGY0D7qGu0RbIxZylu/53zznZrist4l5Zw8rekHSlJtfl
Cyi2H6HUerDd5g==
-----END CERTIFICATE-----
Generated at Wed Feb 4 14:46:47 2026 by rpki-client