This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File:                     oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier:          BaFKl6rvdz4WvNd52ZvEnjR89VNEYjoqkMdfAdsbBr4=
Subject key identifier:   FB:50:66:0D:B9:91:DF:3D:B8:A7:36:83:E4:0B:72:04:7D:62:70:C4
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer:       /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial:       019C43593D65E45F04EDAE038629BF3DFF09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number:          10AA
Signing time:             Mon 09 Feb 2026 17:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:47 +0000
Files and hashes:         1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
                          2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: yhc44hk5NJLZ/r0z8JLyqz5cDVB/Ju1gvOK8i186auc=)
                          3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:3d:65:e4:5f:04:ed:ae:03:86:29:bf:3d:ff:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
        Validity
            Not Before: Feb  9 17:00:47 2026 GMT
            Not After : Feb 10 17:00:47 2026 GMT
        Subject: CN=fb50660db991df3db8a73683e40b72047d6270c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:19:8c:61:99:f1:da:ef:b7:9a:60:12:7e:
                    0f:11:3c:74:a3:5b:88:b0:cb:a8:c4:22:0f:b9:a5:
                    fe:ff:86:60:80:aa:9b:6a:78:39:d4:22:aa:1d:b4:
                    2c:6f:d6:b2:0c:0e:17:be:65:98:ab:3a:94:76:cc:
                    f5:c0:eb:9a:b1:a7:a1:89:ba:04:26:7a:8c:95:a9:
                    50:85:07:32:9a:db:1b:18:ef:46:24:92:dd:12:1b:
                    3c:d5:e0:95:06:69:5d:f1:38:ba:5f:2e:99:3c:76:
                    7d:cc:ca:87:6d:e7:17:4a:35:a0:f1:56:9a:e2:e5:
                    f6:44:c5:2d:b4:4e:9e:bf:e6:1c:da:df:17:f4:73:
                    10:cf:eb:7a:02:44:cf:ef:72:fd:f2:3f:4e:d9:2e:
                    52:cd:4a:2c:77:a5:98:43:70:7f:a4:ef:4c:c7:9d:
                    d8:4d:d6:96:a8:3b:d1:e1:ac:75:fa:d6:f0:4b:97:
                    4c:e8:74:8a:7a:85:bd:05:f1:88:23:66:82:ed:1c:
                    2d:f6:48:12:95:47:ec:66:93:20:0c:15:4f:43:67:
                    b6:e1:a4:76:40:21:d9:6e:d2:43:d9:a7:01:e3:c9:
                    52:1e:64:dd:22:e7:74:4f:57:f1:6c:50:01:0a:1e:
                    ab:2d:d3:2d:50:69:46:b4:4c:02:16:67:a2:44:50:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:66:0D:B9:91:DF:3D:B8:A7:36:83:E4:0B:72:04:7D:62:70:C4
            X509v3 Authority Key Identifier:
                keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4d:8e:eb:2f:d4:fb:f6:c0:d3:e3:e4:6f:29:35:3f:cc:68:
         48:ba:ba:62:6a:4a:6f:62:c7:39:bc:b8:30:98:c8:d7:24:5d:
         a0:60:2a:70:95:71:46:c5:81:ea:f7:20:b3:00:b7:76:6a:23:
         9e:8f:99:0f:49:20:fb:58:ff:1b:98:88:90:2f:6f:9b:e2:16:
         45:ff:ba:13:ae:61:9b:e0:14:e1:4f:43:cb:9e:b9:f3:41:50:
         29:4f:f2:7b:3e:ae:dd:92:fb:58:6a:9a:50:8b:44:00:18:7b:
         99:97:ea:a6:6a:20:0e:77:2f:c0:a8:6b:97:99:bd:a6:22:f2:
         00:83:c7:1a:f9:e8:8c:9f:65:6a:0f:ba:70:d1:a9:92:3c:58:
         71:0d:e4:ac:62:5c:59:c4:40:1e:5c:d4:88:38:72:00:c0:57:
         57:51:e4:e3:5a:5b:8e:54:0b:fb:5a:77:4a:b8:07:71:9e:49:
         74:9e:3e:56:40:4a:32:68:98:4d:e1:bd:fc:78:99:32:40:9e:
         9f:c8:12:fe:e3:86:58:4e:a3:89:c4:73:f9:69:74:ab:10:a4:
         74:18:08:4c:a4:ce:29:85:f7:eb:ae:2a:a6:1f:4c:1e:37:0e:
         27:d4:7a:22:7d:6d:1c:66:92:77:d7:1d:67:92:cd:99:f3:a5:
         58:b0:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:21 2026 by rpki-client