This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File:                     O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier:          9AGOSnRDoV2uZ0UauyVDRQUFIEyRS0WlokSv5xnf19Q=
Subject key identifier:   08:97:64:DB:C8:F1:00:FC:2B:BF:DE:20:35:A2:1A:CB:1D:D2:EA:91
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer:       /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial:       019C42B48B4F87B295FA5A84CEBBF929F93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number:          124B
Signing time:             Mon 09 Feb 2026 14:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:54 +0000
Files and hashes:         1: GPPevbImSvGjVqWAzYGvcpc3FOs.roa (hash: MHorAz/UCfb7aKgx7pKoBAkAFlLncJNyaH/wm4EHMOY=)
                          2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: LytSd1fRmO2ZGRr+qhyepXIG2AeJ19aKPtagYSvZmsM=)
                          3: XD7uuC6NUKDza7PfKtc_jHz7EnA.roa (hash: RPYu/+kKueNaM8YfpMGx6Mxi+JGMI3A7i1eBXpiVPd4=)
                          4: ntt8oBWCvDCUpNDHjPuie_5MUck.roa (hash: Yy1s4qDW987rNxjvZEbp1rZR84GXQU0RB/faIrx/grE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:8b:4f:87:b2:95:fa:5a:84:ce:bb:f9:29:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
        Validity
            Not Before: Feb  9 14:00:54 2026 GMT
            Not After : Feb 10 14:00:54 2026 GMT
        Subject: CN=089764dbc8f100fc2bbfde2035a21acb1dd2ea91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:c4:cc:ad:d0:74:1f:ec:1e:ec:d7:68:33:
                    dc:fb:66:7f:f1:93:0a:91:20:ce:2c:a9:cc:45:98:
                    dc:56:8e:22:92:bf:c0:c6:23:10:28:a3:60:c5:83:
                    a2:d0:1a:ab:ab:52:4a:6a:73:06:bd:23:3b:e6:7b:
                    7e:f4:0f:98:cd:32:df:ab:83:81:17:83:1a:19:86:
                    16:dd:71:84:08:a0:52:04:b6:2b:71:54:c1:b0:56:
                    7f:5a:88:b5:e0:4e:9b:79:82:e5:3d:2c:1a:54:85:
                    45:21:3f:21:b0:f7:ce:c7:43:b6:a7:e9:c4:7f:7b:
                    50:af:2c:aa:62:09:a8:ca:fe:67:92:43:1c:cb:75:
                    d8:72:b1:8a:f7:32:e6:14:06:a8:02:2b:bb:59:d4:
                    82:35:9e:89:58:74:1b:e5:11:28:89:94:da:63:63:
                    6a:f1:8d:0b:67:12:9c:41:a4:b3:b5:8c:07:28:fc:
                    6d:86:3c:56:dc:86:93:8b:eb:1d:b8:81:3b:0a:69:
                    a7:63:ef:52:7d:39:6d:1a:f6:ed:24:72:52:23:94:
                    50:07:0e:96:ed:2a:63:88:e1:75:68:94:63:50:79:
                    18:84:06:8c:3f:ff:f5:32:7b:ea:dc:6d:08:f2:22:
                    71:4f:5d:a1:e9:7c:5b:92:b6:25:b1:5f:82:96:4d:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:97:64:DB:C8:F1:00:FC:2B:BF:DE:20:35:A2:1A:CB:1D:D2:EA:91
            X509v3 Authority Key Identifier:
                keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:92:dc:41:de:f6:5a:a0:9e:95:d5:60:0a:00:8d:f0:8f:
         a3:4b:59:be:10:4d:b4:cd:2c:94:1b:79:19:bd:6c:64:73:3a:
         bd:14:31:e1:01:d6:b3:96:2a:34:d2:6d:c5:59:28:34:8d:a0:
         3d:a0:23:d3:59:bc:21:ac:64:62:e2:ea:4a:22:01:eb:9e:e2:
         96:b6:37:59:23:b5:f3:09:60:e2:61:8c:55:d1:ec:4a:cf:af:
         b0:15:c5:6e:8c:96:28:30:94:7a:9f:0c:c8:47:fd:4c:75:49:
         85:a6:c8:ec:14:d9:68:43:0f:38:9d:08:05:a8:d3:3a:03:6f:
         21:be:01:f2:fb:88:0a:e9:7c:25:97:ec:94:5b:c1:6d:79:ef:
         8a:11:c3:76:51:c3:49:66:cd:2b:f0:2f:a6:14:7b:bd:3a:cb:
         24:ee:c4:d6:8b:58:d2:7a:05:f0:da:ed:30:a1:95:7e:73:74:
         fc:89:0b:ca:d7:a9:a5:84:ac:1e:b0:7e:d9:a7:1c:02:e1:42:
         a1:6c:d3:6a:9e:77:20:ce:ed:34:d6:9d:55:32:bc:b3:13:ee:
         1b:5a:32:56:c8:48:00:62:7f:fb:14:10:71:6c:30:0c:50:a5:
         c9:be:ca:12:56:4a:37:75:07:0e:2b:a8:50:4f:41:c7:d9:6f:
         41:55:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:44 2026 by rpki-client