This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File:                     oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier:          H/dwPZMKJQDkGlF1Htg0jUzzfh+BgzSfpxQ4vrtBVRc=
Subject key identifier:   30:7A:2C:AF:44:A2:03:84:D6:3C:05:F5:28:90:1A:1E:7A:EE:02:17
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer:       /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial:       019C41A1BF6B03B051A28B99C840C7E6E667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 09:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:45 +0000
Files and hashes:         1: 1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa (hash: Gm5FahEhYqsf3/1qvhcpLeaE1t89Xgh/p3OZKItZTUY=)
                          2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: U6IN9L8MbeDrm8YjOa6Wyh96VGGyU+4MPP4TNPYV5oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:bf:6b:03:b0:51:a2:8b:99:c8:40:c7:e6:e6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
        Validity
            Not Before: Feb  9 09:00:45 2026 GMT
            Not After : Feb 10 09:00:45 2026 GMT
        Subject: CN=307a2caf44a20384d63c05f528901a1e7aee0217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:0c:e1:f8:e3:38:6f:49:37:79:dd:77:19:
                    4a:85:fa:4e:99:23:de:a6:bf:27:44:ed:fd:ae:2d:
                    a0:82:7a:c0:08:d2:e6:fc:67:f3:bd:a5:0d:5a:43:
                    61:27:9c:bc:52:e8:e8:ef:3c:7e:be:b3:90:71:08:
                    92:ec:a4:7d:39:da:81:6a:a3:c9:de:ad:0f:0a:0c:
                    7e:21:e5:96:3a:4f:a7:c4:fc:2e:4a:68:e6:31:9e:
                    67:e6:ca:cf:a7:c7:ee:41:cc:ed:cd:4b:4c:32:e4:
                    43:75:e2:02:83:2d:0d:ff:85:00:b9:10:79:33:59:
                    fa:7c:ba:df:a6:6d:c9:f0:28:21:23:bc:43:2c:db:
                    b3:ce:3d:13:62:2c:7b:2f:3b:cb:40:67:8e:97:6f:
                    c5:70:38:ca:f2:9e:2e:d2:8d:ec:a0:d4:69:f7:ec:
                    3f:f4:85:69:87:53:7b:fd:dd:42:48:48:4d:a7:ea:
                    5a:5c:c4:a3:0e:ff:7c:e5:9a:21:4e:00:9a:df:4b:
                    b1:13:c2:73:b2:ca:97:eb:d4:fd:e4:11:6c:22:d1:
                    bb:b1:77:ad:f4:26:8e:d0:f3:2f:c5:60:4b:87:3d:
                    89:97:fd:63:96:f6:00:24:4b:49:60:31:ac:6e:f2:
                    3b:cd:e6:40:6a:b5:8e:39:1a:ef:41:68:85:ff:32:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7A:2C:AF:44:A2:03:84:D6:3C:05:F5:28:90:1A:1E:7A:EE:02:17
            X509v3 Authority Key Identifier:
                keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:87:98:1f:66:a9:4f:6b:22:56:a6:cc:83:77:9c:0e:82:61:
         af:7a:c2:61:f5:63:97:2b:ee:2a:9c:88:40:7a:56:27:e9:46:
         66:80:79:f8:66:37:d5:53:a0:33:48:25:64:17:16:36:83:d8:
         d4:02:4f:3a:d0:0e:d0:9f:38:14:bd:75:79:6a:7f:6e:27:1d:
         8c:aa:34:f9:72:73:1a:f2:37:3b:1e:70:a4:a9:4f:f6:1d:52:
         b4:3c:67:27:79:78:cc:0e:53:27:66:a0:66:86:d4:f4:01:21:
         dc:49:91:41:1a:c6:27:f1:12:2a:af:0b:46:eb:db:53:7a:da:
         89:12:45:e3:19:25:bd:a8:7c:b6:29:ff:10:37:61:59:ae:8c:
         6d:55:e7:36:f4:7b:0e:14:cb:e3:1a:a7:87:1a:a6:67:a6:59:
         fd:5b:11:7f:ff:3d:5b:4d:f1:ff:7f:0e:93:26:bb:52:47:52:
         89:1e:8d:91:0a:d1:b7:15:b2:9e:5d:bb:98:f5:e9:a8:f1:23:
         42:85:cd:6c:41:09:d2:a1:32:b7:52:3b:f3:4d:15:8f:ed:93:
         94:74:98:79:da:ce:a9:e7:94:4c:f0:5c:12:75:d4:20:6a:70:
         c3:31:56:38:c1:bc:c8:e6:df:99:e1:6c:2e:bf:58:0d:fe:35:
         a0:e6:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:44 2026 by rpki-client