This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          AxAR9D4ZDEbtN4++bwHfVSFB1zurOv55maRYMKiQNwU=
Subject key identifier:   DA:FF:D8:17:F3:5E:CD:57:1F:37:62:7F:E1:14:7E:F3:CC:C3:25:B0
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       019C4434D93C5C13C7579C6CD7C214C94841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 21:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:39 +0000
Files and hashes:         1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
                          2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
                          3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: EnaA9EUfgG/nVtw0FLgN5ro2t57J1XfbK73lkonoOYI=)
                          4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d9:3c:5c:13:c7:57:9c:6c:d7:c2:14:c9:48:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: Feb  9 21:00:39 2026 GMT
            Not After : Feb 10 21:00:39 2026 GMT
        Subject: CN=daffd817f35ecd571f37627fe1147ef3ccc325b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:3f:8e:e1:3a:14:05:ee:e9:06:68:fc:6c:
                    f4:73:8e:56:45:61:b9:05:24:3b:50:a5:1c:eb:5f:
                    47:8d:d8:a6:bd:5b:f5:51:b9:da:39:57:19:f5:30:
                    c8:0d:3c:86:45:97:bc:1a:61:13:b9:1e:c6:1d:25:
                    c7:76:ea:9a:08:da:29:8c:8f:c8:65:3f:38:73:33:
                    e9:c9:12:ba:c9:e6:e8:11:43:cc:c0:e0:18:7f:49:
                    86:a9:47:0b:6b:8b:8d:0f:f7:61:60:b0:53:69:77:
                    9c:c0:9c:24:27:89:c9:84:8b:42:9a:a7:a6:70:00:
                    42:21:b8:6d:96:f8:51:ce:de:9b:2e:10:c4:70:08:
                    3c:55:66:d1:0c:cb:d8:9b:a1:e8:75:d2:54:88:39:
                    cc:24:89:15:39:f6:1d:69:4a:14:7b:42:56:28:e7:
                    08:03:43:b2:1d:2c:87:eb:09:ac:0c:69:73:01:96:
                    c2:f9:c3:63:5a:99:39:bb:81:95:93:36:28:7e:c5:
                    13:a9:d9:9b:bc:67:5c:9b:e7:60:a7:3d:48:af:73:
                    c4:54:82:f4:1f:15:43:22:5a:d3:ba:30:f9:e9:e9:
                    a4:8a:7b:85:c3:1a:87:07:9c:1d:6a:d4:ec:5f:1d:
                    29:4d:45:ca:56:a7:6a:7c:9d:f7:69:80:a0:e6:dd:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:D8:17:F3:5E:CD:57:1F:37:62:7F:E1:14:7E:F3:CC:C3:25:B0
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d0:8a:92:a9:ea:e4:b1:2d:93:6b:5c:7f:4a:59:92:51:9a:
         28:c1:1e:03:f1:23:03:d3:92:0e:77:d7:10:ea:c8:a7:fa:a8:
         3a:23:3a:0a:8d:03:24:6d:dc:ad:00:11:eb:e8:50:04:5c:2f:
         4d:b9:df:9e:41:48:c9:73:6d:c7:0d:01:c1:45:bd:75:58:10:
         9f:d8:71:17:03:41:8d:61:27:c8:3a:be:1d:86:ba:67:6c:ce:
         1e:4e:82:0e:b0:e2:c7:4d:83:75:c9:e3:5f:6b:9d:83:3e:1a:
         47:e7:23:a4:ec:24:79:56:78:87:5f:82:c4:11:a4:f4:ca:ef:
         a9:e1:6c:00:3a:a6:67:0e:e6:30:18:7c:39:b7:bc:32:d2:8d:
         ca:7d:7a:f0:01:b2:ba:e1:76:23:c5:18:27:b0:9b:e0:fb:3a:
         cd:b1:d6:38:f5:f6:f2:ef:a2:17:36:a3:8f:ee:b7:8b:54:18:
         dc:e3:b0:7a:f8:5f:62:0c:14:69:59:d2:c0:f2:64:85:09:16:
         23:e0:77:56:7d:88:e4:fa:d1:8a:1b:8a:93:75:e0:52:17:3b:
         21:97:e4:5e:a8:ff:f6:ac:b0:c2:34:a6:19:0d:9b:e2:11:fe:
         db:29:d9:94:11:a8:15:b0:70:aa:f0:2f:30:1b:5c:15:bb:af:
         de:e6:79:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENNk8XBPHV5xs18IUyUhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi
YjZkODAwHhcNMjYwMjA5MjEwMDM5WhcNMjYwMjEwMjEwMDM5WjAzMTEwLwYDVQQD
EyhkYWZmZDgxN2YzNWVjZDU3MWYzNzYyN2ZlMTE0N2VmM2NjYzMyNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd4/juE6FAXu6QZo/Gz0c45WRWG5
BSQ7UKUc619HjdimvVv1UbnaOVcZ9TDIDTyGRZe8GmETuR7GHSXHduqaCNopjI/I
ZT84czPpyRK6yeboEUPMwOAYf0mGqUcLa4uND/dhYLBTaXecwJwkJ4nJhItCmqem
cABCIbhtlvhRzt6bLhDEcAg8VWbRDMvYm6HoddJUiDnMJIkVOfYdaUoUe0JWKOcI
A0OyHSyH6wmsDGlzAZbC+cNjWpk5u4GVkzYofsUTqdmbvGdcm+dgpz1Ir3PEVIL0
HxVDIlrTujD56emkinuFwxqHB5wdatTsXx0pTUXKVqdqfJ33aYCg5t2wvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr/2BfzXs1XHzdif+EUfvPMwyWwMB8GA1UdIwQY
MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt
N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1
LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNCKkqnq
5LEtk2tcf0pZklGaKMEeA/EjA9OSDnfXEOrIp/qoOiM6Co0DJG3crQAR6+hQBFwv
TbnfnkFIyXNtxw0BwUW9dVgQn9hxFwNBjWEnyDq+HYa6Z2zOHk6CDrDix02Ddcnj
X2udgz4aR+cjpOwkeVZ4h1+CxBGk9MrvqeFsADqmZw7mMBh8Obe8MtKNyn168AGy
uuF2I8UYJ7Cb4Ps6zbHWOPX28u+iFzajj+63i1QY3OOwevhfYgwUaVnSwPJkhQkW
I+B3Vn2I5PrRihuKk3XgUhc7IZfkXqj/9qywwjSmGQ2b4hH+2ynZlBGoFbBwqvAv
MBtcFbuv3uZ5Cw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:50 2026 by rpki-client