This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
File:                     ewOpsg0q_QHZocYo0wG5nIfMWs0.mft (raw, json)
Hash identifier:          OQWNXCQSpxxi5DkWXKw1VoBQ5WbAJbPctChG8tA8eus=
Subject key identifier:   DB:25:63:FC:4D:DC:5D:96:31:7E:EE:79:AE:55:C4:36:80:F6:93:B7
Authority key identifier: 7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD
Certificate issuer:       /CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
Certificate serial:       019C427DCAC47D3A4101CC8D9B856EB62662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
Manifest number:          08A4
Signing time:             Mon 09 Feb 2026 13:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:05 +0000
Files and hashes:         1: 1-CcdGpM9DcuLRpqwbiMu3odID9g.roa (hash: pKdfKPtLXW/w7Hq1cLOFELO9jRtinOQ6Uq5RI4M/bWQ=)
                          2: ewOpsg0q_QHZocYo0wG5nIfMWs0.crl (hash: dnJzL3f4AyDZ7jUAaneNGWVdtBMiTplOv5SlwuBEUzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ca:c4:7d:3a:41:01:cc:8d:9b:85:6e:b6:26:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b03a9b20d2afd01d9a1c628d301b99c87cc5acd
        Validity
            Not Before: Feb  9 13:01:05 2026 GMT
            Not After : Feb 10 13:01:05 2026 GMT
        Subject: CN=db2563fc4ddc5d96317eee79ae55c43680f693b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:ea:61:48:b4:9f:ad:d0:ca:c8:32:de:a8:
                    39:62:cd:4f:b8:45:b5:95:8f:c7:cf:46:fe:ca:f0:
                    54:ca:fa:98:9e:99:44:53:59:21:6c:f6:c1:b1:c7:
                    d4:8c:46:ab:fa:9e:0a:aa:1c:d7:11:ae:31:41:6b:
                    58:29:ad:fa:7c:29:8a:f2:ee:21:e6:71:88:f1:19:
                    70:e9:70:44:06:5a:90:a3:56:1c:51:d0:fb:b6:93:
                    61:be:4a:b0:f7:80:ee:1b:49:b1:be:5c:4e:f8:98:
                    a7:65:0f:e6:ac:26:ad:73:d0:86:be:7b:12:99:32:
                    f0:c4:4c:58:dd:c7:d1:39:22:1f:1f:2c:bc:9e:1c:
                    9f:a2:f6:f4:e0:b5:99:00:6d:5a:03:c8:43:a5:9d:
                    53:3b:14:a6:e4:4a:a9:32:8c:ed:66:c4:96:d0:c9:
                    65:85:b4:fc:e0:25:9e:4d:02:f5:a5:69:64:15:19:
                    54:90:eb:cd:8f:c5:c1:41:64:82:d3:5b:3f:d5:b0:
                    e8:c2:51:73:43:69:d9:d2:10:b0:12:39:9f:42:4c:
                    bd:b1:67:28:79:35:91:f4:d2:9d:1e:06:ff:75:29:
                    df:56:4e:92:da:0e:dc:ad:9e:2d:21:94:0e:04:7c:
                    a3:46:3b:ea:c3:4e:63:4b:f4:70:48:fa:bc:9f:50:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:25:63:FC:4D:DC:5D:96:31:7E:EE:79:AE:55:C4:36:80:F6:93:B7
            X509v3 Authority Key Identifier:
                keyid:7B:03:A9:B2:0D:2A:FD:01:D9:A1:C6:28:D3:01:B9:9C:87:CC:5A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewOpsg0q_QHZocYo0wG5nIfMWs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/564775-361a-4729-b953-a7d19ec07f13/1/ewOpsg0q_QHZocYo0wG5nIfMWs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:86:5f:08:11:c0:b8:0d:86:f3:7c:92:14:e5:6d:4c:29:
         a1:8b:6c:b1:5a:b4:71:0b:ee:eb:a0:60:38:71:07:b1:6c:40:
         1c:d5:63:de:02:89:91:a8:5c:83:25:fc:39:a6:04:4f:07:c6:
         10:40:c5:99:d5:f7:99:96:b6:93:3d:16:7f:9b:18:8b:85:ad:
         0b:31:db:8a:0e:ae:f6:22:e7:1b:38:29:c5:5c:cc:17:18:31:
         b2:ae:f3:48:b2:7e:b5:0a:3d:6b:97:e8:33:c0:d2:96:00:61:
         5c:6f:bf:bf:27:4c:9d:b9:ed:f8:b5:a6:cc:30:11:1e:7d:58:
         d3:61:ef:53:14:5e:41:64:23:7c:20:fe:ce:4c:12:28:ce:bc:
         ae:59:5b:d5:41:bb:f2:86:b2:cb:cf:8b:90:60:6a:72:49:d5:
         ec:a8:3d:97:37:2d:67:f4:5c:c6:88:19:1b:16:76:40:22:8d:
         4c:f0:70:0a:87:ad:9e:9b:ad:f8:4f:8b:63:3b:12:53:46:4c:
         4d:a0:cc:d6:23:ac:8f:51:29:9d:f2:db:f4:30:f9:83:09:38:
         9e:e9:c5:84:62:20:5b:3d:14:ef:e0:91:93:d1:88:c9:85:b0:
         cf:fe:2d:36:71:48:0f:d1:4c:0b:a6:e0:62:fa:10:c3:7b:03:
         d8:6c:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:00 2026 by rpki-client