This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          Uk0iwb/vZALvB3JNblGIlo414xIMIhEnR+sW9SfscYw=
Subject key identifier:   F8:8B:F2:EF:AD:5E:E8:92:81:E0:9B:F4:2C:68:87:CF:A8:41:C9:BC
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       019C42462F2BE603A6FF1F3209C7C6C0A574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:21 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: vUSonA8vR0GzZtBy7aaJ3KjTbLQHB4O6zOC0fhEoj24=)
                          2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2f:2b:e6:03:a6:ff:1f:32:09:c7:c6:c0:a5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Feb  9 12:00:21 2026 GMT
            Not After : Feb 10 12:00:21 2026 GMT
        Subject: CN=f88bf2efad5ee89281e09bf42c6887cfa841c9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:e6:bd:23:94:7f:67:44:11:34:eb:c2:bb:
                    67:bb:bd:3a:c0:e0:ba:fb:dd:c3:35:d2:c1:ff:24:
                    b4:d4:c4:40:35:0b:7d:3c:99:11:53:1b:82:ce:45:
                    a5:a1:e9:73:0f:99:05:15:b0:f4:b5:6d:34:49:a9:
                    4d:e1:e6:94:b0:99:94:21:0f:23:b3:ac:02:6c:bb:
                    c1:18:c5:eb:8e:3b:bb:fb:62:08:79:35:eb:39:89:
                    bb:3e:ff:a4:27:db:01:99:96:83:bc:60:ce:5d:1b:
                    1d:ef:14:e5:b9:6b:f8:fa:16:35:90:bf:ba:3c:71:
                    c3:8a:5d:6c:1f:cc:a6:b5:a1:b8:c4:bc:c5:bf:29:
                    4b:34:61:74:82:d6:ff:3e:6d:db:45:04:07:70:c8:
                    be:b1:b2:36:0c:85:b9:f2:9c:98:ab:5f:9b:6e:7d:
                    43:14:e1:11:56:2d:88:0d:92:b1:56:24:41:c4:73:
                    55:68:6c:3a:f4:22:ff:08:57:5a:f1:1f:66:96:52:
                    1c:dc:a8:7b:af:bd:8d:b3:79:c1:39:e5:4c:94:c6:
                    3c:0d:cc:d4:7f:01:68:cd:91:2e:62:ee:ae:98:48:
                    b6:3f:c6:c7:80:5f:26:99:3c:89:27:4c:43:fc:c2:
                    d0:62:14:ea:0c:38:6e:68:6c:3b:80:66:2a:23:e9:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8B:F2:EF:AD:5E:E8:92:81:E0:9B:F4:2C:68:87:CF:A8:41:C9:BC
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:00:42:65:c9:d9:8a:80:c1:e8:47:90:49:1a:22:e8:5b:ea:
         70:1e:8e:bb:20:72:c2:c9:f0:b6:91:42:a1:36:77:cc:e5:f7:
         8e:ab:44:0a:0a:f4:8c:da:37:78:de:be:f6:cf:bd:80:3f:b9:
         72:0b:4f:e7:b5:6b:db:40:7c:3f:a5:6e:1e:84:6e:f8:34:49:
         4f:30:7b:45:e0:06:42:ea:13:2a:a7:e8:e7:c0:9d:2f:b7:ee:
         91:3c:75:7f:e4:cb:4c:74:6b:7c:54:d2:a4:dd:9e:e6:e6:2a:
         55:9e:60:73:c4:08:2b:92:cd:51:1b:2d:56:2c:60:6a:7c:56:
         bc:86:fb:36:da:06:3a:3b:38:9d:7e:bf:a4:21:44:6f:64:56:
         a8:2b:54:72:e4:a2:21:7b:87:49:1b:9a:51:cd:46:35:f5:37:
         c2:8a:f5:30:1d:6c:d4:64:ec:b6:7f:8f:1c:21:64:ac:5e:0d:
         52:7e:7e:12:b4:d2:4c:32:49:46:23:1b:a8:de:1d:18:90:0d:
         e4:ed:26:0f:3e:9f:0b:f8:e3:b8:25:ef:19:68:6e:69:43:5f:
         2e:c4:82:f7:78:b4:0a:45:ed:b8:b7:13:3c:03:e7:1d:87:39:
         0a:ab:60:9c:e6:9c:75:ab:81:dc:35:3e:38:a0:ab:73:03:45:
         ab:86:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:06 2026 by rpki-client