This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          IEhaMTH5V5OMkGXRv49zqqgD5vidm9RBRGS5I7zCRjo=
Subject key identifier:   A7:66:05:C7:F5:60:3C:7B:C2:28:2D:15:BC:A1:AC:C6:DE:19:9B:32
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       019C42468D796807ED86F580C5484F76C7A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:45 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: 3IYgA+O+mQ0T5gdjGa9J5XOoN35ANRzt713yA95c4d0=)
                          2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:8d:79:68:07:ed:86:f5:80:c5:48:4f:76:c7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Feb  9 12:00:45 2026 GMT
            Not After : Feb 10 12:00:45 2026 GMT
        Subject: CN=a76605c7f5603c7bc2282d15bca1acc6de199b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:92:89:81:03:48:e9:39:99:cc:31:3c:a2:
                    eb:b2:42:3e:55:a5:c5:3b:99:22:63:20:91:59:8a:
                    90:a4:71:6e:29:9f:e4:a8:f2:d6:c4:5b:e5:8c:8c:
                    f3:9b:bf:0d:fd:01:bd:4a:05:c2:9e:dc:07:7b:a9:
                    c3:9c:16:2c:26:98:3c:e8:64:59:ff:94:6f:8c:57:
                    eb:fd:1e:e5:3a:b7:bb:c8:07:db:d9:68:3f:dd:07:
                    c8:10:77:87:23:64:17:34:97:a9:82:7e:17:9f:58:
                    36:67:7c:84:47:87:5b:01:ab:96:f0:c2:fa:63:92:
                    5f:be:d5:62:2d:b3:ea:86:fd:bf:47:bd:28:86:ad:
                    02:32:39:70:b5:3a:b8:ef:49:74:21:41:74:c2:36:
                    9f:83:8f:7e:71:c7:58:97:4b:85:2b:13:a9:04:c3:
                    88:38:95:73:3a:41:6e:0f:7e:77:e6:55:5f:4c:82:
                    32:0a:f3:c4:54:03:0c:bd:70:fa:67:12:1b:b3:a5:
                    02:e5:7f:02:8d:96:6a:9e:da:63:dc:e8:53:9f:b1:
                    88:48:46:43:67:d5:85:63:d3:bd:d9:16:89:41:89:
                    83:60:b8:8b:c7:41:26:cb:48:f8:0b:af:b7:0a:79:
                    d2:3a:bc:a8:77:56:f1:56:18:f2:0e:03:66:d6:e8:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:66:05:C7:F5:60:3C:7B:C2:28:2D:15:BC:A1:AC:C6:DE:19:9B:32
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:0c:d8:f1:5f:78:30:f9:ba:28:fd:c0:8b:8d:c5:9b:c8:
         c3:d1:65:29:7e:23:6c:f1:e0:49:7c:d7:f4:3d:bc:fc:b6:8b:
         b2:c6:0f:fa:22:90:ff:0c:72:84:e6:f5:a1:e0:00:25:96:f4:
         b0:81:9f:8a:20:8f:41:b7:f8:a5:e8:44:ce:b1:2c:67:76:79:
         bb:77:2f:57:0a:82:b9:c2:01:62:66:28:5d:38:07:61:d2:70:
         c7:a0:b6:c3:72:44:b9:1d:1d:00:66:4d:f2:22:d7:54:70:8b:
         66:de:a0:33:52:e2:cc:63:7f:17:6b:d5:3e:19:d6:68:e8:05:
         eb:57:26:75:2c:d7:2f:f5:f9:75:b6:15:bf:f4:f6:c8:c5:62:
         e2:97:35:21:e0:8a:f7:0e:e4:2e:73:52:d6:c9:ca:70:c8:63:
         e8:6c:c8:1c:96:b8:42:5c:69:d1:18:c7:73:cc:29:41:e9:f8:
         94:e4:b4:68:ed:c2:ed:c5:eb:c5:ca:07:8a:73:0e:82:c8:9c:
         19:4a:2f:5d:4b:f6:3e:1f:06:07:02:d1:6d:7f:0b:4e:73:ad:
         3d:24:d3:ab:aa:d9:45:cf:8e:cc:60:3d:09:ce:7d:23:c9:e0:
         f1:47:86:b8:8f:93:7d:51:09:2a:cb:e9:30:2f:b0:e3:5b:76:
         63:b5:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:37 2026 by rpki-client