This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          QZXpTiDdvsuAcjJPsN23LBKxpjPvCTgz7J0FsaBqA5E=
Subject key identifier:   C5:65:DF:D0:59:F7:61:7D:EC:E7:8F:05:EB:7B:FF:4E:DD:53:F0:D2
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       019C41D8D3F220803BDBA3D8E9CBC9E4ECFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          1326
Signing time:             Mon 09 Feb 2026 10:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:54 +0000
Files and hashes:         1: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (hash: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8=)
                          2: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (hash: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws=)
                          3: GZDzHGbDx7dfkoatOEujE-QeXX0.roa (hash: rp5gMVM6d0QMtfUx8hE8lYmJBJMynSH2EW1XEZUY1fk=)
                          4: NzRF1KMW-RjrnCQ45Ns__CGotH0.roa (hash: vgtU60XykZYUOdD/K3o47xgLUs91d2y5R24TZ2aLcb4=)
                          5: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: QlCsCw8GU1WfobCa9TRg9t1Ij0y/rsvJJmOFJUrWAwo=)
                          6: hHhTehEBjNf1KtA383HryRHP5GU.roa (hash: 553Jp1J+2Jv+MXIIihnE80X01/4/KUBqAe/MNZh5Kwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d3:f2:20:80:3b:db:a3:d8:e9:cb:c9:e4:ec:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: Feb  9 10:00:54 2026 GMT
            Not After : Feb 10 10:00:54 2026 GMT
        Subject: CN=c565dfd059f7617dece78f05eb7bff4edd53f0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:6f:54:6a:ab:99:82:85:51:b3:6e:ec:68:
                    a5:ed:89:f5:95:5a:97:63:1f:2b:5c:f0:75:77:d6:
                    b7:96:ba:ab:03:5a:a4:17:47:93:d0:3d:d0:77:d3:
                    c7:2e:23:16:8d:a3:fa:bf:d3:a2:07:6f:6a:14:02:
                    72:11:b0:da:55:e5:47:7f:e4:10:2b:b8:47:fa:ac:
                    d5:7e:b2:e8:2d:3c:42:88:09:d1:6a:11:7a:22:0c:
                    2d:3f:f8:96:bd:c1:20:cf:10:1e:69:eb:de:13:f3:
                    c9:f9:d3:40:47:dd:76:39:2c:3c:4a:73:a0:e5:bd:
                    ec:e2:a1:a1:44:06:3c:47:d7:61:4c:a9:68:88:a3:
                    7e:c8:a0:89:44:7a:3c:76:b4:d3:e3:b8:c7:a6:73:
                    b7:17:18:ec:1f:16:96:fe:45:9b:14:e5:03:c8:c9:
                    6a:37:ed:1b:39:00:e1:02:49:79:78:8e:b5:bc:79:
                    66:b2:05:f9:2b:a6:aa:ba:7d:3c:bd:25:4e:d4:08:
                    0b:13:87:41:5b:24:b9:a3:f3:2e:d3:73:25:5f:64:
                    09:66:ce:0a:8f:32:e1:78:dc:1c:30:c4:5b:01:69:
                    dc:21:a9:2f:59:af:a7:03:66:47:2b:a9:64:79:91:
                    e4:1b:3b:1a:98:61:96:93:0c:1f:dd:9b:5d:18:a8:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:DF:D0:59:F7:61:7D:EC:E7:8F:05:EB:7B:FF:4E:DD:53:F0:D2
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:44:6b:57:3d:b9:77:06:b7:24:97:1f:b4:71:ed:00:f8:
         9d:15:10:79:48:81:47:d9:98:c5:93:59:5c:27:01:fd:be:e1:
         7f:b0:b4:fe:c4:89:72:56:c8:d6:da:93:51:56:d7:e0:18:0d:
         c4:a5:15:13:b0:95:e2:d0:9f:d3:cd:dc:ad:fc:e9:d7:d9:93:
         94:44:e8:73:3f:ff:da:4f:e3:a1:2f:eb:69:91:0b:73:d4:f9:
         6f:af:32:b6:f0:0b:2c:41:ca:d5:7c:17:01:bc:61:52:ea:7e:
         d1:42:02:91:29:1c:06:93:79:ba:a5:c7:f3:2d:ad:2f:c0:a3:
         6a:64:2a:71:21:5b:b9:27:d8:57:03:58:47:e6:e7:c4:02:62:
         8a:8d:bb:bb:78:83:ec:9e:b4:1e:fa:df:61:a4:86:87:2b:b2:
         00:bf:9b:82:34:4c:50:c9:bf:c3:73:e6:34:fa:6f:8f:f2:65:
         96:04:85:fd:09:2b:27:c4:7d:22:e5:69:08:8c:05:44:f7:4d:
         1a:d7:43:f1:e5:79:49:eb:e7:8f:63:e3:c4:f6:9b:4e:a7:76:
         a9:50:b2:03:c0:fd:79:d8:20:5e:55:82:69:b2:3c:c3:c8:e0:
         2a:5c:64:be:87:96:bd:1a:cc:61:30:e1:fe:69:c9:f1:4f:0c:
         e1:71:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:28 2026 by rpki-client