This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File:                     oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier:          e3ZrOj1txWJg17UfBL3oiSWQjumm0YrgG0pYoSzXx3A=
Subject key identifier:   30:F6:63:54:D9:CE:FB:5A:FC:D7:8F:62:66:89:EE:84:3E:D2:08:5E
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer:       /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial:       019C43C759DB8A680A1E563688596C9C08B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number:          1439
Signing time:             Mon 09 Feb 2026 19:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:03 +0000
Files and hashes:         1: 1-hcdN0H8sYbxU2FJ2TIpbt1wrcs.roa (hash: +oHH/wDqJPdzoao+MeKrBaUm4lv6BOEi7Q0L1v4HB8k=)
                          2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: ywwUf/APDwmORsdxrlBhroP9As9+nwbFIh1EhpdqHvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:59:db:8a:68:0a:1e:56:36:88:59:6c:9c:08:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
        Validity
            Not Before: Feb  9 19:01:03 2026 GMT
            Not After : Feb 10 19:01:03 2026 GMT
        Subject: CN=30f66354d9cefb5afcd78f626689ee843ed2085e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:c9:b5:f6:65:af:cc:64:46:d4:7b:37:67:
                    a1:2e:59:43:4c:d4:63:99:70:bb:e6:99:1e:a1:23:
                    09:7f:d5:49:69:93:78:c7:46:37:fd:8c:81:54:99:
                    e7:9a:2c:05:44:48:c8:13:23:12:73:d4:86:23:3f:
                    ab:85:6b:5f:6b:46:77:9d:c1:6b:23:a4:0e:a5:f8:
                    f0:18:53:1c:a0:44:6b:3b:09:cb:13:9b:fb:da:3f:
                    b8:41:40:a9:c1:c6:e3:cc:d9:ed:4b:3d:40:84:74:
                    bd:f3:95:c5:1c:a7:83:69:00:75:02:a9:18:c4:5f:
                    ad:27:36:ce:b1:df:2b:cc:61:0e:8b:d4:7c:87:38:
                    57:04:3e:cc:82:c5:75:10:2e:8a:5c:c4:c7:84:e9:
                    e9:c6:f5:f6:97:07:4f:60:4b:ca:8f:a7:6d:ce:5e:
                    e1:c0:33:16:42:68:47:12:f2:a1:4f:59:9b:7d:1b:
                    2e:3e:02:78:5b:82:ff:e8:13:cc:23:88:ef:8c:f9:
                    16:04:2a:a6:cc:f7:0e:f3:b1:23:44:b6:40:bd:80:
                    3c:90:1d:1d:c6:d7:31:d2:7d:77:cc:f7:c3:62:6a:
                    5f:0c:21:4b:a8:71:79:6a:50:89:59:12:bc:ae:04:
                    c6:46:8e:36:f2:21:26:c2:29:51:94:c6:b5:1e:37:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:63:54:D9:CE:FB:5A:FC:D7:8F:62:66:89:EE:84:3E:D2:08:5E
            X509v3 Authority Key Identifier:
                keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:58:e9:c0:f0:12:86:11:66:1c:b5:c4:08:0f:07:29:1f:dd:
         f9:38:df:c2:88:e8:38:ac:bc:f9:ca:6e:e5:6d:9c:7a:b5:ec:
         5c:db:93:20:68:ff:d5:ef:9f:5d:f6:2b:cf:07:a5:5b:44:e8:
         06:e1:cb:00:12:5a:2a:1d:ee:9e:33:2a:6e:70:46:b2:dd:db:
         39:de:bd:22:c5:b3:7a:00:47:7d:b4:77:47:07:80:06:77:f3:
         15:73:e1:fb:f1:ce:e2:7a:98:29:08:7c:88:98:8c:38:ef:e1:
         e5:dc:5e:fb:a4:98:09:03:ed:2f:0b:8b:9b:5e:3f:d0:9f:6f:
         b4:0a:57:94:f5:bb:ca:44:12:15:74:bf:0c:19:2c:87:72:7e:
         20:0f:24:cb:4c:4e:86:54:32:4d:e7:9f:ff:ea:d8:bf:02:08:
         49:ce:fd:28:fd:0a:cf:54:4c:79:11:34:08:03:4c:75:f6:16:
         8b:fe:4f:a7:5a:47:c9:c2:5b:95:9e:3c:47:8d:b8:1f:ae:11:
         31:05:ce:b5:67:83:11:e0:98:90:3a:4e:9e:3f:da:8d:f7:d8:
         7a:9d:18:6a:64:b7:9f:2a:b7:44:d2:5e:b6:56:fa:af:13:64:
         d9:9f:f9:e7:70:29:11:27:51:8c:f6:1a:fd:ed:0b:1c:db:46:
         0f:eb:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:09 2026 by rpki-client