This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File:                     oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier:          zOUYE8AQC/pXvQFuQ5RtyZfR4mYhDSQZqtqtKhs9kxc=
Subject key identifier:   85:F2:E2:A4:14:7B:47:15:29:BA:02:09:D0:8E:DF:2E:80:E3:56:16
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer:       /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial:       019C42B4435725DCE71B8ED2447260283F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: 4G9wBnQj2bLIhwU-J0N7Nhw1T6o.roa (hash: Ss9C5TAkahNNPv2NrvJMx+wEmDF2hJNXCum/fvM8j7Q=)
                          2: Vl6FMo5wU6v03xk_-33ZrOY3oKg.roa (hash: kIWRHZYG1x8ZuZJSnfYu/2Gl4pYaKJvwzf9u/k0+4/Y=)
                          3: eT2IWPcNjqqYvSRa6WeHp3LmJtA.roa (hash: fIsFP2V7Kpl6K2IEcKVfzsXOwzj5Bhe8+tMHJi7fIAI=)
                          4: fDPuMYjL7iwuQzRHQw3ok372mfU.roa (hash: zWt5a5APl7Cb8l+lYNIvqdjQJV2PNl8C2Gw5qS4KES8=)
                          5: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: 7YW6n/7d3xtdYFhjnHKr21pn6wRAooIkH38ddTypU+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:43:57:25:dc:e7:1b:8e:d2:44:72:60:28:3f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=85f2e2a4147b471529ba0209d08edf2e80e35616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:35:e2:3a:87:80:4c:e9:3a:01:8a:e9:bb:
                    25:55:49:2d:56:20:ac:15:e0:a1:ce:ba:2c:7e:33:
                    b3:36:57:b5:88:f8:83:d7:db:15:fe:d3:ea:a0:2f:
                    14:b4:37:d4:1c:59:c4:ee:2d:a6:8f:7d:93:fc:cc:
                    a8:99:eb:cd:09:70:82:a7:07:94:f6:96:bc:de:e3:
                    4e:d6:ce:aa:d3:b5:85:d1:a7:a7:af:78:9b:90:7e:
                    69:62:bf:6e:91:53:8d:6b:29:fe:06:8a:2f:c5:b5:
                    21:3e:6e:3f:c5:43:1b:81:7f:38:e8:54:fe:9d:0f:
                    8c:28:2a:3b:30:3d:b0:ba:63:8e:3d:70:4f:48:48:
                    ef:0a:52:a1:4f:31:f8:d0:f4:cf:cf:83:ea:62:e6:
                    9d:09:26:d6:0a:10:99:95:87:84:1d:9b:04:b4:1d:
                    c7:d0:4b:2b:75:9e:5b:56:d8:a1:f3:f1:6f:2d:d4:
                    7a:84:fc:89:8e:24:0c:0c:8b:2a:72:10:fe:6b:c5:
                    3e:f5:93:23:ff:8d:c5:04:81:d4:11:d6:ab:6a:8b:
                    d0:71:a0:71:70:f0:29:5f:c0:31:24:b8:d4:ce:68:
                    74:24:4c:fe:e8:8c:84:8f:aa:27:7e:16:77:ea:d7:
                    47:25:13:2a:a1:6c:37:59:bd:07:a2:a9:e0:bc:80:
                    07:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F2:E2:A4:14:7B:47:15:29:BA:02:09:D0:8E:DF:2E:80:E3:56:16
            X509v3 Authority Key Identifier:
                keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a7:dd:83:b0:9e:63:9c:c5:28:19:6b:37:f5:24:dc:cc:d9:
         47:44:0d:f6:fc:a0:ca:b0:ab:8d:ec:6e:74:21:a3:ec:ee:05:
         4d:21:47:9d:96:38:d7:68:25:47:24:37:22:2b:d3:04:db:be:
         2a:25:7d:0a:71:35:2f:13:10:b8:1a:d4:c4:dd:c5:32:d6:ba:
         43:7d:71:64:ef:42:99:d6:3f:91:aa:7b:3c:2b:34:44:d4:2a:
         52:6e:27:0d:96:0a:e1:7d:ab:13:b2:5a:1b:b9:0f:f2:33:a5:
         92:0c:78:d7:b6:06:48:ba:fb:ed:b8:fa:14:c7:54:2c:4b:c8:
         8c:b3:5e:b8:74:d5:65:08:16:24:16:d4:b1:93:89:a6:7c:09:
         11:40:30:29:87:98:4c:82:18:00:4a:91:21:c7:c2:df:e4:c8:
         95:30:c8:b3:fb:6c:e2:0b:7b:aa:69:37:2e:c3:41:55:9a:df:
         84:71:d3:1f:d3:7f:31:0d:cf:aa:7c:60:5e:2a:78:af:1c:33:
         14:29:07:65:e0:bb:1b:6d:56:9f:67:ec:85:04:78:40:2a:7f:
         9e:7b:4e:0f:05:8f:d8:c6:c0:68:68:0d:b3:c5:4f:a8:7a:7d:
         c1:5c:36:84:d7:d6:9c:d2:ee:89:5f:75:d8:be:a4:d7:0c:67:
         49:eb:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:04 2026 by rpki-client