This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File:                     OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier:          FX7MBgO63F0CE5DOlzYQKvvrQGC6Ya7KxMr8Xfa8K/M=
Subject key identifier:   06:4F:03:8C:39:55:08:1D:56:D8:8C:D0:E4:E1:9E:B0:22:BA:1C:74
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer:       /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial:       019C420FA1E0E2D73F70057B292AD91E1BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 11:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:46 +0000
Files and hashes:         1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
                          2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: OtzEAY8I293aiAV3MxeYY7OrX74jHpgyelxYMW3ZDU4=)
                          3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:a1:e0:e2:d7:3f:70:05:7b:29:2a:d9:1e:1b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
        Validity
            Not Before: Feb  9 11:00:46 2026 GMT
            Not After : Feb 10 11:00:46 2026 GMT
        Subject: CN=064f038c3955081d56d88cd0e4e19eb022ba1c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:73:64:0d:0e:ef:45:e6:90:a5:70:0e:99:
                    a8:37:60:9a:f9:9f:44:9c:4f:3e:c3:1b:f2:6a:c0:
                    bf:dd:36:cd:f1:c8:df:8c:94:4f:51:67:81:05:70:
                    c8:58:15:fa:6b:43:0d:c1:cc:d1:90:b4:b4:9a:e4:
                    b4:ec:38:6a:82:50:3e:63:81:83:d0:31:ea:1a:db:
                    c4:05:63:66:fd:78:ff:6f:3e:c8:ec:f0:c5:45:eb:
                    a7:4c:db:81:ae:f8:4d:ba:29:90:37:e3:22:83:ff:
                    f4:2f:aa:ed:29:24:1d:76:76:0c:43:59:d8:ab:4d:
                    9f:af:ee:06:59:ba:a5:38:e5:49:62:62:5a:92:4d:
                    83:68:76:cf:dc:5d:d4:78:b8:65:52:fd:58:a2:fa:
                    25:b5:26:5e:d0:00:5c:35:2e:a4:85:1b:c1:35:02:
                    61:ac:b2:ca:c9:79:2b:59:f9:99:60:4b:4b:20:c1:
                    60:4e:34:9f:13:98:8d:76:aa:13:3e:21:d9:9a:72:
                    04:a2:17:4d:1e:27:f8:6a:fe:bc:db:af:10:21:3b:
                    f7:64:53:f1:f8:36:08:8d:da:60:c5:76:7b:72:64:
                    42:19:59:f4:fc:57:06:f4:4a:d5:b1:ac:64:a5:b3:
                    3c:3c:f7:1a:b0:33:e5:34:15:6d:a1:ab:b3:53:95:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4F:03:8C:39:55:08:1D:56:D8:8C:D0:E4:E1:9E:B0:22:BA:1C:74
            X509v3 Authority Key Identifier:
                keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:46:bc:aa:42:7a:fd:c1:6a:4a:70:e1:cb:fd:51:9c:e7:6d:
         1c:2e:d4:a5:7d:b2:b8:d1:58:b0:01:a8:84:55:fc:45:38:55:
         49:43:6d:83:f7:73:40:5d:2e:21:44:77:12:92:8b:69:fc:05:
         53:f9:19:d9:46:eb:c3:dc:a1:b1:07:5c:6e:61:b4:65:1c:35:
         e7:a7:98:aa:36:56:e1:a5:82:0b:7b:91:dc:26:63:30:54:1d:
         a7:9a:73:7a:7f:7d:78:17:d9:65:94:fc:71:a9:8b:8a:5e:92:
         12:53:91:c6:f9:a7:55:8b:6f:6e:9f:05:82:d5:a6:9f:b8:d6:
         82:e8:7d:48:14:bf:78:8f:86:cf:bc:b6:5c:6f:88:1b:96:de:
         03:be:7b:c7:2c:d7:a8:60:68:45:eb:98:c4:cb:a7:d7:d8:be:
         1f:d4:5f:1d:a0:c3:02:36:e9:b2:0e:8b:9b:bb:b0:78:1f:3a:
         69:d4:fe:40:46:f0:45:d6:bf:78:56:dc:cd:1c:68:72:4f:c7:
         3e:37:71:f7:fa:03:36:eb:94:fd:76:80:06:3c:a4:c4:5a:33:
         31:95:b0:ee:28:2b:11:73:e3:6f:32:ff:e9:93:60:8c:05:df:
         ed:6c:84:97:5a:ea:58:c7:26:48:5e:72:b0:02:ad:84:3f:c1:
         9a:88:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:57 2026 by rpki-client