This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File:                     O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier:          N2NAFgXQym2GnqNpAonfMK7FAokpaS0RpbQHl7+R6HQ=
Subject key identifier:   F7:A5:07:D7:1F:86:E5:4E:94:C6:58:8E:FF:E1:04:05:19:5D:9A:27
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer:       /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial:       019C1D95014753CEB4B8942BD5F84768F8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number:          17FE
Signing time:             Mon 02 Feb 2026 09:00:30 +0000
Manifest this update:     Mon 02 Feb 2026 09:00:30 +0000
Manifest next update:     Tue 03 Feb 2026 09:00:30 +0000
Files and hashes:         1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: wDBCiRrWmgtA47WZNUOBufkNvgxlJSrcG1EhHedGDsY=)
                          2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
                          3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:95:01:47:53:ce:b4:b8:94:2b:d5:f8:47:68:f8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
        Validity
            Not Before: Feb  2 09:00:30 2026 GMT
            Not After : Feb  3 09:00:30 2026 GMT
        Subject: CN=f7a507d71f86e54e94c6588effe10405195d9a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:3c:38:aa:6a:a2:82:b2:96:d5:c9:57:28:
                    06:70:d6:d7:ae:81:53:bf:a0:2f:5d:da:22:25:ae:
                    29:15:db:1e:79:8b:e1:4d:34:47:59:af:67:63:a4:
                    72:85:99:da:98:0f:83:3c:c4:f8:96:81:4c:57:b3:
                    a2:75:b1:99:3c:c9:14:40:a2:f3:b2:ea:92:1d:45:
                    b0:ef:d8:b2:72:58:0b:8c:83:f1:0b:50:4f:ff:20:
                    73:32:3e:54:94:bc:c4:d8:40:cc:13:73:fa:30:4a:
                    a6:21:c5:da:ad:84:b5:70:18:64:0c:3e:be:78:71:
                    39:b0:de:ed:53:7c:95:d7:88:68:5c:a2:2e:ab:fa:
                    88:47:7f:0d:69:29:58:56:ff:37:0b:17:e2:81:06:
                    bc:98:c8:28:1f:fb:b2:c6:28:c5:8b:0f:6a:b7:4a:
                    03:27:14:b8:b9:60:ba:ff:f1:8e:39:0e:a7:95:b0:
                    50:f7:b3:d7:83:1b:9d:55:0d:29:be:72:5e:18:c3:
                    1d:a5:4b:e7:b1:fd:ac:7a:f6:89:e7:a6:a0:19:02:
                    78:c5:72:8b:8c:a4:de:6f:2f:84:43:0f:d9:c5:44:
                    6d:35:70:6f:dd:b7:66:ff:42:e8:ff:a0:21:78:79:
                    35:cc:e4:86:09:33:e0:d3:7b:93:80:8c:89:f1:10:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A5:07:D7:1F:86:E5:4E:94:C6:58:8E:FF:E1:04:05:19:5D:9A:27
            X509v3 Authority Key Identifier:
                keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:85:17:c4:f3:ad:68:63:e0:c2:5a:8f:3b:91:1e:69:cd:
         7b:1a:d6:cb:25:27:f0:24:b6:f8:27:b4:c7:c3:ae:8a:0d:03:
         68:e2:cb:65:16:69:29:5f:32:fc:81:7e:15:d7:5d:f3:be:28:
         e3:78:69:40:28:eb:93:0a:1b:b2:92:f1:a0:54:b7:2c:a5:ae:
         b9:6c:17:0a:59:0d:bf:d3:c6:1a:00:e4:c9:d9:17:ec:49:81:
         0f:16:66:0f:b4:e5:86:6d:3f:13:45:0b:5d:ca:77:29:24:70:
         85:ee:d9:87:71:29:b6:97:c8:dc:df:63:ec:fb:db:53:c3:d5:
         6e:7c:89:2a:fe:93:fa:74:7b:45:0c:fc:b1:0a:01:4e:b4:16:
         b8:c7:c3:16:57:b2:8f:0a:de:e7:84:c3:79:e7:9e:22:14:a2:
         5c:9a:da:d5:0e:c9:10:e6:1c:ef:fb:68:6c:66:39:3d:4d:8a:
         92:29:23:0f:45:e7:25:1a:3e:d9:e7:ca:5d:de:fb:db:ad:6c:
         5b:1e:0e:67:d3:e4:f6:b9:19:09:a6:02:b3:f0:aa:ab:50:b2:
         a7:10:a0:a9:4b:f2:a8:d9:a7:36:77:d6:03:d3:38:b8:ca:a6:
         eb:89:5a:4b:b6:85:75:d9:5a:80:ce:aa:82:68:a7:51:26:43:
         64:74:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:46 2026 by rpki-client