This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File:                     cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier:          fOJnuc1hhrmOy8zY4vq28blgAwVpi+QgPBDmhm0FVRA=
Subject key identifier:   43:44:A9:10:35:8C:55:E1:05:2B:78:9A:D8:F6:6B:04:79:57:D3:1F
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer:       /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial:       019C42102B02DE8DC57E1849887DF9A8D296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number:          1533
Signing time:             Mon 09 Feb 2026 11:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:21 +0000
Files and hashes:         1: 7KqDQ5EQuGmvhILgEAo_YtQ7FJ4.roa (hash: bvJPZ/mgeT5elBDOrMpk/TrY61qYzctI3tuX2E3hfic=)
                          2: Np5-d6pE7_8dHk9RfSdlFSEfs0E.roa (hash: gjFbN+E1antkUUyBnAYdSj98ROmWvKsFE03Y29xogf8=)
                          3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: S47019Q9Qdybgu8MTzC1Fp8DzrPwHCnBoTz7SGrWmi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:2b:02:de:8d:c5:7e:18:49:88:7d:f9:a8:d2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
        Validity
            Not Before: Feb  9 11:01:21 2026 GMT
            Not After : Feb 10 11:01:21 2026 GMT
        Subject: CN=4344a910358c55e1052b789ad8f66b047957d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:a1:39:ab:a8:2b:d9:01:ad:ca:5f:ac:0c:
                    d8:31:3b:0b:a0:16:9f:8c:e8:43:56:e7:5c:82:0c:
                    d1:a5:cb:be:39:15:78:c9:4e:77:36:76:db:ea:25:
                    4d:a3:9e:b7:ed:b4:fa:cb:5d:b2:de:9a:36:cb:ae:
                    17:4c:5e:6a:3f:49:69:18:a6:50:36:57:24:6d:30:
                    6b:12:3e:77:ed:60:d5:85:ba:60:6f:38:a1:6d:6b:
                    84:f6:93:a0:cf:82:87:5c:4c:19:14:54:d5:a0:10:
                    00:15:f7:47:c5:11:97:03:42:60:04:5b:4a:b7:d4:
                    09:c2:a9:3d:2e:f8:df:21:b2:c7:d6:4c:a9:43:9a:
                    46:ac:77:05:78:79:7f:d2:46:8d:90:38:b9:bd:ac:
                    cc:c2:42:fa:09:19:66:7c:80:eb:20:c3:12:f8:93:
                    1a:07:6d:9e:1d:45:60:4c:45:54:6c:74:e9:eb:f0:
                    79:41:7a:68:39:07:0a:20:4e:fa:dc:96:10:4e:e5:
                    d9:97:dd:50:39:47:b4:d6:63:b0:9c:29:72:4b:26:
                    f3:06:1b:24:d8:c9:c1:b3:0a:16:ff:e8:15:60:25:
                    9e:48:2b:cf:9a:a9:24:34:0c:4e:a7:42:26:84:3d:
                    f9:f8:5f:34:0f:aa:90:9f:6c:29:ab:d1:e4:da:46:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:44:A9:10:35:8C:55:E1:05:2B:78:9A:D8:F6:6B:04:79:57:D3:1F
            X509v3 Authority Key Identifier:
                keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:f6:d6:2f:43:4c:ee:12:0e:f1:a6:5d:1c:5f:66:8e:01:
         dc:b9:7c:60:aa:e6:c3:81:81:64:f2:c6:d4:3d:2b:76:53:e8:
         43:0c:d2:cf:39:69:1c:70:c3:08:cd:1c:63:75:c6:ed:6e:8e:
         26:19:e1:e8:94:7a:57:b7:2b:03:f3:dd:37:3d:20:42:be:a0:
         59:a2:f8:06:45:57:82:ff:5f:08:ca:f9:0f:57:34:7e:ae:8e:
         f6:b5:38:a3:9b:c7:21:44:7a:b0:00:f7:b7:6c:e2:59:b8:43:
         5f:61:f7:9a:86:c2:7c:65:91:35:d1:04:31:a2:c7:47:67:50:
         48:b7:1c:28:70:cc:59:d1:02:a7:07:73:a0:2e:3f:46:e6:7f:
         50:85:70:b5:88:a7:03:1d:c7:a2:09:38:76:90:39:b5:67:3d:
         82:3f:be:a6:b7:97:4a:07:63:9e:ac:87:ba:00:5b:c0:ac:df:
         f5:20:c6:6e:c6:d1:9b:56:6d:39:66:54:33:32:9e:b9:8e:3a:
         2b:19:2d:6f:c5:03:9b:86:ce:b2:e4:f3:8d:5f:b3:e6:44:3e:
         f8:b3:a8:aa:3e:51:1e:9d:d4:49:94:7b:b1:f5:80:21:ad:e7:
         1a:00:43:45:12:c7:cb:a4:ec:05:a0:26:a3:37:51:59:6d:94:
         14:2f:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:29 2026 by rpki-client