This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File:                     9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier:          mSY933zDt6HFvid4KpOfzjciOwfvy6S5lCW1+V/PGHM=
Subject key identifier:   4F:87:40:BD:10:B0:3C:CB:A8:7B:B6:65:C2:0E:66:22:BB:3F:40:AD
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer:       /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial:       019C42EB9C50E4A0463B5A5F637C98718577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number:          170D
Signing time:             Mon 09 Feb 2026 15:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:03 +0000
Files and hashes:         1: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: BOZlmdNFE2Woll2MovYvljgdmU2Zyja57nv+hGUdsNA=)
                          2: arliBhhCazfqYB3QIekl14-Z-Tc.roa (hash: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:9c:50:e4:a0:46:3b:5a:5f:63:7c:98:71:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
        Validity
            Not Before: Feb  9 15:01:03 2026 GMT
            Not After : Feb 10 15:01:03 2026 GMT
        Subject: CN=4f8740bd10b03ccba87bb665c20e6622bb3f40ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:89:a4:98:ac:83:dd:28:7c:14:8f:e3:b8:
                    8e:92:22:40:17:85:c8:1e:7f:74:49:93:44:62:d2:
                    ed:46:1c:d4:30:8a:bd:aa:4f:cd:99:ee:3a:52:15:
                    23:e0:23:33:96:ae:0a:f4:dc:d0:14:00:e4:f4:46:
                    14:c5:74:d6:d7:9d:f1:0c:49:85:7a:aa:ee:03:8c:
                    97:4e:17:3e:69:c4:68:69:a8:80:df:94:89:86:e8:
                    d8:76:7c:16:e3:a8:96:8e:a8:6f:41:86:43:83:69:
                    6c:37:f6:50:32:b1:bb:80:cf:39:1a:16:98:7a:e3:
                    ac:bc:8b:9a:56:0d:05:1e:49:13:5b:83:36:91:7c:
                    a6:6b:96:f0:6a:8a:10:f6:84:c2:46:68:05:89:a5:
                    f2:38:54:1d:9a:21:bf:2e:d1:96:c0:71:3d:89:d9:
                    fd:8e:e0:c7:84:59:93:ca:35:8a:09:35:84:37:97:
                    ee:be:fa:cf:7f:60:f0:02:50:32:3a:f8:f0:4a:30:
                    76:8c:37:67:84:d8:51:20:8a:ca:d4:6c:a1:f3:ae:
                    66:37:12:cd:96:56:44:11:36:a9:e7:3f:29:79:c9:
                    0a:ab:f7:a0:a6:14:1d:47:b6:44:50:d2:d9:48:5a:
                    bb:6e:8b:0a:5d:4f:41:8d:cf:fb:94:6a:41:62:f3:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:87:40:BD:10:B0:3C:CB:A8:7B:B6:65:C2:0E:66:22:BB:3F:40:AD
            X509v3 Authority Key Identifier:
                keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:ad:e1:71:34:63:c9:bc:80:db:a8:e8:73:1c:0f:95:e0:
         10:7d:2d:78:a6:ed:87:6e:6c:e0:c3:73:67:b5:79:6f:77:fa:
         76:9f:3e:6a:b0:f5:dc:d4:e3:25:11:fc:92:90:e0:84:a9:f4:
         55:36:46:5d:0d:87:99:cc:65:62:ca:5f:05:4b:72:f7:6b:f9:
         52:ce:89:35:7f:8d:a9:34:39:00:31:04:5d:4c:be:82:94:e2:
         fb:69:e1:6c:98:b9:47:86:28:c1:e3:40:e5:ff:10:7f:a7:bf:
         5b:b1:b6:ca:7f:3f:e9:ad:a5:34:5b:0f:24:ba:d0:c0:de:0a:
         de:f0:31:2b:b0:19:dc:f8:26:b6:0a:11:00:68:07:0d:c7:25:
         2a:f3:74:7b:6a:ab:45:57:91:b9:92:fc:0e:57:60:67:0e:19:
         51:a3:31:24:8d:37:4b:89:3c:13:87:7e:17:8a:92:47:4b:36:
         b6:cd:13:93:2f:f4:fa:b4:c8:39:97:dd:94:67:47:63:c3:74:
         dc:00:ee:06:be:39:f9:0a:0f:d2:33:f7:19:f2:cd:b0:8f:5c:
         60:c8:f5:a9:9c:88:1e:05:9b:81:05:e1:97:51:17:e4:b6:56:
         71:37:ba:b2:98:57:4b:f1:d2:9d:ce:77:86:a4:7e:92:17:00:
         03:19:8f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC65xQ5KBGO1pfY3yYcYV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0
NWIyNmEwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD
Eyg0Zjg3NDBiZDEwYjAzY2NiYTg3YmI2NjVjMjBlNjYyMmJiM2Y0MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq+JpJisg90ofBSP47iOkiJAF4XI
Hn90SZNEYtLtRhzUMIq9qk/Nme46UhUj4CMzlq4K9NzQFADk9EYUxXTW153xDEmF
eqruA4yXThc+acRoaaiA35SJhujYdnwW46iWjqhvQYZDg2lsN/ZQMrG7gM85GhaY
euOsvIuaVg0FHkkTW4M2kXyma5bwaooQ9oTCRmgFiaXyOFQdmiG/LtGWwHE9idn9
juDHhFmTyjWKCTWEN5fuvvrPf2DwAlAyOvjwSjB2jDdnhNhRIIrK1Gyh865mNxLN
llZEETap5z8peckKq/egphQdR7ZEUNLZSFq7bosKXU9Bjc/7lGpBYvOPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+HQL0QsDzLqHu2ZcIOZiK7P0CtMB8GA1UdIwQY
MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt
OTQwYzhhMGZjNzcwLzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw
LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6at4XE0
Y8m8gNuo6HMcD5XgEH0teKbth25s4MNzZ7V5b3f6dp8+arD13NTjJRH8kpDghKn0
VTZGXQ2HmcxlYspfBUty92v5Us6JNX+NqTQ5ADEEXUy+gpTi+2nhbJi5R4YoweNA
5f8Qf6e/W7G2yn8/6a2lNFsPJLrQwN4K3vAxK7AZ3PgmtgoRAGgHDcclKvN0e2qr
RVeRuZL8DldgZw4ZUaMxJI03S4k8E4d+F4qSR0s2ts0Tky/0+rTIOZfdlGdHY8N0
3ADuBr45+QoP0jP3GfLNsI9cYMj1qZyIHgWbgQXhl1EX5LZWcTe6sphXS/HSnc53
hqR+khcAAxmP8Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:27 2026 by rpki-client