This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File:                     O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier:          XaNECmki4wcr3YsaE7OJEf+KDk9yleZICpo4Kt/CpSc=
Subject key identifier:   A5:DA:C5:D3:F7:D4:6A:3B:D8:33:83:44:29:07:50:16:79:D1:7B:65
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer:       /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial:       019C420FEE67A4B6C193314AC6CA4D20B75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number:          14
Signing time:             Mon 09 Feb 2026 11:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:06 +0000
Files and hashes:         1: 3DUSLYibsJXd_Fv_mFQGMWyoD3E.asa (hash: 217ApHrz+ZFZBxQTuwBPGHegzD2Mli8dYOKOyw3Mk20=)
                          2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
                          3: GOh_vF1-6BQUJEcQX8oRJkKylB8.roa (hash: jR1wVIFs5Egh3AaDFo20t6uR94VmalgAodS+SYxaL4I=)
                          4: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: VVmB0ofHxRWDxHzLlg1c3a4maiVG4KR6wFxWR+SbS6Q=)
                          5: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:ee:67:a4:b6:c1:93:31:4a:c6:ca:4d:20:b7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
        Validity
            Not Before: Feb  9 11:01:06 2026 GMT
            Not After : Feb 10 11:01:06 2026 GMT
        Subject: CN=a5dac5d3f7d46a3bd83383442907501679d17b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:25:d8:94:aa:ee:9c:b1:1f:4a:91:a6:b4:
                    88:0f:48:b7:d8:01:0f:e7:58:45:7d:e4:33:fd:55:
                    a3:7d:84:71:55:be:d1:7e:11:f6:ab:9a:9c:5f:bb:
                    fc:ad:7b:e2:f1:df:39:c3:ac:14:da:03:1e:73:16:
                    d5:28:eb:08:d2:c5:28:64:ba:9f:c6:30:f0:f0:4e:
                    10:53:02:cd:61:56:21:d1:67:db:41:95:0b:dd:5c:
                    1f:5e:66:b7:ec:64:27:5b:c7:a5:ee:02:5c:a4:20:
                    3f:b0:f5:f1:c3:7c:08:ad:e2:7a:bf:66:21:69:8e:
                    5e:67:33:c0:2b:6a:5a:4d:54:d4:f4:72:e6:ed:f3:
                    ce:3c:7d:53:9f:bd:ad:2d:60:ed:5e:c7:38:1f:e4:
                    e3:13:b8:f2:74:d6:0c:3e:5c:85:b8:2e:0c:9b:f9:
                    4b:0b:46:61:f3:02:f5:ed:d1:09:55:95:23:69:bd:
                    e8:b5:11:74:4e:6d:e7:df:dd:5c:cc:65:73:d9:81:
                    05:22:2d:77:be:54:c5:33:5e:2a:49:fe:16:c0:12:
                    fd:da:d6:11:9c:5d:ae:a7:db:c0:91:c5:d2:fa:1a:
                    f8:da:71:4e:24:97:20:ac:e1:ce:cb:c9:fa:68:24:
                    3e:81:05:9d:1e:2e:d7:e3:26:a5:30:e8:8b:5e:8a:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DA:C5:D3:F7:D4:6A:3B:D8:33:83:44:29:07:50:16:79:D1:7B:65
            X509v3 Authority Key Identifier:
                keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c3:1a:4a:9a:63:38:79:ed:7e:b8:58:9f:e4:b5:d3:3c:17:
         bb:3e:8c:aa:b1:8a:37:12:05:f3:b7:9f:c1:46:29:31:e1:6b:
         36:a9:5d:8d:04:2d:fb:2a:44:6d:71:06:74:3e:7c:19:9a:2c:
         b4:82:21:22:ff:17:89:8e:03:36:8a:14:e9:7a:30:02:f4:9b:
         cc:65:5f:2e:34:a7:ff:46:d4:d6:1c:3b:54:1c:a2:f9:33:c5:
         95:6b:15:ae:09:47:95:9e:bc:31:00:90:bd:1d:75:6f:71:61:
         cb:57:7b:04:66:61:d3:7a:1d:9d:6d:4d:ea:e3:30:95:ad:63:
         17:af:f1:ed:bc:c9:e7:3c:cc:5f:eb:eb:2a:f1:03:03:74:28:
         36:ed:79:c2:17:0a:a0:2a:1d:44:2e:5f:0f:c0:17:73:35:c7:
         fb:a8:a7:7f:5f:72:95:0b:59:f2:9f:12:39:3d:9d:41:e6:66:
         68:83:20:c4:6a:60:16:27:f1:b0:68:f4:b1:9e:68:93:e8:91:
         99:89:ae:90:1f:b3:12:6b:60:1e:a2:f7:8b:81:98:cc:da:79:
         48:ab:8e:77:31:63:e5:25:14:be:07:62:28:1a:a1:b6:21:ae:
         dc:d1:ee:30:d0:c4:6c:b8:ec:fb:fb:c6:4b:18:8b:66:80:e7:
         16:16:cf:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD+5npLbBkzFKxspNILdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTM4NjcyODQxMzJlZWNjZDU2ZTZiMTU1Y2Y3ZjYyN2Qy
NjRmNDAwHhcNMjYwMjA5MTEwMTA2WhcNMjYwMjEwMTEwMTA2WjAzMTEwLwYDVQQD
EyhhNWRhYzVkM2Y3ZDQ2YTNiZDgzMzgzNDQyOTA3NTAxNjc5ZDE3YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPUl2JSq7pyxH0qRprSID0i32AEP
51hFfeQz/VWjfYRxVb7RfhH2q5qcX7v8rXvi8d85w6wU2gMecxbVKOsI0sUoZLqf
xjDw8E4QUwLNYVYh0WfbQZUL3VwfXma37GQnW8el7gJcpCA/sPXxw3wIreJ6v2Yh
aY5eZzPAK2paTVTU9HLm7fPOPH1Tn72tLWDtXsc4H+TjE7jydNYMPlyFuC4Mm/lL
C0Zh8wL17dEJVZUjab3otRF0Tm3n391czGVz2YEFIi13vlTFM14qSf4WwBL92tYR
nF2up9vAkcXS+hr42nFOJJcgrOHOy8n6aCQ+gQWdHi7X4yalMOiLXoqc1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXaxdP31Go72DODRCkHUBZ50XtlMB8GA1UdIwQY
MBaAFDtThnKEEy7szVbmsVXPf2J9Jk9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgt
YjIwODU4ZTI5OTNiLzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zYWQ1NTgtNTFhMC00ODAwLWJiZjgtYjIwODU4ZTI5OTNi
LzEvTzFPR2NvUVRMdXpOVnVheFZjOV9ZbjBtVDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAysMaSppj
OHntfrhYn+S10zwXuz6MqrGKNxIF87efwUYpMeFrNqldjQQt+ypEbXEGdD58GZos
tIIhIv8XiY4DNooU6XowAvSbzGVfLjSn/0bU1hw7VByi+TPFlWsVrglHlZ68MQCQ
vR11b3Fhy1d7BGZh03odnW1N6uMwla1jF6/x7bzJ5zzMX+vrKvEDA3QoNu15whcK
oCodRC5fD8AXczXH+6inf19ylQtZ8p8SOT2dQeZmaIMgxGpgFifxsGj0sZ5ok+iR
mYmukB+zEmtgHqL3i4GYzNp5SKuOdzFj5SUUvgdiKBqhtiGu3NHuMNDEbLjs+/vG
SxiLZoDnFhbPPw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:40 2026 by rpki-client