This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File:                     oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier:          Kuk5GfDao7LgcOqSGsiL2tw61cZ8tFVE3EVxO4kXkg0=
Subject key identifier:   C0:F8:AD:1B:88:30:EC:F6:D7:D7:ED:D2:99:3A:BA:8D:B5:27:26:C6
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer:       /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial:       019C427E272ABF98AFB97307D6B7F60E3CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number:          0333
Signing time:             Mon 09 Feb 2026 13:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:29 +0000
Files and hashes:         1: 4U-vWAkU_D-Vm4P_5qD2o7wqRK4.roa (hash: 9yVwmPXyL3uep7UrDkMA6UynM9g3AIcwrtrJCtL/ckw=)
                          2: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: 7nwYUQ2xAtDy2VflF/BIDE6KmkIKcO4+f8qE0Fix5gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:27:2a:bf:98:af:b9:73:07:d6:b7:f6:0e:3c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
        Validity
            Not Before: Feb  9 13:01:29 2026 GMT
            Not After : Feb 10 13:01:29 2026 GMT
        Subject: CN=c0f8ad1b8830ecf6d7d7edd2993aba8db52726c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:76:b6:04:94:63:7b:be:cc:84:17:21:da:
                    72:46:ff:50:29:1e:bc:9c:2a:de:63:3a:57:ca:87:
                    36:e0:81:11:f0:96:3d:ea:9e:0c:97:da:4a:31:4e:
                    a3:91:77:9b:0f:95:88:36:55:be:f0:77:94:5e:6d:
                    a1:79:ac:19:c1:6d:58:88:59:d2:ef:97:45:fd:08:
                    14:93:09:29:bc:06:a9:53:11:08:4f:cb:93:20:35:
                    93:55:66:7b:d6:a3:82:e1:c2:7a:ae:8b:53:02:7a:
                    36:5b:f1:3b:02:1e:e6:12:4f:92:77:88:d0:16:93:
                    49:af:53:a2:0b:df:4a:3c:da:6a:3c:9c:1e:84:9c:
                    2b:86:9c:9f:4f:4e:27:88:2e:ed:84:18:b4:ad:0c:
                    a6:51:e3:a6:5d:ed:6e:b7:31:4a:98:16:81:cd:4a:
                    98:c2:91:7e:5b:89:fb:1c:0f:37:af:e2:6c:ec:33:
                    b9:29:10:76:44:d7:ae:59:bb:99:6b:ab:32:87:cb:
                    55:f2:cb:89:17:23:4a:fd:44:60:14:42:29:94:79:
                    b4:f5:41:75:a5:a4:1b:d7:fe:b6:a2:da:27:70:6d:
                    6f:52:a6:64:59:fa:6b:1d:28:71:5f:d1:ad:3e:31:
                    8b:24:c8:fc:24:fb:63:72:68:c7:18:20:b6:0f:36:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F8:AD:1B:88:30:EC:F6:D7:D7:ED:D2:99:3A:BA:8D:B5:27:26:C6
            X509v3 Authority Key Identifier:
                keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:da:d1:41:be:e8:c7:68:b1:de:f6:35:ec:dc:d7:88:2f:
         42:6e:ef:03:0f:9c:e0:af:3b:20:85:a6:03:e0:2c:eb:8d:00:
         28:3a:45:ea:b7:0a:dc:cb:e6:26:e7:83:7e:f2:9e:47:06:24:
         16:fd:33:55:77:27:20:4f:d1:83:82:39:cc:ab:2b:5d:f9:0f:
         ff:d5:83:e3:a8:f3:01:3b:17:f1:af:d1:e2:59:6d:15:c3:a7:
         12:97:eb:95:9f:81:f5:12:7f:81:fc:5a:7c:7c:9c:43:7d:f9:
         12:e9:a4:41:6c:8a:a7:c5:74:c2:12:30:e7:bc:4e:ae:f0:76:
         5f:60:22:21:c5:cd:9e:32:9b:d6:ca:2e:d8:b9:95:be:79:89:
         81:2d:f3:8f:65:6f:cf:3f:d2:97:20:04:9f:ce:b5:5e:15:ce:
         09:b9:15:8e:10:7e:37:27:42:d6:d3:77:69:90:67:86:9c:f6:
         1e:59:04:2d:6b:c3:cd:67:eb:1f:d7:30:c1:a3:e1:48:94:47:
         c3:c0:a7:45:dd:5e:8a:94:ee:44:10:ee:07:49:5a:96:51:09:
         0d:14:71:ae:c0:26:6b:5a:a0:3e:dd:3f:77:40:89:ff:44:1e:
         b3:e1:5f:e5:1d:3b:85:8c:91:9e:6b:c5:82:42:d1:fc:12:a7:
         e7:b8:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:27 2026 by rpki-client