This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
File:                     mAO6qFdULHWMJI0xHmOX_OSDgBo.mft (raw, json)
Hash identifier:          CSmIxlDpbQYBWHgBX2QpaHWhdNxabUTCBhxV7WpMhIw=
Subject key identifier:   C9:85:3E:F7:46:5D:1B:E9:27:81:59:0F:A9:67:B9:7B:A4:64:86:22
Authority key identifier: 98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
Certificate issuer:       /CN=9803baa857542c758c248d311e6397fce483801a
Certificate serial:       019C42469BB08B247123AD00227D3AF9EA99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
Manifest number:          02E7
Signing time:             Mon 09 Feb 2026 12:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:49 +0000
Files and hashes:         1: mAO6qFdULHWMJI0xHmOX_OSDgBo.crl (hash: Up8moFewGn46MqUU7QY/dhWnvjoQNSSlVqNi6erzLF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:9b:b0:8b:24:71:23:ad:00:22:7d:3a:f9:ea:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9803baa857542c758c248d311e6397fce483801a
        Validity
            Not Before: Feb  9 12:00:49 2026 GMT
            Not After : Feb 10 12:00:49 2026 GMT
        Subject: CN=c9853ef7465d1be92781590fa967b97ba4648622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:bd:43:d8:e8:8a:4e:22:fb:98:82:af:83:
                    ab:6d:98:d4:26:ac:b0:4f:22:7a:31:2c:c3:cc:28:
                    0f:c3:e7:93:db:a0:60:aa:7e:7b:76:3c:ff:e9:b1:
                    4b:a0:4f:07:d5:2d:60:71:ea:aa:27:b1:3f:21:62:
                    e6:7c:96:31:0e:fb:43:08:a0:e9:f1:1c:77:38:75:
                    64:13:ca:ec:41:72:df:73:f8:79:3f:85:8a:50:16:
                    2e:41:16:ed:1f:a7:3f:72:52:08:e9:84:f2:ea:4c:
                    55:90:74:7c:c2:83:a3:a9:8d:22:fa:d9:6d:27:24:
                    3f:31:85:d5:6a:e3:2a:d4:60:27:35:19:09:f3:94:
                    9e:59:94:46:76:5c:40:09:3e:3a:da:0c:d9:a8:24:
                    26:81:81:0e:cf:98:6c:41:44:41:04:13:d3:6f:0c:
                    56:a9:6f:b2:af:da:4f:b8:0b:ae:b1:bf:f4:5b:21:
                    d6:b6:7a:22:00:ed:6d:9f:98:73:c4:e6:5d:23:6a:
                    81:c1:f8:67:78:dd:af:e5:7a:a8:20:61:52:f4:b1:
                    32:79:a6:71:f7:f4:f6:f8:92:cc:68:6d:f5:3d:f7:
                    0a:f5:8d:41:b5:bd:5d:f8:8b:c8:db:cb:51:a8:6d:
                    06:e8:30:58:9f:0f:fe:4f:a1:ae:17:ca:83:59:fc:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:85:3E:F7:46:5D:1B:E9:27:81:59:0F:A9:67:B9:7B:A4:64:86:22
            X509v3 Authority Key Identifier:
                keyid:98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:cb:15:bb:74:f5:9b:30:f6:41:83:12:b1:96:ae:ba:51:
         13:97:64:98:1e:15:40:e0:75:c2:f9:54:eb:cb:3a:16:a4:4b:
         56:fb:16:06:2b:25:bf:b9:c5:d3:0b:94:e8:67:12:84:68:f8:
         fc:1c:c7:97:ef:36:88:8b:68:e5:66:d8:c9:dc:bf:83:a4:6b:
         06:aa:75:a6:e2:9f:b1:4b:9b:64:8a:67:b1:f8:7f:01:ec:51:
         91:24:ab:be:50:b6:ef:8a:68:9a:84:ef:db:e5:5e:bf:8b:89:
         a1:6d:1c:7a:bd:68:e4:5b:80:80:06:04:71:38:09:8a:01:23:
         0b:2f:77:35:3c:85:5d:1e:5b:1e:41:de:e0:83:f3:c1:dc:62:
         a6:4f:86:0b:bb:91:f6:66:3f:6a:9e:44:31:cb:b1:33:e2:f6:
         ed:c2:45:c5:1b:ec:e8:27:02:6c:02:fa:ed:fb:55:ce:35:15:
         88:f6:13:d3:26:42:31:2a:34:6c:a5:20:10:02:40:26:53:47:
         6c:2c:90:31:49:30:19:cd:75:36:ac:45:1e:26:f1:50:53:46:
         ca:78:17:b9:75:43:02:d5:a0:a2:9f:08:de:6d:0b:f1:d8:0b:
         34:d7:69:49:9f:e2:c4:72:60:75:bc:83:c4:40:ce:6a:ea:71:
         29:27:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:40 2026 by rpki-client