This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File:                     8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier:          TfOe5gKRqIWsdreWO6JXtLMzXqNJH21SB8NATxlmJeE=
Subject key identifier:   2C:CC:1F:8B:4F:51:8F:7A:8C:E8:72:F4:E2:BB:5C:A7:9E:7B:C5:F3
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer:       /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial:       019C424679A715A202F5E415BA7D6EAB22CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number:          03EA
Signing time:             Mon 09 Feb 2026 12:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:40 +0000
Files and hashes:         1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: yuPStjHaJL1eBqSvoivuzdhAFRVP4ZoXBIH9c5Yc6hg=)
                          2: tOXIM_UKk48wJZ7VMtkwvlrqHuM.roa (hash: YwRhYkrIDO2b6TPx5Ws8xbL48qbasailmg+aD1VygMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:79:a7:15:a2:02:f5:e4:15:ba:7d:6e:ab:22:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
        Validity
            Not Before: Feb  9 12:00:40 2026 GMT
            Not After : Feb 10 12:00:40 2026 GMT
        Subject: CN=2ccc1f8b4f518f7a8ce872f4e2bb5ca79e7bc5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:0e:f7:4b:90:bc:a3:eb:a1:5e:c5:2a:c0:
                    38:4d:15:28:76:cf:7f:3d:f1:73:c4:dd:c1:29:9a:
                    e8:18:a7:14:f9:2a:39:8b:7c:41:13:0c:75:c0:05:
                    a3:30:47:c8:28:cb:3b:c8:29:5f:18:2f:77:9c:65:
                    f3:88:9c:76:41:1f:0f:a6:9f:ca:08:99:58:17:1f:
                    f1:76:4f:67:46:89:6b:a5:4c:d5:c8:43:ed:e0:10:
                    46:c7:52:0e:74:97:5f:5b:74:61:c7:a9:2d:ef:24:
                    47:06:ba:0b:98:ec:a8:6e:a8:94:f5:35:55:f0:4f:
                    46:ff:89:af:e5:31:2f:6d:31:ab:05:64:d9:55:47:
                    d1:d2:1c:5a:a9:de:13:f8:28:f5:8c:64:fa:09:f9:
                    6c:e1:e8:81:d4:99:4b:d3:3f:df:2f:ce:12:4e:4e:
                    f7:03:5c:4c:d7:26:59:f5:39:53:c2:76:0c:fe:b7:
                    b6:d8:8f:9f:8a:be:5d:1d:a0:17:00:1a:55:8e:46:
                    ad:75:c7:87:e7:cf:90:6b:56:e7:2a:be:60:9b:90:
                    8d:09:b5:91:62:10:6d:2b:5f:88:a6:d9:1d:6c:b3:
                    eb:29:30:1b:41:cb:76:b0:a4:1f:84:d2:46:0e:25:
                    bf:3d:b1:fd:ac:fd:8c:e3:23:01:72:d4:72:e4:37:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:1F:8B:4F:51:8F:7A:8C:E8:72:F4:E2:BB:5C:A7:9E:7B:C5:F3
            X509v3 Authority Key Identifier:
                keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:98:34:84:45:49:45:8b:aa:66:55:51:7a:26:56:05:0e:0e:
         36:c5:16:b3:ec:e3:a7:71:1a:dc:81:5a:2a:ef:29:50:b2:47:
         05:5e:5e:a6:e1:73:43:5b:62:e7:42:6b:ab:79:68:51:72:6a:
         c8:67:ef:8b:58:e6:2e:8f:32:c4:6f:28:e2:9c:57:41:f6:58:
         24:04:f5:0d:1d:6f:2e:13:6f:f5:a1:03:6a:16:20:64:91:c1:
         c0:9a:96:ab:e3:d2:02:75:20:dd:3c:61:93:b1:06:3d:ff:8d:
         22:2f:c8:63:47:19:33:84:fe:7e:9d:8f:2c:78:33:f3:5c:68:
         6b:0c:d2:3b:2a:6b:b9:5a:16:16:88:d6:6a:9e:14:96:e5:bd:
         24:51:da:ea:fa:0c:ff:08:37:38:5a:17:87:3e:12:15:f8:d5:
         73:da:7c:e0:f7:72:e6:53:e9:bc:ea:05:76:52:49:b5:d5:e3:
         60:a6:bb:0e:f3:17:a6:ad:cb:72:b5:3d:6a:b2:0b:40:82:6f:
         8d:79:e7:fa:d4:7b:05:57:81:49:6c:86:73:89:85:0e:0f:ad:
         b1:ed:eb:50:63:3b:43:cf:c2:30:58:b0:69:e3:f0:2f:22:09:
         63:79:a1:34:f2:3e:6b:f8:8f:47:b9:16:8e:d3:33:ae:65:79:
         0c:46:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:52 2026 by rpki-client