This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File:                     odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier:          ig9TYdJJbqAmFHJ7nbim2exmYZSLCABRUBr0GVBC8sQ=
Subject key identifier:   E7:7E:AD:55:91:09:3A:5D:F1:35:51:94:2E:6B:C4:99:00:35:46:1B
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer:       /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial:       019C1FF1601CCB59E5C8B238E7A3FB3B4CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number:          074B
Signing time:             Mon 02 Feb 2026 20:00:38 +0000
Manifest this update:     Mon 02 Feb 2026 20:00:38 +0000
Manifest next update:     Tue 03 Feb 2026 20:00:38 +0000
Files and hashes:         1: 3tkw1-qcgk_89pGe7YNJR2YIKSg.roa (hash: 8wvPCey8xezOzLXtvtokdiPSl8fhacZDXdIFAhw8g4o=)
                          2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: gN+MJAP6Y57NFqgDKGofb1/kGvdBrfV1bOnNn0Naz/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:f1:60:1c:cb:59:e5:c8:b2:38:e7:a3:fb:3b:4c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
        Validity
            Not Before: Feb  2 20:00:38 2026 GMT
            Not After : Feb  3 20:00:38 2026 GMT
        Subject: CN=e77ead5591093a5df13551942e6bc4990035461b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:ea:f8:8d:7c:a9:8a:bc:97:68:35:2c:91:
                    09:98:d0:96:b1:8a:fe:21:b6:b9:7c:e0:d7:de:19:
                    15:82:ad:37:cd:11:a2:c6:27:f8:65:3c:97:58:1b:
                    7a:c9:41:e4:dc:7c:38:03:1d:75:f3:b2:f6:46:04:
                    91:86:6e:67:f9:a4:72:cc:55:cf:d2:d6:e3:ac:82:
                    e8:9b:6f:4a:3d:4c:87:b3:6b:a8:a3:48:2e:ce:84:
                    2d:fc:a4:a3:99:be:88:37:6c:ad:87:c7:f9:0f:7c:
                    3d:bf:cd:51:67:a2:72:17:43:69:eb:c2:9d:43:ff:
                    b4:fc:22:9c:70:77:cc:0f:0b:d2:24:41:58:20:30:
                    28:a6:a2:af:92:3a:0f:f1:98:69:44:a6:8d:64:39:
                    fc:94:9c:2b:4a:2f:3a:87:ae:ba:48:f7:83:75:32:
                    26:96:09:a9:28:6a:0c:48:20:cc:1a:bb:e0:3c:20:
                    5a:fb:27:0a:3d:e3:ef:9f:83:d6:8b:f6:bf:cb:41:
                    8c:20:76:4d:2f:17:20:40:9e:79:b9:e9:e2:af:16:
                    72:30:58:47:79:d4:b6:8b:bb:e2:44:7f:91:59:2b:
                    66:4c:35:f5:a4:47:ef:c8:93:bf:7a:63:37:55:c2:
                    24:04:51:96:4d:4b:f8:97:3e:10:48:26:76:01:cb:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:AD:55:91:09:3A:5D:F1:35:51:94:2E:6B:C4:99:00:35:46:1B
            X509v3 Authority Key Identifier:
                keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:8e:0b:f8:5c:cc:86:29:09:bb:4d:bf:98:7e:a3:a4:94:
         2e:88:03:f9:6e:c7:e2:b4:8e:89:76:f7:85:b6:07:bc:b3:1d:
         eb:a6:13:9d:19:9d:db:11:c1:75:64:4c:f6:22:e2:1e:ba:7e:
         e5:d8:b5:cc:39:8e:ce:b6:a5:5d:a8:15:05:b6:fa:e7:13:44:
         42:f7:db:ec:bc:3d:2f:8d:18:db:3e:e6:5e:c6:43:96:80:1e:
         6a:23:70:a6:db:58:6f:7d:c4:ec:51:24:bf:2a:3c:66:4e:e7:
         33:6b:77:9a:c0:73:bc:16:bc:52:43:ae:cd:09:90:64:f3:55:
         80:1a:76:cd:c7:00:9d:05:14:a4:69:31:cf:37:84:3c:79:20:
         15:6a:c2:fe:61:c7:7e:75:51:9b:ce:b2:8b:1c:d4:d3:9d:0e:
         84:5f:f6:83:08:c7:e2:57:91:3a:34:09:10:12:30:5e:2b:e0:
         57:16:08:69:b7:3c:02:3d:1a:3e:61:83:87:79:52:fa:e1:45:
         fe:37:59:01:f5:7b:bb:4a:f2:db:02:77:27:e8:99:23:3f:75:
         6f:d2:25:df:04:1b:9f:7a:6c:ab:f5:77:c1:8d:34:73:7a:d2:
         e1:12:d6:37:22:63:63:61:53:81:4e:a2:32:56:7b:84:f4:2b:
         f4:cf:91:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwf8WAcy1nlyLI456P7O0zUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1
NDE5MWIwHhcNMjYwMjAyMjAwMDM4WhcNMjYwMjAzMjAwMDM4WjAzMTEwLwYDVQQD
EyhlNzdlYWQ1NTkxMDkzYTVkZjEzNTUxOTQyZTZiYzQ5OTAwMzU0NjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVDq+I18qYq8l2g1LJEJmNCWsYr+
Iba5fODX3hkVgq03zRGixif4ZTyXWBt6yUHk3Hw4Ax1187L2RgSRhm5n+aRyzFXP
0tbjrILom29KPUyHs2uoo0guzoQt/KSjmb6IN2yth8f5D3w9v81RZ6JyF0Np68Kd
Q/+0/CKccHfMDwvSJEFYIDAopqKvkjoP8ZhpRKaNZDn8lJwrSi86h666SPeDdTIm
lgmpKGoMSCDMGrvgPCBa+ycKPePvn4PWi/a/y0GMIHZNLxcgQJ55uenirxZyMFhH
edS2i7viRH+RWStmTDX1pEfvyJO/emM3VcIkBFGWTUv4lz4QSCZ2Acs4PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOd+rVWRCTpd8TVRlC5rxJkANUYbMB8GA1UdIwQY
MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt
M2UwNmEwMTgyNjE0LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0
LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKmOC/hc
zIYpCbtNv5h+o6SULogD+W7H4rSOiXb3hbYHvLMd66YTnRmd2xHBdWRM9iLiHrp+
5di1zDmOzralXagVBbb65xNEQvfb7Lw9L40Y2z7mXsZDloAeaiNwpttYb33E7FEk
vyo8Zk7nM2t3msBzvBa8UkOuzQmQZPNVgBp2zccAnQUUpGkxzzeEPHkgFWrC/mHH
fnVRm86yixzU050OhF/2gwjH4leROjQJEBIwXivgVxYIabc8Aj0aPmGDh3lS+uFF
/jdZAfV7u0ry2wJ3J+iZIz91b9Il3wQbn3psq/V3wY00c3rS4RLWNyJjY2FTgU6i
MlZ7hPQr9M+RVw==
-----END CERTIFICATE-----
Generated at Tue Feb 3 01:52:44 2026 by rpki-client