This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File:                     o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier:          RbMK3rCoOLpVYftx2M5HDbn+t7Qymo5Etu6JvDLt2+M=
Subject key identifier:   08:06:46:A9:29:00:FB:5F:C7:E4:01:E6:3F:5D:C1:BA:49:9A:EB:CC
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       019C427DB01204BA6F8AAF56239D6FCC145B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number:          1405
Signing time:             Mon 09 Feb 2026 13:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:59 +0000
Files and hashes:         1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: aV9iHm2KV6fHW5TNQe3q1XBNOWtGFCbgZjFCAGagw74=)
                          2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b0:12:04:ba:6f:8a:af:56:23:9d:6f:cc:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: Feb  9 13:00:59 2026 GMT
            Not After : Feb 10 13:00:59 2026 GMT
        Subject: CN=080646a92900fb5fc7e401e63f5dc1ba499aebcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:e9:2c:23:49:b3:94:75:02:07:99:3a:9c:
                    3a:0f:13:ee:58:43:a1:16:d9:b8:18:ea:7b:85:d5:
                    1e:ea:d9:81:a3:6d:13:67:b9:ec:a2:94:8d:e0:f3:
                    3f:68:93:0e:18:62:9d:b6:46:24:48:a2:8b:41:ad:
                    44:f0:0f:08:ae:79:ba:f0:3b:4d:67:da:a4:89:21:
                    22:f9:c6:b0:d7:b6:cd:39:5e:8a:b0:77:f9:c1:a5:
                    05:a3:2e:15:f5:a9:d0:7c:61:2c:31:72:e3:67:00:
                    6a:f2:ed:bc:09:5b:dd:5f:51:8c:23:35:94:50:e6:
                    a5:08:41:0b:c4:30:db:50:f8:27:ee:20:00:8c:89:
                    71:c1:ef:cb:ba:d1:6f:15:f1:60:21:74:71:01:b4:
                    4b:97:b8:09:a7:b5:96:af:2d:8d:a3:20:a0:9f:81:
                    e8:6c:49:fc:11:5c:02:56:49:00:01:b6:f8:c8:36:
                    ec:16:ce:07:37:9b:13:3c:84:f8:10:38:03:81:a7:
                    59:8e:6b:ca:71:17:63:dd:c0:0c:18:96:d1:73:fd:
                    ea:9e:cf:af:e6:11:4e:71:4d:b7:bf:02:b7:ed:48:
                    9e:17:77:84:af:f9:2e:fb:cd:c2:08:6c:a1:7c:f9:
                    19:9f:aa:46:ee:4e:20:72:e0:9a:2c:df:fa:8d:6e:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:46:A9:29:00:FB:5F:C7:E4:01:E6:3F:5D:C1:BA:49:9A:EB:CC
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:bb:f9:2a:cf:cb:80:fb:1c:32:57:0f:d0:e2:84:85:11:
         f7:e0:0f:fe:cb:4e:ef:55:01:96:54:06:dd:e4:24:43:fe:7c:
         76:07:54:1b:12:45:dc:86:4c:e1:81:d3:7b:a8:00:5e:6e:72:
         8a:2f:aa:34:9f:c8:bd:f4:cf:49:0c:c2:77:06:a5:be:12:c5:
         40:76:58:43:aa:61:50:e1:a3:28:39:e7:84:48:ff:86:55:a0:
         92:48:e0:ab:90:54:e7:d0:6f:73:a5:57:db:71:5b:5f:72:2e:
         96:65:35:0e:b8:ba:f4:82:92:18:35:4a:78:2b:16:38:93:4b:
         10:86:e2:d1:ae:b4:27:a0:a2:3e:6b:56:68:89:c2:0e:ca:dc:
         97:a1:14:0a:b0:0c:e5:7c:53:3d:ba:3f:1a:53:62:c9:e3:0a:
         21:47:3a:31:ec:0e:45:e3:e7:b1:4a:67:85:99:d6:8b:d7:ef:
         1c:44:c5:04:12:16:55:21:9b:0b:b5:36:be:31:b8:40:d3:2c:
         13:64:a9:d1:cc:34:4b:b6:df:de:75:e0:02:b2:40:30:c8:f9:
         8f:4d:59:aa:1a:e1:ff:d5:1e:c9:40:8c:83:51:a0:3b:31:34:
         be:57:b2:02:9a:39:7f:6d:59:0b:db:f9:c5:2f:07:d0:83:74:
         b3:be:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:35 2026 by rpki-client