This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File:                     Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier:          5n7ZuLgxTfqVu9hm3dJUGz24FKJdkTEOtzLO6T0jul8=
Subject key identifier:   0E:21:46:A6:ED:34:A6:9E:9C:E8:A1:C5:62:B7:3A:B1:61:5D:26:74
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer:       /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial:       019C42EB424373476A7D7A637E7C9E38DBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number:          0829
Signing time:             Mon 09 Feb 2026 15:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:40 +0000
Files and hashes:         1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
                          2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: f5igbKn1HgvGx7U/hn52TVN2z3pzIvkQg5rEkbuaRo4=)
                          3: mYqU1cd-P8iQcqPiyiQeRNrIHis.roa (hash: HrYx/jKSjrT03a/YJLuKF9z9SwUK92ZUFYumLYD8iHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:42:43:73:47:6a:7d:7a:63:7e:7c:9e:38:db:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
        Validity
            Not Before: Feb  9 15:00:40 2026 GMT
            Not After : Feb 10 15:00:40 2026 GMT
        Subject: CN=0e2146a6ed34a69e9ce8a1c562b73ab1615d2674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:f7:97:ed:6f:44:31:6d:46:61:96:11:06:
                    76:d5:0f:9f:a7:27:a5:a3:58:43:a5:a0:34:59:a6:
                    d2:37:8e:84:3b:fb:04:91:63:85:51:44:36:da:2c:
                    74:4a:6c:84:1e:bf:69:4f:80:29:2c:c4:99:00:b5:
                    ef:0d:a2:49:a7:8a:d8:52:f8:98:d0:4b:cb:f0:f0:
                    14:c6:2d:53:e8:30:67:36:46:ea:64:53:4b:d1:08:
                    70:3a:72:88:c0:de:76:3d:cd:f0:bf:3c:b7:c3:f7:
                    a8:45:f4:f8:35:cb:07:d9:d7:38:02:5b:2f:d1:3b:
                    6e:19:e3:d9:57:d9:90:ee:1e:d0:13:25:b7:f5:8e:
                    0d:a6:ae:16:c6:d9:65:e6:8d:e8:82:88:1d:50:09:
                    b6:61:93:68:74:91:17:a2:15:e2:e7:62:40:98:50:
                    67:3f:b2:f0:4c:d0:06:f6:c4:ca:18:64:e8:be:ce:
                    e6:bd:b4:50:f0:18:3d:dd:d3:fa:f5:07:d8:e1:0b:
                    65:1e:0c:34:90:41:c4:bd:1c:b6:6f:a2:0d:87:b4:
                    4b:9b:6f:a7:99:39:5b:b6:29:04:9d:04:0c:73:e8:
                    b4:27:d4:e4:f6:e2:b2:f6:6a:99:b4:22:02:44:cc:
                    66:bc:44:44:fd:82:fc:03:cd:10:8f:1a:42:b9:c2:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:21:46:A6:ED:34:A6:9E:9C:E8:A1:C5:62:B7:3A:B1:61:5D:26:74
            X509v3 Authority Key Identifier:
                keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:35:da:61:bb:b6:fb:d5:ed:e6:bc:74:b7:14:44:e0:7b:
         98:ac:1b:3f:3e:33:4d:5a:e5:35:b8:50:08:a2:63:13:97:dc:
         e9:8d:ff:31:34:df:5c:2b:58:09:3b:7c:7f:ca:6c:2f:02:cf:
         ab:b6:0e:98:7f:36:5d:09:ca:2b:33:90:35:d6:8f:c1:d5:8e:
         57:29:71:a8:ce:03:d2:b4:91:18:c8:b0:2a:56:87:4d:62:a3:
         4f:7c:e5:e9:ce:22:af:aa:fe:f0:69:04:34:8c:77:73:b2:e5:
         1d:93:de:fa:90:13:93:f5:87:ff:f3:d9:0d:0a:b4:88:0e:7e:
         f8:12:34:79:57:73:db:63:84:5a:e4:d2:ea:42:a3:62:e8:32:
         99:c3:21:5c:21:1a:c7:32:1d:e2:31:bd:87:65:53:1a:39:19:
         b3:98:9f:cd:64:50:c1:cd:00:0a:4b:f5:ea:2a:4f:c3:00:53:
         85:9f:48:f2:8e:53:75:30:05:4b:df:7c:3b:5c:1e:75:36:33:
         ab:96:d0:0a:69:63:8c:3c:cf:81:f3:14:df:27:e9:47:f9:a1:
         26:68:09:1f:79:6f:56:b5:23:7d:af:b5:5b:3f:56:dc:b4:d0:
         41:a4:ff:d6:1c:17:c7:ef:20:41:7a:d3:00:b4:72:47:3f:86:
         f2:dd:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:05 2026 by rpki-client