This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File:                     sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier:          eqYKlvX7TJW3XIw1LLKgGbSMPK+90X+lqwWMZSYYGsY=
Subject key identifier:   8A:98:C8:EE:C6:24:DF:60:5E:7A:F7:FF:E4:0E:E2:62:74:6B:80:3C
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer:       /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial:       019C42B42E93DA1F6859DA4367A24AB07C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number:          0C01
Signing time:             Mon 09 Feb 2026 14:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:30 +0000
Files and hashes:         1: OrnUiGaAfgoX-LuOUbvnk6uPbH4.roa (hash: vcOnRHWoru5B6kfcxHP5t0EEOsXRGZHYwZLGuEiEtsg=)
                          2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: mJ2UyR7dbK9Ayopu0bnAN2pv77FkHSUbYlHj/Pen4CE=)
                          3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2e:93:da:1f:68:59:da:43:67:a2:4a:b0:7c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
        Validity
            Not Before: Feb  9 14:00:30 2026 GMT
            Not After : Feb 10 14:00:30 2026 GMT
        Subject: CN=8a98c8eec624df605e7af7ffe40ee262746b803c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:39:8a:91:2e:83:c4:8f:c2:0f:ed:6b:c4:
                    60:19:c5:64:ad:61:94:01:65:fa:81:bf:55:2d:97:
                    f1:59:ab:67:7f:d4:5c:ef:81:b4:ec:ec:fd:84:e9:
                    5e:d5:7e:8d:ea:a1:24:df:c0:78:11:fd:c1:2f:cc:
                    34:89:4b:e2:ea:9d:b5:11:27:c2:62:f7:cd:0f:f4:
                    92:27:f6:36:20:35:29:68:f9:4d:16:4d:91:b1:96:
                    04:6f:8d:46:e3:59:41:48:b9:cb:c8:83:6f:19:15:
                    52:2d:dc:23:44:70:15:8f:eb:be:2f:01:6b:95:32:
                    d4:93:8c:05:5a:67:50:a5:e4:16:e3:9b:4a:a5:65:
                    cb:fc:ae:73:4e:e5:93:75:fc:04:7e:58:69:2b:75:
                    f4:f2:5e:39:c4:d3:2b:76:b5:60:a8:b2:03:16:6b:
                    55:dd:73:7b:98:53:eb:40:80:fb:2b:89:1c:6f:b7:
                    02:e1:be:70:d9:80:0e:71:02:2b:0c:75:08:46:4b:
                    4e:9e:59:57:77:d7:92:d8:a9:58:aa:55:e2:a8:af:
                    96:48:22:3d:67:92:c0:f3:60:27:f9:d6:b4:e4:b9:
                    66:28:23:02:5c:5b:97:bf:58:c2:6d:66:b5:43:06:
                    f9:b2:66:4a:53:4b:53:30:06:42:7d:09:c7:7e:8c:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:C8:EE:C6:24:DF:60:5E:7A:F7:FF:E4:0E:E2:62:74:6B:80:3C
            X509v3 Authority Key Identifier:
                keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:df:bd:01:bf:bc:c4:4a:b1:c0:58:bd:42:e0:4f:cf:ca:ac:
         7d:bd:2c:64:37:aa:79:49:a5:3e:09:60:32:a6:e7:a5:b0:bd:
         62:45:b5:ee:6d:1b:73:03:7b:32:2a:16:76:ef:fe:0d:96:e3:
         a6:eb:18:e9:cd:36:57:bc:9c:ac:27:1d:f1:aa:da:73:9e:57:
         39:d2:71:c5:fa:63:1d:57:ab:3a:ea:1f:6c:10:e8:08:67:5f:
         b2:f1:98:61:aa:c8:44:62:70:81:b0:96:d3:8f:90:44:0f:c2:
         28:93:7a:81:ca:ff:cb:a6:0d:af:52:db:52:24:a7:f0:82:c9:
         d8:0f:39:25:3a:3d:3a:7b:7f:3e:2e:56:21:ab:8b:a8:ac:94:
         34:4e:75:72:91:10:13:15:12:a1:99:d3:e8:4f:5a:9d:86:0b:
         45:18:66:dc:0d:50:4d:d1:ba:9d:60:0d:ab:08:f6:f4:ba:d0:
         03:de:be:5d:89:6a:35:87:6b:91:16:23:c1:a9:19:99:bf:c7:
         49:11:fc:6f:68:2b:75:09:cb:7d:f5:60:ab:73:94:e4:44:f2:
         c6:7c:b5:5a:47:9f:da:dd:d3:2d:dc:65:ac:f9:ac:02:c3:bd:
         f6:71:a4:e8:8b:14:a5:76:31:56:80:72:44:ad:b3:5b:19:17:
         a3:d7:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:29 2026 by rpki-client