This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File:                     of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier:          ysmaxvpP64i8ImmxtLGR7eu/wI4TiRluTKharWrowkk=
Subject key identifier:   F5:B1:07:52:55:AF:C8:93:5E:E5:D1:95:0A:FD:55:E5:A5:6E:D9:59
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer:       /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial:       019C446BC4C7EEB72C90D8A77FA73514331B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 22:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:39 +0000
Files and hashes:         1: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (hash: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4=)
                          2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: CBgeXDpqK0bCjgKyKJiQYLf9wrp9/KvmdblovGrpCzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:c4:c7:ee:b7:2c:90:d8:a7:7f:a7:35:14:33:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
        Validity
            Not Before: Feb  9 22:00:39 2026 GMT
            Not After : Feb 10 22:00:39 2026 GMT
        Subject: CN=f5b1075255afc8935ee5d1950afd55e5a56ed959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:d9:0e:e4:af:05:31:5e:d0:7b:c6:f0:95:
                    4b:42:8e:84:25:60:35:2a:ed:01:9f:16:22:54:b6:
                    bb:95:2e:bb:63:75:94:cd:84:8f:ae:2a:54:e8:80:
                    7b:bc:3f:ce:ca:91:66:8e:57:6c:fa:45:80:c0:40:
                    16:00:95:1e:8c:1c:60:3b:56:f7:e0:11:52:ad:5b:
                    78:6e:94:d9:05:85:fc:33:74:f4:4c:0f:70:dd:44:
                    09:32:ed:a6:55:84:2a:bc:17:07:ae:86:be:93:36:
                    89:6a:6e:82:f9:86:dd:1e:06:df:e7:03:2d:b1:44:
                    3b:c2:c8:d4:7d:58:a8:ca:b8:dd:99:3c:05:52:79:
                    bd:73:2a:92:71:6d:66:b2:7f:1f:ac:50:20:07:c7:
                    1f:6a:98:d3:d4:c2:f9:5f:f5:ad:d2:ca:e6:3b:d0:
                    68:70:ef:ff:83:0a:d6:90:82:f5:de:18:7c:94:82:
                    fa:81:8d:d1:a0:6e:d6:fc:74:02:f6:51:68:19:66:
                    13:63:34:71:a5:b7:63:73:bd:f5:b1:ea:06:25:c0:
                    46:c2:18:f5:3d:fd:45:d3:a3:3e:8b:32:16:cf:2e:
                    20:ab:4f:ff:7b:6c:7d:d0:c7:d5:31:46:cc:b7:50:
                    95:7b:66:73:bd:a2:2e:2b:da:71:d9:14:19:cc:e3:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B1:07:52:55:AF:C8:93:5E:E5:D1:95:0A:FD:55:E5:A5:6E:D9:59
            X509v3 Authority Key Identifier:
                keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d8:24:67:66:17:35:5d:bf:f5:fb:45:91:9d:6b:03:77:9e:
         92:7b:32:f1:64:18:5a:a0:5f:54:82:d8:57:e6:78:ae:18:67:
         f2:73:76:d2:10:dd:4d:93:27:22:6a:7f:77:b9:22:65:48:49:
         23:e4:04:43:1d:25:44:74:d4:48:52:80:21:f2:e5:ee:3c:c8:
         9d:90:09:36:c1:34:63:9f:2f:9c:a8:ba:3f:5d:a0:b2:fd:29:
         3d:79:79:94:9e:41:4d:ad:d4:70:21:6e:8a:8b:f5:12:3c:92:
         ee:41:e5:6c:3e:53:9f:e9:18:06:82:a0:c2:2e:78:4d:d6:10:
         0a:3e:5b:27:88:d8:d1:ef:f9:14:84:8d:50:4f:f8:1c:95:0e:
         07:7f:bc:e8:10:18:5b:bb:9c:c8:f3:3d:2b:a1:1d:0a:66:ec:
         04:de:e9:4a:96:80:64:ea:18:ab:93:41:b2:38:6a:dd:72:c1:
         21:e3:8e:b7:80:15:be:2d:40:b9:b6:54:e2:13:e1:0c:3a:65:
         fd:bd:b6:71:b4:81:e9:b1:83:31:7b:44:7a:66:4c:dc:72:06:
         ff:5a:3b:78:06:c1:2f:f6:84:98:bc:78:53:35:f1:a2:dd:e0:
         02:2e:11:c3:eb:07:d5:a4:3d:85:2e:ee:7a:39:82:9b:f6:21:
         8c:bf:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:04 2026 by rpki-client