This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File:                     ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier:          6X3Kn32yb4XUfCalWceBhvq40VoBpIO2mlJviw0bbrw=
Subject key identifier:   4A:1F:5A:20:27:0E:5C:AA:71:86:53:53:C4:81:23:FA:EB:11:95:0A
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer:       /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial:       019C43596E8FA84FA343D42B21C85050506B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number:          181C
Signing time:             Mon 09 Feb 2026 17:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 17:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 17:01:00 +0000
Files and hashes:         1: _of6XJCDa7IDRKvZCSxi-0j0JAQ.roa (hash: kgoplydOSvibwy5xwsCsSSzIjtviPAnX14Ip0WNTTtg=)
                          2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: /AuSJ2JhHzB8Y0FpIcjjXTwLm9djCbqJ9cIgGYq8biU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:6e:8f:a8:4f:a3:43:d4:2b:21:c8:50:50:50:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
        Validity
            Not Before: Feb  9 17:01:00 2026 GMT
            Not After : Feb 10 17:01:00 2026 GMT
        Subject: CN=4a1f5a20270e5caa71865353c48123faeb11950a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:e1:18:44:67:c6:df:92:29:04:88:6b:96:
                    be:77:5f:37:ce:fa:31:15:b5:05:76:53:62:f1:6d:
                    77:d8:6d:4b:6c:07:e3:90:c1:79:c0:63:aa:9a:f6:
                    8d:50:9d:65:59:e8:f5:3f:c9:d9:07:fc:8a:94:80:
                    23:89:3b:84:48:62:95:96:2c:15:6e:31:cd:f3:29:
                    90:5e:62:9b:5c:ac:05:d0:30:18:03:42:b6:d3:c6:
                    8f:5f:db:48:51:e3:07:7c:ea:ca:95:33:69:c4:81:
                    84:84:2b:9c:30:77:71:a8:0e:37:0d:a0:c3:32:2e:
                    4a:96:f6:09:2b:1d:5b:a3:41:0d:b6:69:17:e8:93:
                    95:1f:76:f4:48:d8:e2:21:48:90:64:c3:9c:54:63:
                    5a:7a:e7:a1:66:2c:17:51:29:8a:bd:8a:15:95:5f:
                    c1:2f:fe:4c:db:9b:2f:4e:79:7a:7d:23:19:96:b4:
                    9d:e5:f4:1f:55:6b:11:c4:0b:f0:ce:6d:c8:38:32:
                    a1:12:fe:85:72:4d:aa:af:98:a2:ae:29:ee:f8:51:
                    08:b5:e3:92:42:e2:d5:f9:e4:10:fa:8c:4c:56:00:
                    4d:8c:31:72:54:c4:a8:4a:81:91:4d:4b:84:81:c7:
                    ea:d9:11:a2:82:0f:56:8a:cf:d3:74:e4:24:19:71:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1F:5A:20:27:0E:5C:AA:71:86:53:53:C4:81:23:FA:EB:11:95:0A
            X509v3 Authority Key Identifier:
                keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:d9:a0:e2:52:76:c9:ad:a3:1d:40:15:70:59:3b:53:6a:
         b5:15:f6:af:9b:bb:7f:1e:c9:2c:b9:92:eb:7d:6f:e0:56:61:
         cb:5e:52:53:89:01:af:e2:07:6e:4e:c9:0a:5f:02:79:6a:73:
         11:94:79:43:88:e7:df:cc:ef:e7:3d:e6:f3:4d:5f:75:38:3b:
         5d:b0:a0:c0:bf:01:f1:e1:be:6f:7c:4a:db:d6:eb:ce:9e:48:
         09:79:7c:d3:43:09:04:44:7f:d0:74:42:8a:71:e1:15:dc:1e:
         eb:3d:3d:d0:ff:e5:c8:51:6f:84:b7:df:cd:c2:7e:f5:30:4b:
         97:36:bc:e4:d6:b7:99:d5:64:57:eb:c5:2a:65:1e:d6:bc:ab:
         f5:da:77:42:1e:46:dd:7e:9b:73:91:dc:31:41:55:28:58:07:
         91:d8:6f:90:0f:e3:c8:07:b3:41:3f:28:9d:92:2a:a5:f5:62:
         73:db:4d:c1:40:bd:98:6c:26:2a:6a:f9:71:6a:3f:92:df:99:
         84:a7:ae:01:89:af:2c:61:1d:9a:6c:89:48:bc:ad:db:df:33:
         49:1b:8a:25:bf:3d:6a:55:24:18:f0:25:e7:3e:73:8c:1c:d5:
         89:a5:ff:e1:be:94:69:8d:4a:f7:a2:f1:de:39:b7:a8:9c:5b:
         98:17:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:31 2026 by rpki-client