This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File:                     ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier:          DvVB6QlmWC94xU+AxGOY3mX/9K8zi07W6FZHt5bA3wU=
Subject key identifier:   54:34:13:72:47:18:6F:3C:6E:B1:8B:48:FA:C8:89:D0:F6:F4:66:3B
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer:       /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial:       019C2D3EDC66F77FF9CBFC739E7C19890025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number:          0120
Signing time:             Thu 05 Feb 2026 10:00:20 +0000
Manifest this update:     Thu 05 Feb 2026 10:00:20 +0000
Manifest next update:     Fri 06 Feb 2026 10:00:20 +0000
Files and hashes:         1: iJct27IBYh-gAfl6eu5h4aNgM3U.roa (hash: 6ohSO1sfqYBcO+vPtXlYywNN/BR02DeUS7d8lZX/S7c=)
                          2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: vCz/lGqHyoindWBSmWffwWS43tDnRl1bgt/sK86NYn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:3e:dc:66:f7:7f:f9:cb:fc:73:9e:7c:19:89:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
        Validity
            Not Before: Feb  5 10:00:20 2026 GMT
            Not After : Feb  6 10:00:20 2026 GMT
        Subject: CN=5434137247186f3c6eb18b48fac889d0f6f4663b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:be:9d:67:21:a7:b4:63:ea:ac:8c:b4:39:
                    ba:d6:ad:11:64:76:e7:4e:f8:18:1b:79:28:40:c7:
                    21:41:3e:a4:a4:37:30:71:49:ee:a3:00:c3:5b:a8:
                    1b:07:eb:c7:c4:45:70:09:e0:42:52:03:73:5d:96:
                    32:18:3c:39:fc:c5:8b:c5:36:09:c1:17:cc:cb:7a:
                    b9:e0:3e:3e:d7:37:f1:ad:db:e2:aa:dc:05:63:bd:
                    af:6f:3e:14:cc:0d:91:48:3d:27:02:27:9c:29:da:
                    e6:52:f4:66:95:36:f4:02:a2:5b:17:c6:44:52:ec:
                    5d:99:a7:e9:49:26:1b:4b:81:46:60:03:11:4d:fd:
                    a5:b0:ea:1c:37:0c:9a:11:31:65:9c:0f:b6:79:3f:
                    32:36:1c:ca:6b:83:06:90:22:59:06:58:42:34:5f:
                    50:03:2f:8b:e9:64:42:43:5d:0e:34:ab:63:8a:fa:
                    ec:3e:54:db:50:fe:79:a5:01:29:64:93:d5:54:eb:
                    ee:e1:f0:70:1f:5c:2f:ba:96:10:2b:02:18:81:c9:
                    59:24:2d:2a:14:1d:a0:a3:d0:3d:64:3b:38:93:92:
                    b2:b2:df:71:42:32:b7:76:47:e4:fd:e0:60:a6:53:
                    6f:e9:41:5b:2f:78:75:57:5c:52:4a:ca:f2:4f:3f:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:13:72:47:18:6F:3C:6E:B1:8B:48:FA:C8:89:D0:F6:F4:66:3B
            X509v3 Authority Key Identifier:
                keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:06:41:57:02:83:1f:3c:45:0a:cc:1e:23:1f:35:35:f3:
         3e:40:82:da:84:2e:5f:cc:ac:6f:57:c8:4a:94:62:d1:aa:bf:
         1e:7a:6f:b9:ed:13:c8:72:b4:de:72:8b:1d:ee:eb:1b:1c:6b:
         68:c3:83:53:a5:08:61:6c:59:fb:fe:14:e9:80:59:8e:06:8c:
         fa:c7:b7:0c:e6:86:b2:92:06:af:33:8d:6d:81:f6:04:0c:e9:
         fa:59:83:5b:e4:81:82:dc:ad:42:2f:df:cc:43:25:74:4b:8f:
         e8:d1:d8:e2:5e:13:45:36:39:75:d7:dc:32:e3:79:39:c4:a8:
         d5:64:b8:2f:fb:46:40:95:e5:83:30:8a:f1:3e:3e:09:04:a1:
         39:ec:39:6d:e9:d7:b8:07:2b:cc:d6:fd:fe:a7:be:27:e6:02:
         a7:a7:cc:04:2b:af:27:44:19:7f:dd:67:7a:48:b6:be:0c:70:
         e2:bf:74:b9:fb:fb:fb:4e:81:de:87:79:14:12:5a:f3:a8:8a:
         41:9f:f6:3f:6a:1e:f6:d4:2d:e7:2e:d7:d1:33:fd:28:2d:9d:
         3c:2d:1d:df:2f:07:5c:2d:19:99:bb:6a:36:90:f4:a2:5b:df:
         1a:0c:51:7a:12:3b:16:f5:44:3f:3d:3e:8a:6f:89:e6:74:0c:
         9c:73:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 15:08:47 2026 by rpki-client