This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File:                     0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier:          Z7+HyQ/03knzTjP1TZXBPspDaKAsJS9w9uCC1Iq9+sY=
Subject key identifier:   95:1D:17:17:7A:29:F1:58:60:81:B9:A9:45:F6:4F:1C:BD:CA:A9:86
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer:       /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial:       019C43591AFD2FE131E229BB0F558C032D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:38 +0000
Files and hashes:         1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: PltyICtp14T6/FTuXQWZrHE/cm2ljEmjKujh47+dDUE=)
                          2: ISlu2yBKOiwYiK7qUKEsRGH2kzo.roa (hash: 4RnBkIb7B8coxfzF6I8zgcJVOP7X3HVqDAGpERLc3lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:1a:fd:2f:e1:31:e2:29:bb:0f:55:8c:03:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
        Validity
            Not Before: Feb  9 17:00:38 2026 GMT
            Not After : Feb 10 17:00:38 2026 GMT
        Subject: CN=951d17177a29f1586081b9a945f64f1cbdcaa986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:67:d2:30:33:91:a5:b5:35:c8:d4:36:c1:
                    48:49:11:35:a3:ee:a8:0f:9f:ab:bf:ea:f2:00:3a:
                    76:a0:9c:53:c9:0e:5d:d0:f8:2d:52:67:ee:f4:aa:
                    b6:3e:f9:11:f6:82:25:be:40:93:d9:ec:60:66:bc:
                    11:c7:a5:3b:49:4f:45:ca:51:e8:bd:4a:6a:81:07:
                    00:86:8d:52:92:45:ef:7c:7e:dd:4d:74:ec:59:2f:
                    20:59:48:9e:59:4d:0d:4d:d0:e5:68:97:9a:bd:fd:
                    67:50:96:16:7f:15:81:86:32:bd:8f:c7:e8:57:b8:
                    fe:2f:fe:7d:39:5f:5c:32:ca:08:0d:28:89:a8:9f:
                    d3:f1:ef:81:c1:69:d6:b9:c5:88:dc:34:5b:59:da:
                    bf:ed:1b:55:1e:d5:3e:d1:fe:c2:71:e9:56:4d:99:
                    ca:5a:71:23:76:02:56:04:46:72:2e:ce:17:09:1e:
                    5b:76:06:79:c7:3c:25:d2:af:82:48:ed:8e:e3:0d:
                    dc:d5:17:07:92:d5:7a:97:22:35:38:85:bb:5a:d2:
                    0a:b4:f6:a6:cf:54:18:68:fd:49:ac:b0:e1:bc:f3:
                    53:10:89:de:53:1f:05:bf:91:f6:3d:2b:8d:f0:8a:
                    78:73:72:fc:98:b5:1a:d1:19:ef:7c:e1:b7:02:0c:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1D:17:17:7A:29:F1:58:60:81:B9:A9:45:F6:4F:1C:BD:CA:A9:86
            X509v3 Authority Key Identifier:
                keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4f:8b:11:25:fb:96:7f:1b:77:08:42:d3:1f:95:81:fe:43:
         bf:04:f0:90:4a:b6:03:c0:24:b4:8a:39:49:ee:31:a1:65:cd:
         3e:fd:22:f8:31:8e:a3:e5:25:fa:c3:b6:a3:68:f7:c3:57:42:
         6a:45:2f:c4:f1:2e:19:1d:48:fa:46:97:c4:77:54:d3:7d:85:
         fe:ff:79:6d:8d:81:34:17:83:c7:48:fe:ed:d1:89:d3:6a:16:
         9f:26:7e:b5:e7:c0:a5:5c:ee:64:c8:e8:9d:d9:a5:70:39:ce:
         a5:ca:9c:01:02:ba:d7:6c:b6:c1:67:9b:35:8b:2d:00:31:94:
         9d:ab:6b:20:98:97:9f:50:48:4c:e2:52:a0:8e:58:6f:dc:07:
         28:2a:fa:33:12:9b:8b:a6:ab:b4:3a:ca:75:4c:9d:bd:8c:a8:
         0e:44:8f:5b:cb:7a:3a:20:aa:57:7b:28:3e:32:47:7a:16:ad:
         ff:72:ba:46:2a:52:d5:c0:f7:37:06:c9:ae:7f:2b:f4:ff:ec:
         64:e6:09:87:14:e6:13:63:98:52:8c:75:a0:aa:4c:09:17:fb:
         17:35:06:ca:53:67:a3:2a:58:fb:63:eb:42:e8:33:4b:f6:29:
         50:bb:69:7c:a5:96:fe:f0:08:24:ee:43:46:94:c0:62:93:4f:
         b7:40:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:08 2026 by rpki-client