This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File:                     sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier:          dhdbTniRUlyp5ART6SQw/MgaQdya1pN0NyomwRea8Pk=
Subject key identifier:   FD:79:57:18:47:14:45:BA:80:77:F0:05:5B:DB:25:CF:9A:37:84:53
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer:       /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial:       019C420FB6C8E0C1A3D204BAC418803AE9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number:          0FDA
Signing time:             Mon 09 Feb 2026 11:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:51 +0000
Files and hashes:         1: hhZvUo8-UPHJUQKhfVe0xnQIQsE.roa (hash: h/tWCPKeuH8rGnGxAbdxQ1WNxHp4CqwywcjdSN99hzI=)
                          2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: SQZciL0APCUMdWxo64edOW69QJ8qR91jbh2R9pkwcSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b6:c8:e0:c1:a3:d2:04:ba:c4:18:80:3a:e9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
        Validity
            Not Before: Feb  9 11:00:51 2026 GMT
            Not After : Feb 10 11:00:51 2026 GMT
        Subject: CN=fd795718471445ba8077f0055bdb25cf9a378453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:8d:ad:99:9c:1d:89:e7:e5:54:d2:82:f0:
                    21:2a:52:4a:f0:7e:7c:2a:d7:fd:ee:a2:75:a6:26:
                    f9:c4:e5:ad:e3:c7:a9:c2:d3:d6:53:76:c1:7d:47:
                    dd:47:74:f7:0e:ad:42:6f:b3:c8:0d:c4:a0:c9:59:
                    a0:f4:fd:2a:a9:1d:f5:6a:00:cc:7b:67:95:ed:e0:
                    a9:dc:c4:f4:a3:e7:ed:77:fd:4f:60:1d:37:21:1e:
                    b9:e2:9e:93:ec:54:16:95:fc:9e:b3:e4:8d:4a:9c:
                    58:81:e2:65:19:1c:c8:17:7e:ec:f7:c9:87:64:c5:
                    89:24:26:84:5f:71:df:7d:5f:f2:5d:83:6c:57:75:
                    20:bf:3f:a4:c8:ee:55:db:33:f9:e8:eb:2f:3d:f2:
                    36:bf:41:3e:a5:8a:5a:8f:39:64:05:4a:02:aa:cd:
                    4e:e0:93:3b:13:d0:c1:ca:8f:eb:7a:8c:7b:37:aa:
                    e2:70:ee:e1:34:ba:f5:d2:05:3a:d4:83:50:42:5a:
                    6a:09:64:1b:82:3e:ae:59:b2:71:77:f2:a9:a9:29:
                    cd:3b:9f:0e:e8:95:50:65:f1:cf:07:29:16:59:a1:
                    1a:4a:e8:09:58:82:10:0f:39:3a:d1:dd:8f:9c:0f:
                    2d:bd:4b:46:3f:27:3d:a9:78:c3:7e:c7:33:66:2c:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:79:57:18:47:14:45:BA:80:77:F0:05:5B:DB:25:CF:9A:37:84:53
            X509v3 Authority Key Identifier:
                keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:52:a7:5d:46:c9:b9:73:3d:1a:0a:22:41:51:32:90:59:f9:
         b7:bf:98:1c:31:eb:6c:a2:b1:d3:1d:4c:a2:87:3a:48:5b:af:
         38:7b:6e:d9:25:8e:b3:94:5a:6d:ba:23:83:c9:4b:5d:d1:8a:
         60:ee:ae:b6:b0:5a:2d:25:c7:c3:9a:4e:48:57:12:65:fa:3b:
         c9:c4:5f:6b:4b:a8:17:e9:91:b5:80:ab:51:16:0f:fc:84:91:
         13:23:0c:b6:40:de:dd:9c:d5:01:3f:11:ed:f0:fb:e5:ed:8e:
         b2:1d:90:99:ef:d3:63:33:31:e0:ec:da:c6:2a:b6:a8:51:67:
         ba:48:0a:7e:e9:08:1c:d5:7c:63:fc:a8:81:27:a2:aa:88:06:
         4e:dd:26:94:b6:3c:e6:d3:08:a3:3a:ca:d1:b8:76:a3:51:46:
         c7:26:c8:79:ce:08:ec:3f:79:1f:34:3f:6e:88:71:ed:86:be:
         88:0d:a7:e7:ff:58:89:e9:26:f5:5f:46:8c:78:6b:f0:8f:ba:
         bc:37:4e:56:95:e8:7d:e7:94:3a:79:80:b4:c5:f5:7a:45:2f:
         14:10:b2:8e:d6:1b:5d:35:09:7e:e2:22:da:13:86:f4:15:e5:
         fe:15:dd:43:89:46:e2:09:5c:4e:a0:62:55:99:56:48:be:3f:
         35:b4:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:37:01 2026 by rpki-client