This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File:                     oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier:          uITwnHtinAM4ZKQdi/pUgWiB94YrhLk4NrRg/9ZPPb0=
Subject key identifier:   5E:3D:44:91:D3:E4:7A:08:4D:FE:20:61:70:26:98:05:C1:0F:4D:FA
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       019C427DD8A994DC131A01F4BBB066E667B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 13:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:09 +0000
Files and hashes:         1: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (hash: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=)
                          2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: en2tqAw3MuBid2LrOjpWfVuuGRd7oJa1tk9vdZsPvfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d8:a9:94:dc:13:1a:01:f4:bb:b0:66:e6:67:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: Feb  9 13:01:09 2026 GMT
            Not After : Feb 10 13:01:09 2026 GMT
        Subject: CN=5e3d4491d3e47a084dfe206170269805c10f4dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:da:a0:d2:de:bd:dc:34:e0:24:19:6f:d8:
                    d9:29:ff:4a:2e:82:14:8f:ee:b3:bd:df:81:c0:b9:
                    84:34:ee:3a:58:a5:06:89:66:c0:4c:27:61:4a:99:
                    66:9e:11:c8:82:ea:6d:f1:8d:12:fe:e7:ec:18:7a:
                    de:84:d5:61:cf:52:10:e3:d4:18:95:c7:a0:1e:18:
                    79:b5:e2:3f:85:99:24:48:a6:55:46:9e:47:55:f9:
                    2c:82:1a:94:72:12:95:26:17:21:a6:89:ce:73:eb:
                    f8:c5:84:8a:62:39:07:71:43:5a:b1:c8:40:b9:04:
                    f3:ae:06:a1:35:b6:3d:34:a3:dd:41:fd:f1:d2:aa:
                    65:d3:5f:5b:0c:21:42:8f:28:7b:88:e9:50:8b:e4:
                    cf:df:16:ba:db:07:5e:16:6f:87:78:26:85:16:26:
                    d1:ed:d0:a7:ea:3c:b6:8e:e4:2f:83:a7:0f:5d:5a:
                    d2:58:81:2f:37:80:07:d9:91:8f:e3:70:fe:58:0f:
                    00:bd:02:95:4a:c0:8e:63:67:14:bc:c1:d1:7c:82:
                    a7:5d:4c:9e:bd:21:a6:72:f6:6d:57:d4:21:18:aa:
                    91:82:da:9b:1f:b7:22:76:94:ca:59:7b:b5:be:9b:
                    08:e1:b5:79:f0:e5:37:a0:d3:b5:8c:95:5a:f7:e5:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:44:91:D3:E4:7A:08:4D:FE:20:61:70:26:98:05:C1:0F:4D:FA
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:43:33:15:0e:98:f2:99:04:d4:2d:e9:c3:75:2d:8e:de:
         ef:3d:4d:92:5d:ea:fe:6e:a9:6d:ca:63:83:60:6c:85:95:59:
         75:70:87:e7:94:27:b3:40:70:0c:7a:04:42:72:ce:0c:b7:17:
         e4:e0:72:8f:dc:ca:56:a3:4f:97:ac:95:e1:66:e5:4b:7a:68:
         b7:08:80:a5:a6:e3:87:0f:c5:2f:bd:0e:da:fc:f1:3c:c5:80:
         75:49:12:ce:5c:0a:72:3a:34:6c:73:ec:89:23:3f:37:dc:7a:
         48:58:1d:67:a5:6e:c8:ac:5f:d4:48:51:02:20:88:3c:d2:7a:
         58:d9:ce:7b:31:29:c7:c8:12:e0:1c:f2:13:c8:54:14:cc:db:
         4e:61:76:46:ac:08:1a:58:84:9b:a5:d3:58:11:9c:21:d1:4e:
         df:5c:27:a6:96:53:b0:53:34:67:ff:2b:28:bd:a3:22:62:f1:
         ff:d5:71:94:74:4b:20:8a:bd:eb:dc:cf:cb:4a:2e:05:26:73:
         6c:97:48:a1:e1:22:98:cd:6e:e1:21:29:b9:f5:0c:8b:c1:6e:
         b7:3d:57:16:b3:88:ef:da:16:98:17:0a:98:fe:a1:d3:33:d1:
         cc:7a:9d:7a:e7:da:6d:62:4e:69:38:5b:73:14:19:e6:a7:93:
         04:1a:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:30 2026 by rpki-client