This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File:                     oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier:          8AMLw8jjLrB306xhbOQ+wcshghfEGqfDNvN3B0qdh/0=
Subject key identifier:   A5:36:AF:1E:6A:34:D7:E3:42:41:D8:5C:93:B7:68:94:1F:26:27:D4
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer:       /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial:       019C427D50EE7D5DC69736E3A6BF09749624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number:          02E9
Signing time:             Mon 09 Feb 2026 13:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:34 +0000
Files and hashes:         1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
                          2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: qHcSI7XvFbnZ5e9W8sQEsaHwUpQ3MJLdEVUYeRVBNEI=)
                          3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:50:ee:7d:5d:c6:97:36:e3:a6:bf:09:74:96:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
        Validity
            Not Before: Feb  9 13:00:34 2026 GMT
            Not After : Feb 10 13:00:34 2026 GMT
        Subject: CN=a536af1e6a34d7e34241d85c93b768941f2627d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:00:86:a8:f6:f4:20:21:18:5d:57:05:66:
                    2f:b6:22:fd:94:06:53:a1:d7:f6:af:57:59:5b:f0:
                    1a:6e:bf:96:ef:74:b8:09:fb:4d:f1:43:24:13:cd:
                    83:7d:1e:6c:76:ca:e0:a8:37:a9:a6:c1:c8:f6:06:
                    84:33:09:98:4d:70:ec:64:59:c0:a4:74:18:90:9d:
                    eb:5a:3d:ab:b8:72:57:b9:e7:5c:c8:e3:28:18:e6:
                    f8:f0:ae:1e:ef:88:34:26:8d:0a:2b:f6:9b:ad:95:
                    43:c7:35:d2:e0:c3:6d:2e:2c:0a:2f:32:32:f9:3d:
                    cf:f7:33:7c:b0:29:e7:c3:ad:67:c2:d6:3d:f8:a3:
                    8c:fc:f8:39:45:0a:a4:f1:f4:c1:70:4a:a7:35:82:
                    2b:fc:a6:93:04:45:6c:fb:59:32:b1:61:87:64:f7:
                    9e:a3:3e:86:1f:0e:51:99:7d:63:a4:aa:c7:73:cc:
                    f5:2f:c6:37:b6:51:fd:b7:a3:38:d4:9b:19:31:d4:
                    ae:e4:7e:8e:e4:46:b0:b4:7f:cd:32:6b:50:01:23:
                    7f:6b:ab:68:93:e8:3c:7c:2c:8b:1f:84:f1:6c:ea:
                    11:1d:cc:13:8d:28:1a:de:31:20:5a:2a:43:8b:cd:
                    ab:56:fb:86:47:c1:22:71:f0:f8:74:1f:5b:e0:69:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:36:AF:1E:6A:34:D7:E3:42:41:D8:5C:93:B7:68:94:1F:26:27:D4
            X509v3 Authority Key Identifier:
                keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:80:a2:61:0f:d1:79:cc:d4:44:1a:0c:44:45:19:61:37:4d:
         bc:31:94:b5:cd:d0:2b:4b:28:37:8b:e3:f8:f6:bc:2e:00:14:
         11:6f:20:56:0b:38:2b:1d:37:95:e1:3f:d4:db:5d:af:75:58:
         a9:b3:61:e2:8b:d0:0a:90:0c:8e:23:2b:e5:6e:c9:85:13:36:
         13:84:31:f9:8e:57:60:57:a9:a9:cc:06:0b:24:c3:fe:78:e3:
         e7:59:ce:a7:21:93:ca:f6:c3:00:3f:40:e2:8b:0c:36:12:87:
         e1:fd:e7:3b:44:1e:b6:c1:a2:0b:35:42:be:84:dc:9e:d3:4f:
         54:0f:0b:89:83:dd:c8:2b:2c:23:f0:7a:2e:4c:46:22:ee:bd:
         96:8a:45:a1:b2:3b:5b:8c:e9:e1:0d:60:29:45:f8:e3:b1:29:
         34:db:c4:32:7d:21:56:0f:09:fa:f9:42:81:56:54:76:7e:78:
         77:e3:b3:f8:d1:25:3a:ab:15:8b:fb:3b:e7:67:ce:f5:53:88:
         f6:2a:65:63:4f:9f:3e:dd:94:c6:bc:ee:4a:13:bb:ac:e9:a9:
         8a:81:e0:ef:b5:cd:55:06:dd:a4:28:d5:83:6c:13:e2:24:e5:
         ea:11:86:b0:f8:3a:15:e6:64:cd:a0:3a:57:c5:2a:e7:0a:a6:
         f6:f3:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:33 2026 by rpki-client