This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File:                     oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier:          m9juQl12/5Bbz2BrYj9uxo0+QhLy1QC2TkoKxZ48U6U=
Subject key identifier:   84:71:27:3A:EE:A7:36:17:68:FA:37:74:F2:71:64:FE:91:B0:EE:E8
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer:       /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial:       019C1CF0CD7D0473A4F8A8FA600746CE1661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number:          08D6
Signing time:             Mon 02 Feb 2026 06:01:09 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:09 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:09 +0000
Files and hashes:         1: 0suRCo-bzD4_wCdS0bD7dThrxnc.roa (hash: wYzbnfgbRv8G8hJvN4xYggJP/XRjyk7dwQh4KwDNFG4=)
                          2: QZvuA2NHdvCmA1cVCHhsj1Prmc0.asa (hash: /Zv3rmHNuTLRGSfDstJxC4GDyC7D3phMMFsA4VMndXc=)
                          3: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: OPA4hjrXdSAc81ANG9c4btwpVjGgkaLOBCr0B7p31a8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f0:cd:7d:04:73:a4:f8:a8:fa:60:07:46:ce:16:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
        Validity
            Not Before: Feb  2 06:01:09 2026 GMT
            Not After : Feb  3 06:01:09 2026 GMT
        Subject: CN=8471273aeea7361768fa3774f27164fe91b0eee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:31:b6:82:9f:d1:3c:12:eb:4d:2e:58:ce:
                    04:46:21:19:c0:ba:ea:69:98:08:4d:12:b6:06:0b:
                    9e:86:0f:90:2a:3b:14:2f:17:61:aa:a0:c3:0f:06:
                    21:4a:02:56:73:77:59:bf:46:ca:40:1f:b6:87:bc:
                    6a:2f:55:8d:48:b7:ce:e7:e8:65:60:01:17:1d:b8:
                    e0:ef:22:ff:2a:81:be:a5:f6:3a:be:ee:e0:dd:14:
                    fa:18:76:0a:15:e8:76:08:ee:ba:43:6a:e8:3e:18:
                    87:4e:40:ba:b1:62:a4:db:f0:5c:5c:23:9f:17:60:
                    0f:e1:41:cd:ea:be:b8:39:be:72:94:ba:3d:36:61:
                    29:dd:9f:1f:a6:1b:4a:72:69:3a:c7:0a:c3:0b:c4:
                    73:34:2b:bb:d5:33:3d:df:1a:ec:89:73:49:5e:40:
                    30:32:8d:f6:b9:fa:6c:d0:fd:29:ab:0c:61:e4:74:
                    9a:6c:22:0a:3b:84:c4:10:e8:79:63:e0:e0:97:96:
                    e6:8d:e9:5e:22:45:7b:3d:2c:0d:8f:df:a6:45:59:
                    14:04:7b:13:e2:d0:ff:5c:58:6a:d5:bd:78:52:13:
                    8e:af:ee:27:87:37:c3:48:ec:1c:7f:3e:2b:b4:97:
                    67:25:b0:b5:02:48:46:97:1e:dc:78:84:5a:ab:06:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:27:3A:EE:A7:36:17:68:FA:37:74:F2:71:64:FE:91:B0:EE:E8
            X509v3 Authority Key Identifier:
                keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:bc:54:14:c0:83:ad:93:10:53:41:73:29:cd:25:40:0e:49:
         98:66:73:70:ad:26:48:48:36:a8:c9:9f:8c:8b:97:da:7d:2e:
         d7:36:a2:fe:c8:d1:39:be:e5:a9:09:be:80:1f:e9:e8:f9:2b:
         ab:96:35:32:cf:a0:48:2f:d3:0d:c3:04:f2:75:a9:6b:43:6b:
         52:9e:fd:ae:e0:17:83:1c:69:cd:d2:0c:a9:23:c5:0b:14:e9:
         b5:db:f5:6e:13:78:aa:37:84:56:d8:c4:88:ec:66:72:b8:19:
         df:ab:d5:cb:e9:1b:a1:2b:e8:96:8f:cb:b9:10:aa:e7:31:de:
         72:7e:d2:71:72:6c:86:6b:ab:8d:eb:9d:1e:c0:94:de:45:72:
         62:cc:1f:2e:22:4b:b3:54:b4:1f:09:40:65:f9:31:68:d4:9d:
         7a:8e:d3:05:8d:f3:8f:06:d5:ab:a9:6b:11:e6:bd:3d:f7:a8:
         b1:4e:3c:ae:54:ab:1d:36:08:ac:ea:5b:22:22:2e:c8:e7:0e:
         5a:7b:f3:57:eb:a4:c6:fb:b0:5e:24:c6:98:41:4e:fb:c7:f2:
         ac:5e:dc:d4:3f:4c:90:7b:c4:44:e7:29:3c:51:33:12:33:f0:
         19:27:4f:90:fe:bc:ae:b4:7d:b1:66:e9:78:da:fc:2e:f9:72:
         12:48:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:10 2026 by rpki-client