This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          +MEkX5XthYQnEM0CBBGWfDlby02dYGaTaFxYqcP7TvE=
Subject key identifier:   8F:97:E4:A8:0E:D4:19:8C:EA:6F:CF:DA:27:E0:D3:2F:E0:F8:60:0B
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019C2585964B53D940B4ED510518B09E01F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          1837
Signing time:             Tue 03 Feb 2026 22:00:37 +0000
Manifest this update:     Tue 03 Feb 2026 22:00:37 +0000
Manifest next update:     Wed 04 Feb 2026 22:00:37 +0000
Files and hashes:         1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
                          2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
                          3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
                          4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
                          5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
                          6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
                          7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
                          8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
                          9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
                          10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
                          11: KhnFPatizLYzbuYdUdtwNlimK_A.roa (hash: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw=)
                          12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
                          13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
                          14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=)
                          15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
                          16: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=)
                          17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
                          18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
                          19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: dHFIL2qDy0ivrDnPKpBAFY9G5RiVuFg+2DjEFlub9mw=)
                          20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
                          21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
                          22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:85:96:4b:53:d9:40:b4:ed:51:05:18:b0:9e:01:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Feb  3 22:00:37 2026 GMT
            Not After : Feb  4 22:00:37 2026 GMT
        Subject: CN=8f97e4a80ed4198cea6fcfda27e0d32fe0f8600b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:9c:b4:4c:06:ed:4f:2b:2a:70:89:c6:c8:
                    74:8d:e9:b2:46:26:03:1b:da:35:68:e7:65:27:d8:
                    66:5d:21:d9:6b:ae:01:38:15:e4:b7:ae:c0:b3:5c:
                    e5:95:b8:e1:d7:35:23:c6:19:6f:4b:8a:c8:53:22:
                    7c:0f:11:73:5f:ae:bc:f8:3e:8e:14:55:aa:d0:77:
                    08:bf:fb:0f:bf:58:10:92:a1:89:d4:d3:aa:46:ae:
                    7e:af:a5:d7:53:74:89:7a:8f:29:ed:0c:13:f0:0a:
                    c4:b9:d8:6b:39:81:c7:84:bc:b4:72:2d:be:5b:95:
                    64:2d:5a:bf:bf:c5:53:d9:8c:de:12:82:45:4a:32:
                    9a:9a:39:4d:27:31:da:7e:b0:41:6d:77:35:af:75:
                    82:23:63:59:29:21:08:79:4c:16:27:d2:a4:f9:b0:
                    7a:f4:3f:4d:28:24:dd:7b:ba:5e:54:4d:70:4c:36:
                    b9:be:9b:c7:69:dc:39:de:dc:6a:f3:19:17:c4:b8:
                    1d:40:3a:2b:af:06:07:96:58:a0:38:e1:b5:54:5a:
                    97:32:e7:64:95:43:51:5d:98:7c:2e:19:0a:f6:e9:
                    b8:18:5d:fd:bd:ce:88:e9:d7:0f:4e:5f:e9:da:6c:
                    b5:b3:39:af:73:98:44:a5:f9:e6:29:92:67:fd:8c:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:E4:A8:0E:D4:19:8C:EA:6F:CF:DA:27:E0:D3:2F:E0:F8:60:0B
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:25:af:7e:05:64:f8:57:b2:d9:d5:63:fa:30:d2:40:49:
         74:08:dd:a1:d7:b9:e3:1c:3d:8c:ad:1f:13:d6:4f:61:e3:e7:
         52:81:5e:20:aa:5a:e2:fe:49:c1:8d:77:ee:d6:ce:28:98:12:
         e7:02:04:1b:98:76:56:f2:71:9b:29:ec:43:8c:9a:bb:b2:ff:
         c2:9c:9c:db:5e:b0:29:97:6e:3e:4e:c2:92:45:f1:14:3a:65:
         9c:1f:d9:e9:9f:5e:b9:fa:fb:94:60:e9:89:eb:97:2c:54:72:
         f1:77:60:55:75:a8:e7:b9:54:26:7d:b8:fd:01:f1:50:0e:99:
         32:3f:ba:3a:f0:0c:74:29:f2:e9:24:0c:73:68:04:81:a2:b1:
         b5:5b:0b:29:94:3b:5c:03:83:1a:a6:72:cf:26:f5:0a:8d:2c:
         2f:91:fa:4d:b3:d6:fc:23:38:54:17:ab:ff:31:f7:05:88:e2:
         53:9b:c5:7b:73:e6:18:e2:fe:4f:2f:37:de:1a:6d:f2:d2:f9:
         a7:d2:4e:95:5e:54:a4:a1:09:d1:a4:7c:71:d9:f1:82:9c:6b:
         52:48:56:38:f6:d4:37:44:f3:2c:2b:f4:a2:0b:e2:e3:cc:a2:
         cb:72:98:b1:db:2d:b3:d1:9b:3e:ee:5a:e2:94:2f:60:2b:c7:
         7f:02:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:20:46 2026 by rpki-client