This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File:                     OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier:          nKNCRZEi7yGj2bk4xaL1aIBx+uSNOfinxw3ee9Cv++Y=
Subject key identifier:   D1:89:7C:CA:62:2B:BF:91:9F:5E:BF:33:69:15:02:C6:66:16:73:12
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer:       /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial:       019C41A22D7D9045884C072D9086A6476DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 09:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:13 +0000
Files and hashes:         1: CnM-0w0gilOkRdDZyrSW-bGkUN8.roa (hash: CtJFwzlRxzFJ7o0tp3Fs5nZt739BQjSPnxG0LvzcP4g=)
                          2: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: w/NPs0tUSWrESraVYIfZHhnlLCLEMtLRve2Bk3QRF1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:2d:7d:90:45:88:4c:07:2d:90:86:a6:47:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
        Validity
            Not Before: Feb  9 09:01:13 2026 GMT
            Not After : Feb 10 09:01:13 2026 GMT
        Subject: CN=d1897cca622bbf919f5ebf33691502c666167312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:20:78:9e:8d:72:3f:bb:69:b4:85:23:3c:
                    e1:55:6b:97:c4:f9:aa:12:b2:bc:1c:62:c6:47:86:
                    71:38:e6:1d:ec:f7:e3:2d:81:e4:7e:1f:c5:00:99:
                    98:f3:85:89:11:82:22:bc:18:c7:2a:fb:eb:18:61:
                    bb:cc:1b:ba:43:1c:84:bc:d8:92:c4:84:3b:b6:8a:
                    e5:5b:02:f4:48:cf:fb:34:ec:12:8b:4d:16:34:2e:
                    c4:5c:6d:3f:9c:06:5f:a8:c6:ab:77:19:e5:21:53:
                    de:a1:df:d6:b8:07:3a:fc:ef:78:f4:79:11:ae:4a:
                    cc:2a:00:51:e0:02:f6:46:45:26:27:ae:3a:b4:49:
                    14:6e:31:59:a7:0b:49:b9:dc:03:03:36:33:a2:f1:
                    63:14:3f:71:a8:bf:6c:8a:33:42:03:23:a8:80:62:
                    6f:04:cb:10:7e:c9:a5:49:59:11:23:c5:ab:9d:8f:
                    0d:15:1b:f3:fd:32:2b:d2:02:58:2e:67:59:df:e2:
                    75:0e:05:c9:61:05:19:a6:f3:94:1e:29:b7:39:ab:
                    dd:00:b8:fb:f5:83:4d:86:f2:64:39:3a:1d:23:bd:
                    a8:ad:d1:38:3a:02:e7:b5:f7:27:7b:22:eb:d6:45:
                    f6:7c:89:65:eb:41:f0:3f:45:c0:3c:b5:1e:17:f3:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:89:7C:CA:62:2B:BF:91:9F:5E:BF:33:69:15:02:C6:66:16:73:12
            X509v3 Authority Key Identifier:
                keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:a8:cd:2b:c4:43:a8:73:b0:b5:94:8e:30:ff:b4:cb:11:
         83:9d:89:b6:7d:b8:ff:e3:34:de:b6:4b:1e:1b:52:32:9c:0e:
         47:48:18:82:f3:03:eb:ec:e4:ab:fd:68:b8:ce:e7:8d:0c:a4:
         f5:7b:fb:5a:07:31:0a:59:c4:7a:17:27:89:b9:ce:78:4b:5a:
         8e:30:0a:3a:ce:80:29:b5:b8:a9:e2:c8:fc:15:a4:b3:2e:62:
         af:7d:3d:1d:55:98:ed:ef:20:cc:4b:bf:3e:3c:7c:20:06:27:
         8c:91:f6:10:e0:57:92:b6:04:9c:42:42:99:70:96:1c:26:ff:
         b5:66:2e:06:51:96:31:be:a4:3a:fb:f2:72:bd:6e:0f:cc:e4:
         40:09:f8:68:71:e5:de:fc:fb:4d:78:ec:2e:79:95:c2:2d:55:
         34:71:bd:d3:5a:40:2d:68:39:8e:28:0f:e7:ff:7e:80:28:66:
         57:24:df:d0:d1:f3:5b:a3:33:7b:52:f6:f9:ac:0f:15:e7:73:
         e4:6a:f9:1e:85:67:2f:d2:92:c0:3a:52:68:e0:60:cf:f4:8c:
         e0:ea:04:9c:2f:c6:e3:47:d7:29:7c:22:b9:e1:18:7c:c0:0e:
         3f:46:c4:75:d0:53:05:cb:44:04:03:52:03:7b:04:e6:46:88:
         e0:9e:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:33 2026 by rpki-client