This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
File:                     OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft (raw, json)
Hash identifier:          DJt/g1oI3Gfdb8709mNuXJqkz2aS9D9Ne6W/0FfyDAA=
Subject key identifier:   0F:C0:A5:1A:2C:C0:21:6F:B0:55:60:3D:6A:DC:D4:4B:8C:7A:FC:AE
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Certificate issuer:       /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial:       019C1D5EB44FD52B65CEA81553D39E735DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
Manifest number:          02E5
Signing time:             Mon 02 Feb 2026 08:01:11 +0000
Manifest this update:     Mon 02 Feb 2026 08:01:11 +0000
Manifest next update:     Tue 03 Feb 2026 08:01:11 +0000
Files and hashes:         1: 9gXM3yfKHBM3QnslkthNSxhDRqc.asa (hash: k3sTrvbBG8RnZfnyvtzcpTGj5BacMFrWy8nQf2dydoU=)
                          2: Er__-mawdWtfJYo27OSwzFEKh4I.roa (hash: 3+hqNrIKDCMKOTErNC2JHDYWjmcm2NO8EQA4bB+7LrY=)
                          3: OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl (hash: sj73LHyqWxlm8BnHdMslqnAvim7y10MUKS5lZCypOpY=)
                          4: WVTec6WdlinW2NDLGRvaP7XGcrE.roa (hash: AVgu0/9AF/Q2loFPcgeDLiO4K7I+K+GfkMpa0wfObDM=)
                          5: cwK1oTMqHeWuufTdF2FowfL1ogw.asa (hash: pm/Dfj8iYXq7lxGmzXb0fegEvMVKmOFBxrnejfUXAtQ=)
                          6: kM7kkRJAnyhiR2AyP4z2W0PrTko.roa (hash: edUHC8QdgxZgr0+NMK6wBUM4b3MOnD79gO72E96zVk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:b4:4f:d5:2b:65:ce:a8:15:53:d3:9e:73:5d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
        Validity
            Not Before: Feb  2 08:01:11 2026 GMT
            Not After : Feb  3 08:01:11 2026 GMT
        Subject: CN=0fc0a51a2cc0216fb055603d6adcd44b8c7afcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:40:a8:a6:1b:c6:e4:a1:1a:fc:13:a0:f9:
                    d1:a9:20:78:0e:44:ab:3a:6f:0b:92:ab:8d:c6:f9:
                    5a:18:f6:c4:c8:78:f2:80:ff:b1:10:39:b8:84:ec:
                    86:15:98:48:ca:d7:61:a7:40:84:c3:60:48:b9:96:
                    d4:cd:c5:ea:ef:a2:97:14:94:96:8b:78:68:e6:6c:
                    97:43:b4:d8:58:2a:39:9e:de:d9:ec:6c:92:18:c4:
                    c5:f4:86:46:a0:31:7e:59:ab:b8:bc:85:ef:c8:15:
                    7c:89:40:1b:53:93:13:0d:8c:f2:1c:a4:9d:0e:c6:
                    aa:b5:c6:a8:8b:ab:79:cd:0c:7a:98:95:2f:76:81:
                    c5:ee:57:4f:31:31:0a:54:45:c8:21:72:5c:bd:b5:
                    2d:8d:b7:73:b5:6f:42:51:b9:2c:9f:ad:ad:ba:95:
                    47:1e:f3:a6:9d:68:94:bd:46:2f:47:fd:1b:de:e5:
                    b9:ca:67:c0:ae:c7:0e:18:1d:5c:0c:79:b3:9c:99:
                    25:86:d7:8b:41:83:27:5e:62:6f:ad:37:0f:f2:5f:
                    41:2a:07:0b:d6:60:f5:64:67:43:f7:32:2e:08:ac:
                    c8:0d:d0:26:4d:f6:79:67:94:6b:4f:41:dd:4b:a8:
                    23:ba:c9:e9:30:64:f5:aa:09:07:cd:c4:62:29:e3:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C0:A5:1A:2C:C0:21:6F:B0:55:60:3D:6A:DC:D4:4B:8C:7A:FC:AE
            X509v3 Authority Key Identifier:
                keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:49:b4:68:f2:01:24:d9:22:62:67:a5:6b:1a:4e:d1:75:72:
         13:88:2f:4a:64:0b:ae:d4:75:57:12:53:d4:bc:0d:ad:30:53:
         79:0e:1e:60:d5:5f:aa:fb:bd:5c:09:aa:04:7b:88:b2:cd:22:
         2b:1a:1b:f9:3d:d2:40:92:73:13:e7:5b:4e:90:c5:f1:de:c4:
         61:9e:ac:d7:aa:5d:1c:e1:ff:7d:f6:65:27:15:e9:7b:d2:dd:
         44:e8:e5:e9:ff:d9:bc:72:4e:f4:39:d3:52:b3:87:ea:7b:73:
         ec:b1:98:12:f4:cd:9d:61:96:d4:52:1b:87:e3:c9:b1:68:43:
         e8:9e:b9:4f:41:6b:11:b0:be:6e:25:c6:79:56:7a:9f:bc:7c:
         51:86:1d:e7:26:a5:38:0e:d0:2d:cb:17:56:a6:50:ab:90:ef:
         71:23:b4:f7:12:46:7b:2a:4f:53:f8:9a:00:b4:d4:b8:c7:7c:
         2b:fe:67:b5:c0:c8:80:78:f6:2f:7d:53:ad:9d:90:de:a5:39:
         41:a0:9e:06:1d:78:7c:83:21:26:44:bb:1b:c4:df:93:ab:ef:
         a1:11:cb:2b:ef:a5:39:3b:55:bf:c1:bb:7e:4c:f8:73:df:60:
         c8:4a:0a:ab:73:61:b9:6c:b4:48:a8:d6:61:37:b3:b6:5c:f7:
         6b:51:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:29:07 2026 by rpki-client