This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File:                     oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier:          iyAETVBPPQxb1rp4MquTC0K9w1wBOqw0zuuivhzuPCY=
Subject key identifier:   45:94:FF:06:68:37:11:13:3A:2C:0F:D6:E8:55:6C:CE:A2:B9:53:A2
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer:       /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial:       019C420F98F0680EDC0B560B105E3227F2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:44 +0000
Files and hashes:         1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
                          2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
                          3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: ysWhR0gGIcfvzJD9zoq0c5+pDJdJA/RANpTzpFRQoPw=)
                          4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:98:f0:68:0e:dc:0b:56:0b:10:5e:32:27:f2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a10c73530bb684fd569dfc432704675704183429
        Validity
            Not Before: Feb  9 11:00:44 2026 GMT
            Not After : Feb 10 11:00:44 2026 GMT
        Subject: CN=4594ff06683711133a2c0fd6e8556ccea2b953a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:f5:d1:63:06:04:96:c6:57:9a:09:5e:25:
                    25:53:da:2a:82:6b:79:d9:09:d8:1c:aa:85:7c:bb:
                    3c:fe:7c:b1:a8:62:19:98:c4:02:c2:12:31:26:3f:
                    40:b1:dc:ed:58:b6:9e:59:9c:a2:50:80:6a:68:31:
                    f0:61:bc:3e:f7:2f:31:61:cc:a5:2f:a5:b8:36:51:
                    10:ca:ac:ac:82:92:af:13:9d:6a:38:21:e2:d4:b0:
                    cb:17:48:7e:51:b4:cd:6c:ee:63:ee:91:33:0f:c1:
                    29:04:73:08:a8:b5:38:f5:d0:e2:e6:68:f9:ae:49:
                    fa:57:56:3f:39:60:df:76:b6:4b:5c:3b:c2:0c:55:
                    6d:f2:4e:ed:9d:30:31:c7:58:12:04:5c:de:01:da:
                    7c:2d:fe:04:b2:ad:a4:22:b3:3a:e4:d6:31:62:a2:
                    0c:4b:78:f8:04:e7:d8:e9:61:f3:b3:c9:9f:99:58:
                    54:bb:c1:8d:5c:aa:09:3a:79:07:54:f0:aa:cd:fb:
                    db:a4:ab:09:95:c6:41:42:7a:3c:b1:38:04:e2:dd:
                    5d:5f:ac:0e:7d:b4:8c:8e:88:ae:94:af:bd:c3:67:
                    e3:05:7a:a2:62:d6:5f:78:ec:6f:9b:34:b4:1c:13:
                    d5:60:52:a1:8b:59:5e:fe:48:1b:51:7b:a7:0b:40:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:FF:06:68:37:11:13:3A:2C:0F:D6:E8:55:6C:CE:A2:B9:53:A2
            X509v3 Authority Key Identifier:
                keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:2f:53:61:65:c3:19:1f:d5:15:a8:7e:09:b2:5a:87:86:
         67:19:da:93:52:23:02:89:39:af:c6:aa:2b:00:9d:24:9e:4a:
         1d:de:13:fa:5b:f8:42:7e:3a:7a:be:c0:99:a3:f0:3d:d4:da:
         8b:0d:9e:40:c6:48:e3:f3:d1:d6:19:74:16:88:c1:e0:88:ab:
         3d:02:07:b1:52:43:fd:58:a8:60:c3:8a:73:fd:0c:1e:16:51:
         23:e5:e2:ee:39:c4:bd:55:e7:e5:ce:f1:b8:b6:82:6f:6b:d6:
         26:8f:69:09:33:78:e1:e4:f5:56:24:df:3d:76:93:bc:d5:22:
         8f:f5:ce:8e:7b:94:2d:8d:af:8f:86:4c:98:0c:d7:6a:78:df:
         1a:3e:1b:8f:20:c6:cc:2e:05:8d:82:d7:d1:61:82:12:b2:2d:
         bb:81:43:14:d3:88:bb:d5:32:11:eb:fc:7d:20:00:0c:40:7e:
         5d:3b:2b:51:8b:8d:f6:86:a0:4a:21:65:31:9c:a5:63:91:a4:
         9f:34:33:bb:c4:f1:42:a2:fa:7e:94:66:d8:6b:88:31:bc:96:
         4a:61:e1:2c:80:1b:1b:9f:cb:49:f6:71:67:0b:e4:37:cf:8a:
         0f:50:d0:6a:16:01:eb:16:6c:09:02:53:60:f1:1f:f1:4d:7e:
         5a:7b:f8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:04 2026 by rpki-client