This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
File:                     OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json)
Hash identifier:          y8y+ok6CtxMNtx4XkZV8wzVtrciV8/D5PjVoUtG7ipk=
Subject key identifier:   01:80:7A:F7:38:59:20:83:A4:9F:19:B1:AE:69:EA:CF:02:91:65:C7
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Certificate issuer:       /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial:       019C4390CA963FC254F97F57A18E2E89EB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
Manifest number:          02D6
Signing time:             Mon 09 Feb 2026 18:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:28 +0000
Files and hashes:         1: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: cui6pYxor1E6tHDWY18XWLE0cfdH1xIhtG9DkC1cuFE=)
                          2: avpRzc4rlLKtPjM9Nx0tTIvXDJw.roa (hash: IhFfZxmSF0cAaOFLNU/UGx/v0dCXUziLntdrEkHsx9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:ca:96:3f:c2:54:f9:7f:57:a1:8e:2e:89:eb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
        Validity
            Not Before: Feb  9 18:01:28 2026 GMT
            Not After : Feb 10 18:01:28 2026 GMT
        Subject: CN=01807af738592083a49f19b1ae69eacf029165c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:4f:6a:2d:94:bb:4b:8f:ac:fb:3e:09:e1:
                    dd:6c:37:ec:61:bc:21:4d:14:c4:b5:eb:60:12:b5:
                    a7:4a:35:5a:fc:ba:33:fe:45:84:df:be:2f:67:51:
                    18:b0:c2:3d:6b:74:48:3b:0b:61:4a:2e:a9:93:c0:
                    8a:3b:12:5e:4d:31:7c:0b:c6:67:59:4c:c6:1d:69:
                    b4:a6:dc:45:58:8a:9f:79:dc:49:15:41:a2:7f:9d:
                    fd:95:d7:2e:16:f8:d0:ff:45:e1:61:38:0b:08:1e:
                    a1:54:87:ce:26:fd:56:8d:3a:ec:43:b8:37:8c:7c:
                    de:7e:a3:13:eb:f7:39:1d:d4:67:d9:89:74:c3:2b:
                    93:d3:e6:7c:66:79:98:05:b9:f9:58:7d:c4:74:28:
                    1f:94:da:ab:6d:93:3f:e0:ec:8b:9f:79:03:2e:fb:
                    f5:c0:69:ce:5c:54:65:a8:a3:0a:be:f9:26:bc:ee:
                    ea:55:5d:d0:a3:20:3c:15:36:fd:71:f0:05:b2:a3:
                    b5:80:6f:11:28:f4:e4:67:ce:fb:c0:c5:ac:16:24:
                    d2:0f:ff:c5:8a:9f:f0:7b:03:b8:55:f2:88:2d:c3:
                    6b:65:be:6e:e4:cf:11:31:b8:53:f2:2e:78:9d:61:
                    64:20:c6:48:66:fa:19:9d:ce:d5:5f:06:db:bb:bf:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:7A:F7:38:59:20:83:A4:9F:19:B1:AE:69:EA:CF:02:91:65:C7
            X509v3 Authority Key Identifier:
                keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:81:0e:d2:33:02:8c:3f:7a:83:2d:d7:58:3a:b1:07:89:fb:
         39:26:e6:9a:25:72:11:c8:b9:02:8e:af:dc:11:58:fb:15:c1:
         7a:6c:c4:d1:22:40:03:d7:84:7a:28:05:f3:61:a3:4c:62:42:
         6f:cb:f8:83:da:c2:a7:7a:38:f4:a6:e2:57:88:f1:84:9b:96:
         a2:14:e5:a3:19:85:ce:4c:f4:16:8f:fa:29:d6:85:53:ac:b2:
         f2:16:e6:20:5c:c4:76:30:48:ac:af:f5:81:b9:01:62:0a:c7:
         f0:02:17:35:2d:4c:14:8d:c7:4d:38:b0:06:44:2d:01:8c:d7:
         b8:28:44:42:45:3d:5a:d1:ee:fd:b1:37:4c:bd:21:31:fd:a0:
         c7:e3:f9:81:bc:7e:9b:3d:28:24:88:e2:ef:55:f4:34:e8:c2:
         93:08:84:b9:3c:aa:35:3c:ff:ef:cd:71:17:26:97:dc:4e:bf:
         c2:74:af:2f:ae:93:a2:7b:00:96:eb:8a:18:c8:99:c0:75:36:
         62:70:d1:5e:98:a8:1e:bb:69:3b:81:bc:ff:75:fc:ea:35:a7:
         38:7a:07:fc:d7:d5:12:27:19:ef:b6:7f:8f:0e:97:32:7a:49:
         8a:f1:f9:f0:df:d7:37:bb:74:55:79:6f:eb:df:79:a5:d1:56:
         16:35:78:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:47 2026 by rpki-client