This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File:                     lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier:          e2T5+A7jE32leTLAku05pjbBNAkTU4DQENxkTM99srE=
Subject key identifier:   9A:FF:65:DB:49:B0:53:17:9F:1A:C7:F9:84:FB:68:F9:C9:FD:A5:7D
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer:       /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial:       019C432222328F0AC916089179BB3A6C88A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number:          0B7E
Signing time:             Mon 09 Feb 2026 16:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:36 +0000
Files and hashes:         1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
                          2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: wjZIH5jDBT0b4qUm56CoxkrrvYVGFuy6GlixyJKz+K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:22:32:8f:0a:c9:16:08:91:79:bb:3a:6c:88:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
        Validity
            Not Before: Feb  9 16:00:36 2026 GMT
            Not After : Feb 10 16:00:36 2026 GMT
        Subject: CN=9aff65db49b053179f1ac7f984fb68f9c9fda57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:20:39:ab:74:ea:fd:b5:0b:0e:b9:7a:1d:
                    9f:6a:8e:c1:b8:3b:58:ad:4c:9a:dc:46:69:6c:57:
                    8d:dd:63:4a:d9:04:89:0f:b6:a5:3f:a6:78:ca:02:
                    12:41:15:d8:4f:bb:96:42:e5:87:fd:1a:c4:23:34:
                    89:c6:a1:a6:5b:c6:be:b6:96:c3:07:fe:32:c2:58:
                    18:12:7f:1b:69:9e:d0:b0:8a:07:86:2b:dd:b3:dd:
                    3e:93:a8:60:a2:fd:b3:3f:03:64:45:4d:15:04:7f:
                    24:9d:af:9b:ad:a4:0a:76:55:f8:1d:3b:17:9e:cb:
                    f0:cc:7b:4b:ba:a6:32:a7:ce:c5:a4:08:5f:7f:de:
                    4d:8b:c9:30:a3:04:94:0d:00:72:56:3d:77:d3:16:
                    4c:6e:b5:7c:fe:15:5b:13:c7:2c:7d:76:28:06:b5:
                    2f:71:7b:3f:f7:1e:1d:e3:d8:d1:6f:b4:87:d7:70:
                    a1:ea:b7:6d:48:b3:4d:2a:c1:5d:5f:c8:19:b1:71:
                    d6:28:b1:19:9f:88:92:d8:8f:61:bc:c5:09:d4:bd:
                    11:f0:8c:33:e5:75:8e:63:65:8f:f1:20:14:b5:ac:
                    45:87:70:1b:38:23:71:ba:82:7e:13:a2:c4:4c:38:
                    35:e7:90:f6:f8:88:ff:72:8c:05:d1:47:82:5b:5a:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:65:DB:49:B0:53:17:9F:1A:C7:F9:84:FB:68:F9:C9:FD:A5:7D
            X509v3 Authority Key Identifier:
                keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:e5:3d:e5:1f:17:5a:7e:5f:01:40:f1:f3:80:da:21:05:
         15:33:b2:d9:27:f0:a4:55:dd:f7:00:63:b7:97:68:79:f8:09:
         30:7a:bb:ae:8a:37:3a:de:f0:b9:74:b1:ef:80:2d:21:05:70:
         69:ed:b9:59:d4:84:3e:ce:de:2b:e7:31:25:45:e2:9e:6e:8e:
         ec:a4:1a:56:4d:4b:3d:00:f8:15:e7:c4:3e:4b:7b:00:89:a7:
         82:20:a6:ef:db:9a:32:5f:3c:cf:12:ef:6e:82:fd:78:b7:4a:
         4c:53:f4:52:75:4d:94:90:7d:14:7b:1b:47:20:ec:fa:14:71:
         64:71:16:ab:15:cb:81:40:02:86:c0:ed:11:02:d0:d4:f9:c5:
         7c:52:e6:5b:aa:c6:a3:58:77:ee:d7:38:f8:bd:df:f1:1e:8e:
         29:f7:b5:5b:77:15:70:44:69:70:30:4d:44:a0:63:06:36:04:
         fd:16:cc:9c:1a:15:33:6a:52:15:c4:53:19:30:3b:a0:7d:b8:
         54:24:45:9b:0c:14:e3:3e:61:48:21:0c:47:b3:13:8d:b1:03:
         ec:e1:e4:58:cf:6e:2e:c3:e0:72:0a:7d:67:4f:81:07:7e:98:
         59:75:c8:a3:0a:60:21:45:10:c7:7e:6e:ef:44:10:4d:1c:8a:
         b7:40:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:32 2026 by rpki-client