This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File:                     o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier:          PVPoRu374EbHwon9YggAruben4AN2AYHwWKQdZVVF/0=
Subject key identifier:   AC:E6:BA:16:3C:D1:9A:E4:D1:CD:97:6B:D2:9C:52:71:E8:D0:D5:26
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer:       /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial:       019C43593D65F05EBCADDC63FE8DE502BDF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number:          0D5B
Signing time:             Mon 09 Feb 2026 17:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:47 +0000
Files and hashes:         1: 1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa (hash: P4rr0sjF2JMQ0Puk//ntxlDU0c1i5ZoIeElt4H2LfSA=)
                          2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: skuyQn7Toek4Sr83faTRprjHrSFbe6HI4bwnJWjZZ8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:3d:65:f0:5e:bc:ad:dc:63:fe:8d:e5:02:bd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
        Validity
            Not Before: Feb  9 17:00:47 2026 GMT
            Not After : Feb 10 17:00:47 2026 GMT
        Subject: CN=ace6ba163cd19ae4d1cd976bd29c5271e8d0d526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:0e:e1:a1:eb:cf:ed:72:25:53:89:20:09:
                    8b:a2:e8:30:21:e0:55:76:71:24:24:54:10:32:7b:
                    12:cc:d8:cc:0f:c3:46:f9:da:93:87:2f:90:c5:c1:
                    8d:5a:01:e7:97:df:df:51:12:b5:23:1d:6a:ff:5e:
                    50:fb:42:3a:47:22:5d:2d:4a:2f:31:84:0a:c1:eb:
                    c1:55:f4:0d:36:73:76:2a:e4:be:b5:1a:41:39:be:
                    9c:3f:17:51:58:f9:48:52:c7:f1:72:ba:06:10:4e:
                    c7:95:e4:f4:cf:5b:e8:3f:3f:c9:62:64:4c:9a:81:
                    8d:6d:94:e5:f6:05:af:c4:18:de:51:b1:37:4c:d0:
                    11:f7:20:ad:ac:e6:28:4a:35:e7:2d:30:56:52:80:
                    01:b2:81:e0:0f:41:c6:76:4c:5f:79:7c:fd:6e:df:
                    98:2b:50:5f:2a:2d:8e:f8:15:85:4b:b4:c0:4a:1e:
                    b1:e5:44:fa:f1:81:01:6f:73:5a:8e:8b:dd:95:80:
                    40:e8:6e:50:a6:fc:4c:49:ca:06:b3:40:37:f4:40:
                    60:c0:2b:95:fc:9b:fd:df:71:27:57:3e:5c:a2:99:
                    3c:68:0a:0f:c6:c5:08:30:37:1d:d6:e1:14:ba:cf:
                    5c:21:25:eb:7f:ae:b3:16:16:bb:aa:1f:20:0e:d0:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E6:BA:16:3C:D1:9A:E4:D1:CD:97:6B:D2:9C:52:71:E8:D0:D5:26
            X509v3 Authority Key Identifier:
                keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:87:cb:f3:f6:4e:6d:7f:f9:62:d2:f5:3c:f7:c2:14:73:
         63:43:4f:22:f7:89:b1:01:b4:56:b1:fc:d3:2c:f3:b4:95:3a:
         7c:78:9d:16:1c:34:52:29:c4:6e:22:cf:62:26:ec:17:48:80:
         43:50:86:73:d6:64:5f:fd:5e:ce:d9:4a:ad:a6:9d:4b:14:26:
         a1:10:9d:ac:82:66:5c:92:23:f7:53:5a:f7:eb:e0:5b:50:25:
         be:1e:22:2c:94:e4:8b:f9:12:b5:42:86:94:bf:c6:2b:5a:cb:
         db:4c:03:ba:5d:be:9e:22:fe:58:b2:b5:9e:4b:a1:86:f0:45:
         db:89:2b:2f:d8:9b:94:ff:d8:fd:9b:4b:37:30:10:31:da:34:
         d2:ea:ee:68:c0:b7:e3:24:fe:f2:5c:d3:71:8b:d4:4c:10:03:
         43:d4:5d:b4:e1:ca:f1:c7:19:ce:59:a8:f2:b4:f5:b0:d2:6b:
         2e:c5:e9:09:c3:62:fe:c9:1c:28:dd:38:d6:9b:95:04:6b:32:
         cf:e3:12:1f:f5:b3:24:cc:70:b0:28:ec:41:19:b8:a6:5d:1a:
         a2:f5:cf:98:89:08:e8:8c:89:a8:08:e7:6e:77:76:9d:8c:72:
         34:46:56:d6:ac:4a:e4:3e:27:b4:6d:41:dc:db:5a:2c:69:02:
         02:dd:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:41 2026 by rpki-client