This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File:                     oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier:          26v4mkGCWcC6sU52gHkcJNgE/MJ1La/yXbSkzu9V9K4=
Subject key identifier:   2E:2B:90:C2:5D:E8:FE:C8:51:14:18:39:D0:6A:11:EA:29:EA:3C:F8
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer:       /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial:       019C4246C4F5DD4B4247F12AAFDED2B56E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:59 +0000
Files and hashes:         1: 27jrzr1xWogH3ddsATux5O5Jw1A.roa (hash: xfv2vIRKihnS8ExH9lEFM1xLctm/mcM8AdL4KJZKGlc=)
                          2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: urLO7DW5bChJ9iUJBiGG6s4Q7Nzr4Wmex8GHkI+9jV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c4:f5:dd:4b:42:47:f1:2a:af:de:d2:b5:6e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
        Validity
            Not Before: Feb  9 12:00:59 2026 GMT
            Not After : Feb 10 12:00:59 2026 GMT
        Subject: CN=2e2b90c25de8fec851141839d06a11ea29ea3cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:e6:80:16:5a:c0:2c:4f:14:d5:42:b1:19:
                    14:fb:fd:8e:1c:d4:11:2b:33:b3:59:d5:92:11:7a:
                    91:c7:83:24:60:4e:e3:fa:ad:e3:2c:ba:4d:e9:22:
                    c2:2b:d9:34:34:e3:b3:8f:0c:85:d9:f9:35:51:7c:
                    b2:32:b7:c1:eb:17:b8:d1:dc:40:b7:0d:77:27:66:
                    9b:02:ef:fd:9b:3c:44:83:d4:5a:77:94:b4:01:bf:
                    10:42:d5:c5:b2:09:43:85:10:2b:1e:23:3b:9a:6d:
                    e2:56:27:88:27:01:c6:f5:ef:23:5c:f9:34:6d:c8:
                    2c:fc:ec:ce:51:02:3d:81:a0:ee:19:45:ca:74:9d:
                    ee:aa:43:62:14:5d:3c:97:92:89:dc:bd:a4:d4:a6:
                    40:cb:54:ee:ff:cb:86:95:13:39:38:67:65:a9:92:
                    3b:5e:a5:49:ad:8e:30:b4:17:36:28:13:ad:00:51:
                    2a:3b:1f:eb:28:02:a3:ba:2d:09:5d:24:1c:ec:10:
                    8d:4a:41:7c:7f:ba:61:9a:13:16:48:d0:88:be:85:
                    52:b6:de:61:7b:05:5c:ca:6a:49:d5:d9:be:ed:2a:
                    3e:55:e8:4c:a0:fd:b4:22:59:5e:71:de:b1:85:a2:
                    40:f3:f5:2a:01:15:af:47:da:fb:4a:5f:85:f4:92:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2B:90:C2:5D:E8:FE:C8:51:14:18:39:D0:6A:11:EA:29:EA:3C:F8
            X509v3 Authority Key Identifier:
                keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:d8:a0:b0:d3:f6:27:75:09:f0:6c:02:58:ea:28:73:7d:
         52:11:25:5f:4d:c7:fe:0a:b7:05:6c:e0:bc:9a:ab:5d:e7:c8:
         15:e9:c6:11:91:d6:ef:66:8f:3f:fd:8e:f8:e7:c4:ff:36:93:
         3c:31:16:28:34:bd:02:7f:7c:a2:be:4e:4e:fb:ca:bb:d0:51:
         a9:c4:b9:cc:7a:1c:1f:09:49:5b:5a:ab:c2:ea:14:04:c2:9b:
         1e:ed:87:95:dd:4f:56:62:3e:64:61:91:c5:db:09:11:6c:89:
         ec:1c:35:7e:2c:69:fd:34:2c:6c:e4:0d:21:6d:15:6c:f3:5a:
         d0:15:18:81:91:d6:84:ac:6c:3c:a5:a8:0b:3a:df:1e:65:d8:
         10:54:0d:e6:1a:e2:41:20:84:f9:ef:68:fd:41:27:92:6c:f6:
         1b:91:73:86:d3:90:41:41:18:03:4d:39:da:5f:91:e4:29:cb:
         a7:6d:fe:38:73:4b:99:7c:5b:18:4c:23:2a:c6:13:dc:82:97:
         69:35:d3:ac:2c:8b:be:c7:5f:e2:71:5f:db:0f:4f:53:1a:79:
         e5:e2:05:0b:21:99:95:47:db:ea:5f:a4:b2:b7:9f:28:88:fa:
         6d:5d:8d:97:ad:11:d2:cd:49:13:f2:e8:c8:4b:36:46:68:ff:
         c7:bc:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:34 2026 by rpki-client