This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File:                     OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier:          3QY6U8EaTusbQgWuBalOO8MkehaXrdbSTO1/sgny10Y=
Subject key identifier:   11:75:97:1D:40:1E:33:1C:8D:09:4A:7A:70:F0:A4:79:95:C3:2F:52
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer:       /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial:       019C42469CAC34D1EE15D52FE21309A48996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:49 +0000
Files and hashes:         1: 4QErYyNxMj17fmmm_V9KhVEYnPs.roa (hash: H4wqYD+7ia6e/4/SeX93ZuX1r2stfSvamQFuWxwWz9g=)
                          2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: B2EsPHlirbSBnvfc+MyRRDOFgILoe3kBPc9cbOUVqkQ=)
                          3: ts_UWt22Q4mWqxSB7ZFYxzHtPis.roa (hash: ftNvK4quhd+aCIDNnGQHvGWOv6HTZuEG7taZaiTGHxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:9c:ac:34:d1:ee:15:d5:2f:e2:13:09:a4:89:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
        Validity
            Not Before: Feb  9 12:00:49 2026 GMT
            Not After : Feb 10 12:00:49 2026 GMT
        Subject: CN=1175971d401e331c8d094a7a70f0a47995c32f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:3f:44:f9:44:be:18:01:77:44:a7:c9:c8:
                    6d:61:a5:83:38:2f:e6:75:dc:e8:bd:5e:c1:af:b6:
                    fb:32:46:f1:7c:7a:17:cd:2d:1a:30:03:77:9b:d6:
                    dd:22:82:4b:90:b5:25:d1:d8:01:92:85:77:12:12:
                    ce:de:fb:c4:b0:d3:72:08:60:9a:ba:67:a2:ec:05:
                    c3:2a:7f:0f:67:f2:d0:60:83:49:c3:e3:b7:7e:d5:
                    2a:a0:b0:78:c6:27:d7:67:1a:a6:01:8b:a2:17:b6:
                    83:c2:56:fd:d9:7d:04:15:d1:91:af:73:f6:fa:6f:
                    90:bc:32:98:27:c4:9f:8d:6d:60:66:b7:ee:29:96:
                    e7:cc:e0:ed:75:cb:71:43:5c:62:7e:c2:ef:f3:29:
                    0a:3e:70:af:c1:18:62:4a:3c:8c:2b:e8:ac:99:e9:
                    f1:2c:2f:f4:4a:03:6b:e7:fd:61:d9:2b:16:1a:ac:
                    e5:27:10:0f:20:88:46:b9:63:f3:9c:6f:89:34:19:
                    ac:e3:15:83:88:7a:97:a8:2b:31:fb:39:c2:41:ce:
                    5a:dc:45:c7:9b:71:9b:77:02:00:77:4a:93:7e:dc:
                    4f:37:46:ce:a8:5d:1b:ee:67:d4:1a:53:81:d4:5e:
                    bd:8c:07:2a:09:0b:9d:ca:4e:ce:f7:96:a0:4d:06:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:97:1D:40:1E:33:1C:8D:09:4A:7A:70:F0:A4:79:95:C3:2F:52
            X509v3 Authority Key Identifier:
                keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:5a:80:52:74:83:ae:c9:44:90:77:ea:47:43:21:a4:16:
         82:27:57:9d:41:44:6f:06:b5:69:a9:fa:31:c6:9d:44:0d:d5:
         f4:7a:b9:c9:74:39:33:cc:fb:87:35:4a:01:42:64:59:af:2a:
         24:8c:cc:2a:7f:f8:a4:05:48:6d:fb:0b:79:6d:7b:3e:3a:6a:
         c4:31:ae:57:92:0f:7e:1f:1b:0e:31:29:4a:4c:49:07:85:4c:
         9b:78:44:d1:3c:fa:8f:f1:ec:53:6f:5e:7b:51:5e:9c:61:1c:
         a4:0d:0f:e9:69:1b:e7:c0:a4:a0:8a:bb:41:3e:cc:c2:9a:46:
         10:4b:e5:59:b6:f1:f3:5d:cf:0a:b4:21:45:9c:7b:63:78:7f:
         54:03:52:dd:08:58:a2:a1:26:d2:06:58:3a:2f:53:1d:7a:b6:
         f6:c2:a1:25:b8:da:ba:28:7d:ad:01:9e:06:31:59:d9:33:60:
         1d:7b:46:c5:17:88:2e:3e:17:d7:90:48:55:cd:0b:0b:38:24:
         23:aa:ab:8b:ac:4e:a7:a5:10:55:10:27:73:ef:2f:0a:bf:a8:
         74:15:27:22:13:dd:7f:e9:ca:90:80:13:78:58:77:c1:c0:74:
         88:cd:79:03:49:66:cf:95:22:40:05:94:1e:a9:0d:2a:b4:a8:
         5b:ec:2a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:17 2026 by rpki-client