This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File:                     oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier:          try7gOtY2z93U706fw5yNjihUgQNCQcS1qxDhEuzvi4=
Subject key identifier:   7E:0D:FF:A1:F4:13:4D:79:4F:06:E8:B5:0A:99:9F:A8:F3:14:1D:05
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer:       /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial:       019C427DE9F6999B6E9E1659A225A46A6689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number:          0D56
Signing time:             Mon 09 Feb 2026 13:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:13 +0000
Files and hashes:         1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
                          2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
                          3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: aZjgn4uMP2G8jGTrOPEYPlhv7FbKS9/lX3HrPsTLg/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e9:f6:99:9b:6e:9e:16:59:a2:25:a4:6a:66:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
        Validity
            Not Before: Feb  9 13:01:13 2026 GMT
            Not After : Feb 10 13:01:13 2026 GMT
        Subject: CN=7e0dffa1f4134d794f06e8b50a999fa8f3141d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:6b:b0:78:54:93:c3:44:d0:ef:3e:42:f7:
                    ac:05:b9:4b:47:11:24:2d:43:b9:51:a3:18:19:21:
                    80:87:30:61:d7:d4:27:b6:c5:5e:5c:d5:41:c0:42:
                    ae:f2:4e:65:be:e0:e5:a7:79:0a:13:1b:1a:4e:08:
                    f9:4c:5b:37:b4:d5:5f:f7:c9:af:ba:0f:99:7f:16:
                    e8:34:cd:b9:7b:34:74:cd:e5:b0:e8:b7:62:0b:29:
                    c3:95:41:69:b8:63:f2:24:55:7a:34:45:38:33:01:
                    77:47:5e:cf:7e:03:1c:74:eb:5f:d8:2a:e5:66:d6:
                    7b:01:81:67:d9:de:07:d4:d0:ee:5f:05:7c:ee:fc:
                    4e:f8:aa:f1:c8:af:5d:71:80:2d:af:0b:cf:7b:a4:
                    ab:25:ed:65:cc:97:eb:12:1d:7d:34:24:bb:d1:d0:
                    ce:2f:d5:62:c1:c5:13:ab:13:8b:da:bc:17:9e:6f:
                    39:09:30:aa:85:d6:74:0f:7d:30:cf:8e:33:f0:63:
                    89:88:2f:ae:00:2e:5e:69:02:53:55:1f:e3:c6:cc:
                    88:c5:be:cb:b1:35:d4:0e:e9:b3:f9:a3:79:1b:f1:
                    8f:e0:4d:4c:93:33:b5:70:33:b7:20:2a:b1:fb:e7:
                    83:5b:f8:87:31:d0:f0:7b:0b:36:da:2b:6a:a4:de:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:FF:A1:F4:13:4D:79:4F:06:E8:B5:0A:99:9F:A8:F3:14:1D:05
            X509v3 Authority Key Identifier:
                keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:16:b4:f5:56:d5:d8:d7:b3:3c:fa:d7:ff:30:cf:33:a4:1b:
         39:9f:ce:95:4a:b8:0b:73:b9:db:bf:6d:34:4d:c4:cf:7c:5a:
         07:2f:4f:e6:45:7b:0d:e0:8c:2d:84:97:d2:46:89:06:9c:96:
         f3:23:dc:f9:45:6e:e6:f5:0c:30:70:ec:d0:0b:d1:ec:10:3d:
         17:59:69:b4:f3:d0:8c:62:a0:ad:b4:e8:c1:8b:0c:62:50:57:
         12:1b:b3:93:41:2e:cd:b2:00:d8:91:6d:9e:c0:1d:41:33:79:
         8c:67:48:22:c3:96:61:d4:ad:81:db:0a:8b:32:78:5f:6a:7c:
         9c:26:18:81:73:9f:c9:b3:ac:61:e9:c3:66:34:51:46:cb:96:
         04:20:93:20:58:86:cf:f5:f9:bb:36:b6:52:9c:32:91:e9:9c:
         b5:02:9c:bd:7f:5d:7b:ae:79:75:13:f6:3b:1b:b5:ed:0e:b9:
         5d:92:ff:69:0d:a2:48:59:2e:e2:b3:42:8c:1c:be:8a:49:56:
         29:35:8d:2a:57:af:9c:f7:00:cc:ae:ae:21:ec:43:e5:0a:b9:
         f4:23:f9:04:34:74:3c:1b:07:a2:f2:2e:eb:b7:0c:e2:6c:55:
         e6:61:71:74:22:da:fe:cb:14:89:6f:ab:ea:fd:a9:da:b7:1a:
         b2:61:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:58 2026 by rpki-client