This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File:                     oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier:          qkk48QnqSPLgFaUZnYAh4jl7pwxLt3VQEMk8TOGB+8A=
Subject key identifier:   DE:95:E4:66:5F:47:0B:C7:02:6A:5D:40:25:A2:FE:8E:92:FF:54:96
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer:       /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial:       019C40FD2ADF610B0AB4F43B20AA9336C1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number:          0909
Signing time:             Mon 09 Feb 2026 06:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:59 +0000
Files and hashes:         1: HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa (hash: uYdJNtH72XeHZSBQgJWsgmqChwbMODpuyEXVyDLkE8Q=)
                          2: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: qmgoWqFist2lU4777dOLVw+A/pNxoOvCI1XonXQTKUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:2a:df:61:0b:0a:b4:f4:3b:20:aa:93:36:c1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
        Validity
            Not Before: Feb  9 06:00:59 2026 GMT
            Not After : Feb 10 06:00:59 2026 GMT
        Subject: CN=de95e4665f470bc7026a5d4025a2fe8e92ff5496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:20:25:ea:86:07:c0:77:74:42:1c:70:f1:
                    3d:0c:94:02:87:4a:ab:44:9e:aa:9a:d6:5d:7b:fc:
                    ae:1e:35:b4:bd:ad:ce:68:f4:9a:f3:56:4c:9f:f8:
                    f9:34:56:42:91:fd:73:b5:d8:32:47:c4:96:8e:9f:
                    ac:3e:a2:cd:31:6e:be:99:5b:b5:19:8b:b2:3f:67:
                    68:93:0f:86:58:7b:72:a2:3e:b7:16:74:ee:24:30:
                    82:9e:40:95:81:25:30:5e:c2:43:aa:84:4e:32:79:
                    1b:dc:62:68:6c:61:f5:1c:16:e0:8d:0b:5e:a8:dc:
                    df:44:98:da:82:0a:9e:6e:8f:61:76:e2:a2:3a:17:
                    a0:88:36:8c:02:82:2e:0f:dc:87:19:45:89:50:b4:
                    35:f6:24:1e:f7:57:ff:6a:8e:44:fa:21:7f:90:d0:
                    b6:5d:86:68:11:58:68:8c:12:28:d6:2e:20:05:5b:
                    5c:20:17:9f:79:b4:ea:1f:72:c1:15:ac:eb:57:6f:
                    b7:78:3a:91:30:f6:f0:a4:c0:d0:2f:85:6d:db:b0:
                    74:d4:04:ba:89:fc:17:76:13:7e:8b:d1:a1:4c:05:
                    e8:f1:66:19:31:25:a9:47:e4:90:bd:0d:af:ad:c5:
                    10:2c:ed:c7:01:1e:6a:df:3d:5a:06:f7:78:f7:dc:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:95:E4:66:5F:47:0B:C7:02:6A:5D:40:25:A2:FE:8E:92:FF:54:96
            X509v3 Authority Key Identifier:
                keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:38:8c:59:32:e9:c9:94:c6:86:73:59:d6:32:b1:af:c7:
         cb:02:35:12:e4:15:a7:b7:8a:9b:20:e6:19:70:15:2f:99:dc:
         53:07:1b:70:2c:45:ee:e0:41:5b:f5:e9:50:95:6d:04:0e:3e:
         98:23:98:0e:3d:ac:23:36:0c:d6:88:62:db:1d:18:49:95:e8:
         51:50:4e:64:38:3b:9e:95:7a:f4:41:dd:7c:53:2e:32:ef:60:
         8a:b3:7b:15:6f:34:39:d9:02:a6:d5:51:bc:15:6b:53:0d:aa:
         eb:ff:1a:07:1d:f8:30:88:6a:00:1e:5f:50:7f:e7:fe:ba:ab:
         e8:09:eb:df:45:9c:af:52:2b:71:03:c9:9a:3e:76:9c:a7:54:
         db:b1:92:70:08:f8:27:2c:d0:75:fa:10:01:da:a1:2c:53:7d:
         6e:74:b6:b0:d9:01:f5:ff:52:d3:ed:52:dd:54:b9:4e:55:0d:
         8c:4f:59:8e:9d:52:15:0c:d8:c9:92:0a:17:32:04:8d:3b:83:
         84:a5:27:07:d7:9a:64:68:14:4e:99:f6:d3:61:69:3e:fd:d9:
         b9:6c:4c:0c:24:fd:99:d1:71:1a:b6:97:89:71:f3:03:b1:c0:
         49:ec:90:3e:46:5d:1d:53:bc:8a:bd:9c:74:e1:81:2c:ba:90:
         63:b1:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:44 2026 by rpki-client