This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          DinmVFe020cbrV7BX3vNUMJkf7kNuJ4E0+Cvqsk8k7o=
Subject key identifier:   75:B2:24:77:28:0D:79:92:D2:92:51:2C:40:49:CE:B9:99:4B:C3:B3
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       019C42B3F2BD687B37FB55E698C4BD00DA75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1827
Signing time:             Mon 09 Feb 2026 14:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:14 +0000
Files and hashes:         1: 75usjphnflTK9ekaeXTmIOUK9No.roa (hash: 6EuKwuh4YvgBCa5Zr1EQEmvX8bawaDXoEyNUirI2tqE=)
                          2: BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa (hash: BFrY9/6iplAYN4CNa21BmE/m83H1ufk5TI5FpOMq62I=)
                          3: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=)
                          4: fEY123WrG17ZCUyz9dcKnTc2Qkc.roa (hash: ehi6sBGZP2OSU+JX6wLoNRrh9WIbrRaxXboak3XDqVc=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: NDNdMEoh8mgzEOYVbsgg1Mzx02qO2RakGiuB3jGFuXI=)
                          6: xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa (hash: 7LWb0I2IanjDr9ngdvZoV0Vpn7u1mnQr4dTehW6hxdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f2:bd:68:7b:37:fb:55:e6:98:c4:bd:00:da:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Feb  9 14:00:14 2026 GMT
            Not After : Feb 10 14:00:14 2026 GMT
        Subject: CN=75b22477280d7992d292512c4049ceb9994bc3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:5d:43:50:65:86:b0:71:3e:f7:47:81:bf:
                    df:a8:ef:10:c9:4f:e8:2d:5d:0d:fb:f9:a0:64:5d:
                    fb:91:de:f5:cf:86:49:18:ae:92:a9:61:94:10:4e:
                    51:ee:d4:bf:56:4e:73:9f:f5:a5:8f:d3:55:6f:4a:
                    cd:38:37:69:ad:dc:85:41:24:78:21:76:53:5e:c1:
                    7a:46:a0:de:b6:78:d2:69:16:c6:ea:9e:03:8c:62:
                    16:1b:92:fd:de:1b:d4:05:45:72:d3:4a:4e:c6:50:
                    c1:d9:a5:18:30:8b:3b:8b:98:49:f5:8f:73:93:d8:
                    62:44:0d:a8:34:2a:25:4b:ea:cd:88:e5:b7:40:53:
                    38:15:20:64:5d:b8:f8:79:e0:ef:ed:a4:41:8f:a8:
                    cb:d3:77:90:65:b8:b8:94:ca:9e:29:af:17:87:91:
                    09:55:f1:cb:9b:6a:ac:43:8d:95:c1:f7:6a:8e:2e:
                    81:19:38:d3:54:ed:cd:ff:d5:17:7f:85:5d:0c:69:
                    f1:10:37:b4:20:e9:e6:5d:2e:b2:a2:40:ef:b8:77:
                    a2:e4:d2:38:53:d6:39:03:23:26:4e:bf:2b:52:c8:
                    50:23:a7:88:07:53:e7:fc:40:5f:e5:8c:35:aa:36:
                    ce:ec:6c:24:97:50:cf:05:cd:95:a6:5b:81:ad:54:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B2:24:77:28:0D:79:92:D2:92:51:2C:40:49:CE:B9:99:4B:C3:B3
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:31:a2:0f:7c:fb:50:cd:63:ac:01:4a:af:c9:13:2c:2d:b9:
         c7:94:07:35:11:c9:f5:27:30:6f:1b:94:59:b6:ff:e6:46:bb:
         e8:4c:df:28:59:c8:0c:ef:0a:01:73:78:d0:38:ad:d4:b1:e2:
         c8:9c:bf:ea:ef:b1:f0:d4:87:7e:bb:ea:42:32:77:d2:28:f2:
         3b:0a:ae:95:08:92:8e:36:24:06:8f:87:c2:e7:f3:fe:47:64:
         cf:97:0b:7e:90:9a:4d:a1:e2:b1:31:c2:f7:d3:04:bf:6b:41:
         63:d9:e0:73:20:03:cf:49:64:2e:d5:7a:01:05:c3:a8:01:bb:
         3b:98:38:74:89:d7:b3:b2:17:2f:4d:43:9d:1a:b8:fb:e6:83:
         8b:53:c9:7d:b3:d1:ea:3a:24:e1:82:06:c3:45:c1:fa:48:10:
         da:c9:44:ed:c8:0e:4c:91:51:10:0f:c6:cb:72:d7:81:de:b3:
         af:4c:c0:e5:7c:dd:d0:6b:3c:30:36:19:78:00:02:05:90:a6:
         34:ad:53:c2:78:56:35:6a:ca:51:80:ed:44:1d:95:fa:c1:19:
         66:20:50:b7:90:ce:c6:fc:4d:ad:59:7d:51:13:22:96:2a:db:
         67:c1:f6:79:be:45:f9:a5:32:ed:49:7a:2c:1a:81:41:ed:58:
         dd:59:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:26 2026 by rpki-client