This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File:                     1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier:          DJXu9S+S+/xwWavmYpOlkZabrjKAdx7Yr4CwsSBZP1U=
Subject key identifier:   7B:23:DF:48:FC:CA:06:1C:C9:FC:22:4D:71:20:65:ED:9C:A0:7A:2D
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer:       /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial:       019C427D880A0FFB0FD27F42205F0B14F60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number:          076F
Signing time:             Mon 09 Feb 2026 13:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:48 +0000
Files and hashes:         1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: Ij1+iMcIpIPiTt6M9wOC/dThCM8p2TsnawqPFQ86yxI=)
                          2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:88:0a:0f:fb:0f:d2:7f:42:20:5f:0b:14:f6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
        Validity
            Not Before: Feb  9 13:00:48 2026 GMT
            Not After : Feb 10 13:00:48 2026 GMT
        Subject: CN=7b23df48fcca061cc9fc224d712065ed9ca07a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:81:86:e2:b4:60:33:9e:a9:dc:9f:9d:5d:
                    35:23:36:3a:64:f8:29:b1:78:a7:b3:ee:ab:31:d5:
                    09:0d:07:2a:71:10:9c:b3:7b:69:84:3d:48:d4:f6:
                    cb:2a:f2:f1:9e:cb:c2:d2:72:04:fd:5f:f8:d7:fb:
                    31:c5:c6:24:66:6f:52:15:99:ae:92:f9:28:e6:8d:
                    80:73:bc:dc:7b:58:d2:83:ec:3e:c7:26:ad:6d:d4:
                    75:e9:ed:9b:e1:a2:f4:6d:67:ec:22:f0:21:b0:62:
                    0e:00:52:01:ea:8c:12:25:2c:91:97:c8:4e:13:7f:
                    d8:38:91:92:0d:a4:50:35:23:01:50:72:f2:71:17:
                    bc:78:3f:2e:a6:96:8f:03:c8:b0:85:bf:20:ac:84:
                    b7:bb:29:11:0e:c6:79:b0:81:7b:63:4f:3d:fa:dd:
                    f8:f5:8f:12:ac:cc:f8:0a:67:a2:18:a4:33:a8:7f:
                    af:fc:01:83:a9:58:20:d8:2f:e4:92:b8:c6:c5:1a:
                    3f:5e:d3:f1:e2:d4:4c:0d:d0:f8:0b:10:a2:9c:63:
                    08:14:e8:c7:5c:3f:04:ca:18:a6:ac:f6:fe:92:ee:
                    6c:69:c6:92:7f:d3:aa:d8:75:ef:8f:59:c6:85:6e:
                    40:29:27:92:cf:d1:86:98:be:ac:7b:ea:33:98:4a:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:DF:48:FC:CA:06:1C:C9:FC:22:4D:71:20:65:ED:9C:A0:7A:2D
            X509v3 Authority Key Identifier:
                keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:64:2e:bf:fe:92:7c:9c:56:f4:6e:d9:98:41:32:17:94:
         d3:c9:50:30:2b:5c:46:e4:d0:8e:eb:4f:47:d4:79:e1:ce:8c:
         9f:ed:c4:f4:53:48:b8:e4:42:84:00:20:33:bb:0e:64:c6:10:
         04:af:46:26:4a:07:22:0c:e5:6f:b1:92:54:57:34:47:bb:a5:
         98:ff:ac:a7:08:ca:89:2d:c6:78:c1:ff:54:6d:0d:f6:62:88:
         72:9b:fa:a1:46:ac:77:c3:b0:a5:c6:63:32:f1:1a:5e:86:01:
         a0:b5:40:d1:7b:dd:81:05:8d:92:3a:d5:95:a1:33:65:d2:64:
         f2:3f:3b:33:b3:5d:ec:8c:69:6a:c5:7f:0e:b3:03:6d:12:0d:
         2b:5a:2b:05:d6:c2:87:2a:d8:96:db:94:09:78:d9:27:2a:36:
         43:01:a0:0e:9d:86:8c:a4:f7:f7:66:e3:56:ee:26:e3:0d:3c:
         e2:32:3c:26:72:1f:54:ba:4f:b7:ad:96:c4:69:11:70:1d:6e:
         9b:17:98:69:8f:2d:5b:a2:df:35:8c:c5:42:19:b1:8f:cd:a1:
         d2:55:e0:fb:c4:c9:e6:80:35:df:15:5f:95:04:f4:8e:f3:52:
         5f:4e:9f:d8:63:82:47:11:cb:56:48:e8:1a:97:9e:59:b9:f2:
         c2:70:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:29 2026 by rpki-client