This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File:                     OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier:          612aUd8eua6QX7IAI8FH3TRCPNrDExHrQ+Rp5R7Ng+c=
Subject key identifier:   6F:91:01:A5:11:E9:D5:97:15:2C:D4:9F:D8:62:3F:F2:10:FD:41:A8
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer:       /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial:       019C438FE470F284516311116E5F00C47A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number:          13A1
Signing time:             Mon 09 Feb 2026 18:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:29 +0000
Files and hashes:         1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: X7Y79c4LmdlYvwGx6exR8LuGyiZ7B7hotMyJ8jWcxLQ=)
                          2: dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa (hash: M2cQBApH+3mET+28roXB36HJcR7W2SatQpMI3H4gi/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:e4:70:f2:84:51:63:11:11:6e:5f:00:c4:7a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
        Validity
            Not Before: Feb  9 18:00:29 2026 GMT
            Not After : Feb 10 18:00:29 2026 GMT
        Subject: CN=6f9101a511e9d597152cd49fd8623ff210fd41a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:eb:19:11:c0:25:ab:9c:ef:d4:7f:50:30:
                    21:b5:7c:44:e5:1c:0a:6a:6a:b5:b9:d8:76:c9:dd:
                    3e:6c:da:ba:48:ed:83:cc:eb:23:af:2e:69:6a:95:
                    12:db:a3:4c:c3:be:71:0c:73:a7:fb:57:fb:83:66:
                    dd:9f:4c:d0:fa:4d:28:c5:df:af:eb:9a:4a:3b:02:
                    9e:ce:42:21:6b:87:0b:3b:46:ab:08:ab:8a:0b:76:
                    5a:a8:91:aa:0b:f7:d5:8c:9c:a3:1b:24:9c:72:0a:
                    28:43:20:f2:61:50:fc:98:2b:ed:b6:f0:c7:ec:00:
                    61:95:90:41:46:3e:b0:90:07:d8:bb:1b:25:5b:e0:
                    e0:e9:14:8d:0c:6e:45:8a:b4:0f:37:19:98:e7:d3:
                    01:8c:af:2c:71:03:5a:a1:8f:f4:4c:35:8d:e9:2c:
                    ba:ff:bb:3f:04:37:f1:79:39:f2:53:0b:e1:2d:c9:
                    a6:9f:ee:4c:7b:89:86:b3:ea:f8:e0:a6:5a:e4:aa:
                    79:d2:ca:d1:6d:85:0f:7a:d8:97:af:fe:2f:d0:ba:
                    6d:c4:c6:6e:e9:1d:5a:3b:48:7d:26:85:72:96:c5:
                    ab:33:90:6f:fc:05:41:3c:68:7b:17:df:49:c7:0b:
                    a5:7e:3f:6d:8f:37:f7:be:31:c4:10:3f:25:9b:da:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:91:01:A5:11:E9:D5:97:15:2C:D4:9F:D8:62:3F:F2:10:FD:41:A8
            X509v3 Authority Key Identifier:
                keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:93:05:d6:2e:86:6f:78:09:26:67:98:a7:a0:eb:f8:5d:8e:
         1a:71:bb:32:2b:77:76:cc:1f:47:c7:15:bc:92:fb:60:f8:45:
         51:20:f6:6a:2b:48:16:60:fc:a8:d2:d8:22:c2:cc:bf:32:75:
         fd:7f:13:4e:0e:57:d3:7e:db:01:65:ac:2e:a1:82:c7:05:41:
         80:bf:e0:c6:76:42:e9:33:91:61:15:c6:83:cd:44:a5:fb:08:
         0b:1b:20:17:d7:bf:c3:ef:91:d0:9f:41:10:21:97:24:a2:56:
         fd:c0:e3:59:e1:62:5a:2b:0d:e1:e6:cb:d4:0d:bd:a1:ee:9e:
         a6:c6:4a:7a:06:92:dd:29:e7:8e:a8:71:0b:03:ca:2d:60:03:
         7a:e1:8a:fe:ec:f6:43:ed:10:1b:8d:c9:42:38:fb:21:0a:29:
         92:25:f6:9b:c3:6a:80:65:57:55:6f:8e:7a:f8:3f:b9:8a:e7:
         8d:85:76:bf:b4:fc:d9:d2:87:ff:40:86:51:84:58:34:a8:4a:
         83:e0:82:7f:51:20:be:72:a3:7b:c1:c2:78:2c:50:ed:90:2d:
         6d:e0:43:99:4a:42:cb:b0:a6:ee:da:08:de:3f:75:53:c2:40:
         bd:46:10:af:be:a0:c2:c1:38:4a:56:86:a3:e3:1b:05:76:ab:
         49:3e:95:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj+Rw8oRRYxERbl8AxHoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0
YjI0ZGYwHhcNMjYwMjA5MTgwMDI5WhcNMjYwMjEwMTgwMDI5WjAzMTEwLwYDVQQD
Eyg2ZjkxMDFhNTExZTlkNTk3MTUyY2Q0OWZkODYyM2ZmMjEwZmQ0MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9HrGRHAJauc79R/UDAhtXxE5RwK
amq1udh2yd0+bNq6SO2DzOsjry5papUS26NMw75xDHOn+1f7g2bdn0zQ+k0oxd+v
65pKOwKezkIha4cLO0arCKuKC3ZaqJGqC/fVjJyjGySccgooQyDyYVD8mCvttvDH
7ABhlZBBRj6wkAfYuxslW+Dg6RSNDG5FirQPNxmY59MBjK8scQNaoY/0TDWN6Sy6
/7s/BDfxeTnyUwvhLcmmn+5Me4mGs+r44KZa5Kp50srRbYUPetiXr/4v0LptxMZu
6R1aO0h9JoVylsWrM5Bv/AVBPGh7F99Jxwulfj9tjzf3vjHEED8lm9qkGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+RAaUR6dWXFSzUn9hiP/IQ/UGoMB8GA1UdIwQY
MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct
NWE1Mzc2MjlhNDM5LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5
LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5MF1i6G
b3gJJmeYp6Dr+F2OGnG7Mit3dswfR8cVvJL7YPhFUSD2aitIFmD8qNLYIsLMvzJ1
/X8TTg5X037bAWWsLqGCxwVBgL/gxnZC6TORYRXGg81EpfsICxsgF9e/w++R0J9B
ECGXJKJW/cDjWeFiWisN4ebL1A29oe6epsZKegaS3SnnjqhxCwPKLWADeuGK/uz2
Q+0QG43JQjj7IQopkiX2m8NqgGVXVW+Oevg/uYrnjYV2v7T82dKH/0CGUYRYNKhK
g+CCf1EgvnKje8HCeCxQ7ZAtbeBDmUpCy7Cm7toI3j91U8JAvUYQr76gwsE4SlaG
o+MbBXarST6VmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:02 2026 by rpki-client