This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File:                     OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier:          vmCLcxL6hHpqx6d8OU+RKebwAdYIQ2E5Vqs1wHKu2nk=
Subject key identifier:   E2:DE:19:07:C2:5A:EF:F6:C1:B1:A8:F8:3E:BC:A6:B8:A9:64:C7:E5
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer:       /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial:       019C42EB187D17C4E1EE8B40ED9304B08407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number:          0CDA
Signing time:             Mon 09 Feb 2026 15:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:29 +0000
Files and hashes:         1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: KFrflpBplsPxBgsYPnBYrBM4P9M3EEAMgmODj9L7++8=)
                          2: tj7JglNBYoUgUzK65iM2oKW2CKA.roa (hash: f8QCODS044Wg/Ezuz3x9qHRgp8fLuEd7Np2yDguXhQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:18:7d:17:c4:e1:ee:8b:40:ed:93:04:b0:84:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
        Validity
            Not Before: Feb  9 15:00:29 2026 GMT
            Not After : Feb 10 15:00:29 2026 GMT
        Subject: CN=e2de1907c25aeff6c1b1a8f83ebca6b8a964c7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:dc:7d:b1:b8:3a:cd:12:41:65:12:01:ee:
                    87:e5:69:46:1a:fa:4f:af:98:79:0d:2e:a8:f8:c7:
                    00:b5:56:fc:e7:9d:6b:83:20:51:0f:ea:d7:f7:83:
                    bc:06:28:f6:08:b9:f6:de:21:46:e6:80:9d:90:65:
                    15:51:ae:97:54:61:91:28:c2:2c:af:e4:1a:ed:0a:
                    c1:cf:e2:3f:bd:af:9b:aa:53:87:1c:8f:4a:ba:f1:
                    62:59:95:28:3d:a2:fa:60:19:a5:f9:4a:b9:a1:bd:
                    cb:9a:07:9c:91:e7:82:99:68:61:5a:1e:3d:b0:15:
                    64:14:7d:94:20:6c:25:56:84:50:50:5f:05:4c:9d:
                    ed:50:f5:4a:88:44:67:31:c1:33:23:9c:00:36:3c:
                    ed:ec:79:92:9e:62:db:16:bf:f1:ee:b2:39:7b:31:
                    63:1e:77:6b:df:c3:9b:43:3b:63:bd:23:be:f9:b1:
                    9f:82:a2:70:ed:1d:c8:b2:f1:2d:f8:7e:8c:78:ed:
                    f6:01:21:01:75:30:f3:0d:e5:ff:73:93:c7:7b:cf:
                    46:cb:04:67:22:37:25:43:82:21:db:dc:e8:bd:cf:
                    b1:fe:97:87:64:65:66:30:f2:a5:5c:80:4b:d2:16:
                    55:7e:e3:28:d2:07:d6:8e:98:1a:de:ac:a4:74:ee:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DE:19:07:C2:5A:EF:F6:C1:B1:A8:F8:3E:BC:A6:B8:A9:64:C7:E5
            X509v3 Authority Key Identifier:
                keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:df:53:86:cd:aa:b0:e2:33:33:b5:4f:55:ac:d2:1f:bf:
         a3:c4:37:b8:44:1e:0d:19:db:ee:54:5c:c7:c3:95:35:f2:66:
         6e:46:57:72:0b:7b:e4:4f:98:db:be:ca:14:25:fb:5c:d4:d5:
         96:c8:43:69:cf:5c:c9:09:8c:b3:83:9a:0e:83:1d:13:c6:d8:
         bf:a8:91:8a:14:39:6a:74:30:61:fd:49:56:a0:ee:b0:85:b7:
         10:85:d0:c6:b1:7e:5a:72:9e:9f:56:c8:f5:c3:c6:16:ee:f4:
         d4:7a:46:62:be:ca:83:70:4d:f2:7c:54:49:e9:cb:23:1e:85:
         46:90:18:f3:73:31:36:1a:08:2b:07:a3:c7:4e:cd:0d:d8:7d:
         c7:b1:33:d4:6d:d8:b7:98:ab:81:d7:77:b7:24:85:0c:61:02:
         47:c5:ca:aa:ae:fd:69:31:a5:c4:57:3f:62:fb:c7:8f:c2:c2:
         46:39:82:47:5e:c1:0d:dd:34:bb:61:2b:bc:89:fe:2f:36:bb:
         af:02:1f:c6:b0:6a:2c:91:c2:53:d9:a8:b1:8b:c0:1f:15:9e:
         c5:da:bc:a3:83:1e:0b:2b:55:5e:fe:37:83:c0:16:5a:93:44:
         7f:83:40:9c:94:7c:4d:ed:14:fc:89:2a:5d:68:56:02:55:2a:
         f6:40:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:09 2026 by rpki-client