This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File:                     OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier:          zUW+BW+s3GsnCxrG7vNuv5yOT+6yvlBkwKSRr4zYvzc=
Subject key identifier:   B2:70:C1:2A:65:B6:C8:58:65:F9:9B:34:C6:E8:67:40:D8:70:6F:95
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer:       /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial:       019C435949BDAB3C405AAAC1C1F8FB264251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number:          1778
Signing time:             Mon 09 Feb 2026 17:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:50 +0000
Files and hashes:         1: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: hjwcDswHXYyhYembpz/sWDOQthMqp9gSrgLeGws253k=)
                          2: XxJvVHyVyNVlWKJ8yOghwV4J34c.roa (hash: V+qJ9fQgut9NafTDw26E/iwTZPqrHnQr/6KuyJ7ucM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:49:bd:ab:3c:40:5a:aa:c1:c1:f8:fb:26:42:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
        Validity
            Not Before: Feb  9 17:00:50 2026 GMT
            Not After : Feb 10 17:00:50 2026 GMT
        Subject: CN=b270c12a65b6c85865f99b34c6e86740d8706f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:8f:e0:84:21:4e:08:4e:3d:ce:0d:d7:78:
                    60:e9:8a:47:90:ff:77:dd:58:da:51:ed:db:31:a7:
                    98:fc:47:da:a6:99:e1:a8:0a:35:50:b8:05:66:26:
                    87:83:0a:1f:38:2a:28:1d:9d:b4:f7:e7:26:af:64:
                    bc:31:61:56:0d:6a:73:ec:7d:a6:44:1d:39:19:2e:
                    db:86:8c:c0:bd:dc:7d:1c:33:39:fa:a1:88:52:8f:
                    64:ef:33:09:05:c8:8a:99:66:57:73:99:62:87:ca:
                    c0:39:8e:84:43:02:db:6e:bc:f2:92:c2:ac:58:ae:
                    b1:2f:8b:07:25:36:5a:d4:1e:96:a0:7b:fa:18:f9:
                    2f:e8:b1:1d:3f:a9:1c:db:b9:05:79:fa:df:3a:f3:
                    4e:e4:04:5c:74:f1:40:17:3d:fb:82:d1:31:15:e4:
                    b2:cc:d3:bf:ca:4d:cf:f3:c5:e5:1f:84:a4:06:16:
                    12:38:de:1a:01:fd:e1:af:eb:1a:9a:73:1b:b0:df:
                    b0:dd:c2:b1:38:0c:63:9c:49:8e:16:68:de:35:5a:
                    48:99:90:08:7e:e5:9d:8b:bb:b6:99:81:87:77:d1:
                    3b:f6:4e:42:50:c8:da:87:23:53:68:09:c0:fa:e8:
                    d1:d0:81:88:5f:63:8f:57:57:19:2d:e8:7b:69:28:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:C1:2A:65:B6:C8:58:65:F9:9B:34:C6:E8:67:40:D8:70:6F:95
            X509v3 Authority Key Identifier:
                keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:70:83:b1:c1:ba:c4:cb:2e:e2:cc:90:d2:47:73:70:20:
         8b:69:ae:98:d7:7b:2f:15:37:6c:38:0d:fa:9d:a1:2d:1d:f0:
         1f:a8:43:4e:25:7e:30:77:12:c5:f5:9a:ce:25:3e:61:d9:d6:
         30:57:03:02:55:c8:21:52:3d:47:06:79:f3:a7:22:6a:52:b5:
         e7:9f:ae:74:a0:bd:14:de:66:8a:b4:45:7a:71:fd:2f:32:70:
         4a:14:88:d8:d8:01:9c:76:8c:25:08:45:f2:15:d3:d4:e7:ae:
         e4:a7:66:73:0e:46:ea:ba:70:7e:ff:ad:92:75:56:6a:42:7f:
         be:15:b9:c0:b1:46:b7:37:1d:ef:52:8a:ce:b2:bb:50:75:52:
         a0:85:24:30:b0:cf:a9:1a:4c:c5:95:bc:43:50:3e:7c:79:3b:
         7a:a9:d5:4c:b4:e1:2f:a9:da:9e:f3:26:03:0a:ed:f1:39:42:
         fa:b6:ac:ca:71:57:9e:0c:56:9f:0b:b1:18:0f:47:c6:95:2b:
         9f:04:c4:b2:4f:b3:ad:2d:6c:15:aa:b5:12:95:01:b3:ae:71:
         44:ab:ee:a4:81:29:3c:35:06:37:f4:d2:20:65:eb:0b:52:f2:
         7f:3b:ef:b5:f4:08:1e:c1:fe:82:b7:2c:94:fa:57:b6:33:d0:
         ff:3a:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:26 2026 by rpki-client