This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          qzKObbgtd0Ll+6YQFL/ovl5KtENKg0zZqj4w6NqjWIQ=
Subject key identifier:   C2:1B:DE:78:B2:11:9B:F9:27:40:83:C3:ED:E0:3D:13:D5:68:E1:E9
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       019C1EA863B68197DFBF0AEA7AE353CB8315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          10BF
Signing time:             Mon 02 Feb 2026 14:01:17 +0000
Manifest this update:     Mon 02 Feb 2026 14:01:17 +0000
Manifest next update:     Tue 03 Feb 2026 14:01:17 +0000
Files and hashes:         1: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
                          2: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
                          3: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: so83zYrF5DorI8FQHgwltS9FEMwwhXwq0qs3/M4GHWk=)
                          4: ovUvt1pWliISM3HaoCAcadW0xKw.roa (hash: H639MxSrvwDoO2fDDqrmu0kQ4erJQr6FKFxoVbpwHPU=)
                          5: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:a8:63:b6:81:97:df:bf:0a:ea:7a:e3:53:cb:83:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Feb  2 14:01:17 2026 GMT
            Not After : Feb  3 14:01:17 2026 GMT
        Subject: CN=c21bde78b2119bf9274083c3ede03d13d568e1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:93:83:49:8d:29:ac:9a:2e:8f:27:c3:9a:
                    14:b1:3e:f7:bb:ea:c7:75:21:36:53:b1:c1:0c:62:
                    24:13:74:bd:58:22:39:62:59:b1:ea:d3:ca:ff:36:
                    4b:87:a2:05:40:7a:40:2b:93:c6:83:98:2d:84:2a:
                    66:56:2f:5c:00:25:ba:30:27:a0:ae:6a:82:f3:f1:
                    b7:fa:37:7c:7f:73:c0:1f:23:20:a8:60:9e:d8:a8:
                    2f:fb:23:a1:3b:7d:74:2e:e4:64:41:eb:26:27:6e:
                    11:3d:db:ee:d1:d0:3e:ef:61:33:5e:5c:d3:8f:d8:
                    82:48:0f:cc:89:ab:dc:55:59:27:e1:91:bd:bc:28:
                    23:f6:2b:05:10:83:7d:89:2e:70:c2:d2:8b:6a:9f:
                    58:fd:e9:36:33:b7:1b:9d:60:32:1e:aa:f2:d0:8f:
                    75:dc:f6:de:46:f8:9a:b5:2f:e0:da:6c:a8:c3:df:
                    96:3c:1c:27:4e:60:35:5a:dc:cb:fd:81:71:02:6a:
                    7f:d9:89:47:e5:32:2a:39:eb:eb:78:32:1a:60:98:
                    3f:1f:bc:8a:97:39:9f:79:ec:8f:28:bf:ab:8c:6f:
                    5a:ed:ab:4b:a7:e2:b8:c8:64:15:d7:49:b4:88:ca:
                    af:1b:0e:bc:7c:e0:f5:6c:2f:8f:41:9b:0d:7d:bc:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:DE:78:B2:11:9B:F9:27:40:83:C3:ED:E0:3D:13:D5:68:E1:E9
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2b:e1:ea:30:e5:c4:59:ae:d3:5e:32:8a:a8:e8:26:fe:38:
         5c:41:6a:ca:fe:90:f3:04:8b:55:46:ab:cc:a9:af:aa:bd:3f:
         dd:fd:84:fd:13:c8:4c:6a:28:0f:39:e6:d5:01:0d:b8:29:5e:
         37:d5:26:25:f0:6b:b5:8c:af:ae:eb:f8:78:5a:88:ca:c1:41:
         5f:78:85:3a:ac:cc:49:99:3d:79:26:53:96:fc:e5:97:5b:64:
         dd:f3:65:f7:34:f7:99:a5:62:8b:ec:29:cf:9b:f7:05:c9:ac:
         d7:18:29:af:a4:08:f2:05:e0:85:b0:7b:ea:35:9f:4c:50:1e:
         c0:fd:5d:57:0c:3c:b8:df:ab:87:76:3e:bc:8c:f7:19:4b:d0:
         c4:8a:ce:3e:9f:bd:46:32:e2:ad:a7:b7:1e:8b:fe:02:69:cc:
         67:1c:5f:eb:6d:35:a3:aa:8d:0f:db:90:ac:57:a6:93:ab:7b:
         10:60:42:da:a9:f3:1d:b6:0e:79:d5:33:f7:53:87:c9:5b:d1:
         3d:4e:77:d2:17:b7:5a:91:99:df:94:3b:8a:43:d5:c1:16:0f:
         9f:ca:34:07:53:2d:21:fa:e7:d2:e5:ca:2f:fb:62:ff:b6:d6:
         46:fb:95:a5:f1:0b:1b:15:11:62:fe:4d:ce:48:33:ca:39:ce:
         72:fd:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:33:26 2026 by rpki-client