This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File:                     ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier:          skCDSpklsLAXuhiXIpbC4jy1cjp6HPYrj5/kn6ysDO0=
Subject key identifier:   B4:5D:E4:28:01:54:0C:8D:8F:5E:07:8A:89:6B:C7:E3:A0:41:F4:39
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer:       /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial:       019C43FE1ED53AC7F8124C142CB439070854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number:          0B1B
Signing time:             Mon 09 Feb 2026 20:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:53 +0000
Files and hashes:         1: k1jUiB18FcQkB0JlR9kMswQdw1M.roa (hash: CfSBzFps5ykYGRlVBhnlga1YMIkO7XIfB2LTKOI9Iko=)
                          2: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: IdRTI9nEACosRjiL5TFtZ9UBOUZcaSQpUjTkkKOkjNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1e:d5:3a:c7:f8:12:4c:14:2c:b4:39:07:08:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
        Validity
            Not Before: Feb  9 20:00:53 2026 GMT
            Not After : Feb 10 20:00:53 2026 GMT
        Subject: CN=b45de42801540c8d8f5e078a896bc7e3a041f439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:11:1b:03:de:bb:51:df:80:94:3d:51:33:
                    94:13:01:85:d1:79:74:bf:c7:30:48:5d:34:eb:8a:
                    c8:86:57:eb:73:81:e7:a2:50:21:2d:3f:cc:d5:7f:
                    26:73:83:17:f7:60:19:c0:e8:00:d6:95:df:6e:04:
                    10:97:de:04:2a:61:dd:97:56:26:5e:c5:8b:3d:60:
                    96:7b:83:dd:e7:ea:a6:8a:7f:8d:c2:5d:ac:cc:d2:
                    cb:a1:86:a8:13:86:68:76:1b:39:ec:8d:77:04:85:
                    96:ab:7e:21:11:8c:12:9d:1b:69:fd:ea:24:31:61:
                    06:40:df:0e:27:6c:4a:0d:b2:97:20:ea:08:87:e1:
                    dd:70:cf:71:2d:03:14:37:d1:82:87:c3:f8:2c:97:
                    f7:0f:55:a2:d5:b5:0b:f6:75:38:ad:d1:16:84:48:
                    5d:1e:2a:2a:69:5f:b1:5f:ce:7a:34:f3:1f:cf:b5:
                    92:32:7d:1f:d8:ba:af:7c:8c:e3:0f:14:d7:bc:53:
                    2a:95:a7:e7:31:b4:62:f0:44:cb:f0:eb:3d:46:83:
                    e6:dc:76:82:c6:41:47:21:3e:c1:39:0f:0b:86:ac:
                    92:af:37:7d:a2:d9:f1:6c:a0:41:67:59:3c:94:bc:
                    30:83:d3:c3:e4:e8:dd:0d:e0:da:1a:f5:30:3d:18:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5D:E4:28:01:54:0C:8D:8F:5E:07:8A:89:6B:C7:E3:A0:41:F4:39
            X509v3 Authority Key Identifier:
                keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:a1:e8:70:4b:b7:3d:c2:d0:7b:12:6b:c4:44:3a:31:5c:
         a4:8c:ca:34:45:17:af:f6:73:67:58:c7:50:20:45:86:08:b5:
         c9:50:84:28:fc:d2:69:0a:27:4a:3f:51:84:fe:09:12:41:23:
         e1:6a:69:67:78:cb:65:0a:91:cb:83:92:a0:39:7a:72:6b:82:
         40:7b:15:92:98:47:6f:f1:c0:66:3d:27:66:38:b7:b3:37:94:
         be:f3:67:29:08:67:d2:ce:be:88:87:12:06:91:0e:62:55:1c:
         fc:2e:83:7a:56:d7:85:22:e3:e2:99:89:7d:b2:25:e0:b6:ef:
         ab:96:26:e0:8c:74:70:44:f8:81:50:c3:9d:e2:82:bb:36:26:
         e5:95:e4:3d:74:fb:84:24:b1:3b:68:38:d0:21:77:21:99:17:
         45:d5:0f:01:bc:6a:8c:7b:85:6c:75:eb:1e:ed:96:28:51:fb:
         e3:09:23:67:af:66:0d:9b:16:38:4d:ff:12:94:fc:eb:c7:14:
         c7:2a:9b:01:82:7c:a1:98:5d:34:62:48:00:14:77:65:6e:e7:
         5c:2c:ed:d4:41:10:a8:6f:97:65:2a:ce:a1:e1:39:67:0f:26:
         e7:a9:13:74:36:10:46:11:15:bc:e6:c7:65:5f:13:40:f8:60:
         f1:70:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:45 2026 by rpki-client