This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File:                     o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier:          yFSPZxMRv9fNqT8WU3qn/1QD9yhxxCA1W/QFV6QmMUs=
Subject key identifier:   10:C4:BF:BB:C3:CE:F8:2B:D6:08:92:7F:6C:AE:C4:64:A0:E0:8A:68
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer:       /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial:       019C420FC8D200A2D366D4F0C801D3744620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number:          096E
Signing time:             Mon 09 Feb 2026 11:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:56 +0000
Files and hashes:         1: TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa (hash: 1l7RMaksGMvJALttYQHPmRPplRyW7anaFOwZ35pYzSw=)
                          2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: Z5Kbv082IzXlcPBX6Rg3qiFMDSpLaS3s5/Ib3wvDWvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c8:d2:00:a2:d3:66:d4:f0:c8:01:d3:74:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
        Validity
            Not Before: Feb  9 11:00:56 2026 GMT
            Not After : Feb 10 11:00:56 2026 GMT
        Subject: CN=10c4bfbbc3cef82bd608927f6caec464a0e08a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:d9:27:2f:4c:e9:b8:8e:9a:5e:c5:fb:1a:
                    b0:e5:e9:61:97:1b:4f:de:f9:72:b8:c5:8c:23:4a:
                    d0:bc:b5:7a:17:b3:73:ae:8f:04:a3:f8:b7:89:e5:
                    b8:a2:1c:b5:27:2d:8a:03:91:08:1e:b5:8d:9d:bf:
                    f7:c2:50:80:9c:fb:95:0b:18:43:2d:d7:1a:a7:a0:
                    7a:29:c2:ce:5b:56:96:40:e8:6d:8f:92:7c:1f:9a:
                    49:b1:36:58:56:28:d9:2b:f5:97:1e:12:8e:5c:82:
                    bf:0b:f1:fb:34:0f:c6:49:b6:f0:92:ea:b5:e4:ad:
                    64:27:99:42:c1:54:09:ed:65:77:5a:c9:6c:9e:f3:
                    fd:23:f4:97:29:04:af:f0:cf:b3:4f:3e:92:46:e0:
                    98:92:a1:55:66:52:cd:d7:96:df:3a:23:3b:c9:8b:
                    c8:87:35:16:d2:57:33:dd:d6:54:35:50:d3:1f:6f:
                    97:65:60:57:c4:40:fa:7e:74:74:d7:54:0c:e8:64:
                    d6:c7:97:dd:fd:47:9f:12:dc:44:04:3b:fe:95:51:
                    f4:94:a8:4e:eb:a8:9a:f1:ad:0b:06:de:8f:bf:6d:
                    d9:42:ba:9d:20:b5:92:94:05:8a:54:22:b1:1a:9f:
                    e7:96:35:7c:07:a5:46:cc:90:20:a3:ea:86:c0:10:
                    fc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C4:BF:BB:C3:CE:F8:2B:D6:08:92:7F:6C:AE:C4:64:A0:E0:8A:68
            X509v3 Authority Key Identifier:
                keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:79:37:c9:a6:80:6a:73:88:82:5f:98:1f:7b:ba:19:9e:35:
         96:6b:83:4e:48:6d:af:fe:28:4e:90:ed:17:59:76:d0:0e:61:
         a4:76:95:1f:7a:10:fc:c5:8e:fb:8d:b1:b8:3c:f6:72:84:eb:
         76:fe:30:16:d7:a6:eb:6d:7f:50:24:cb:bf:a7:26:f5:24:7e:
         0a:2a:34:f4:79:39:dd:1e:07:ee:95:ee:66:3b:68:1d:9f:ec:
         56:6a:c3:34:72:d6:c8:d6:4b:e2:6a:89:7b:38:95:c1:1b:24:
         12:24:a1:55:6b:6c:82:aa:ec:be:06:8e:3d:ae:e6:0b:2f:eb:
         e9:0c:24:a3:05:e5:66:75:7e:cc:b4:88:3c:bb:c7:53:58:29:
         92:06:e7:1c:ba:83:28:bb:7b:ca:2a:ab:23:b7:93:2f:b7:df:
         5a:09:b8:cf:05:39:8c:2e:ba:84:d7:2f:12:42:4d:25:9f:18:
         1f:72:7b:64:3a:c2:02:d3:57:8f:01:8d:ac:f2:df:9a:39:de:
         4e:64:ea:f0:7d:ce:aa:50:ce:5c:1f:93:0d:75:5f:06:72:d7:
         e6:26:52:17:79:0a:dd:fd:d7:0f:13:b9:76:17:6c:d8:d8:06:
         89:5d:d8:0c:ad:b0:f5:0f:d1:3c:5e:75:55:01:f5:cc:3e:3e:
         67:67:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:08 2026 by rpki-client