This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File:                     Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier:          txMWRiOqx2T7+xhavspFSM4XF51kt47rYonu/ToCxFA=
Subject key identifier:   F1:36:57:42:0B:BF:28:25:EA:B0:E9:36:42:38:9C:B4:5B:F8:59:FE
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer:       /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial:       019C43FD83C50E890D1ADC0340DBE1CFCD95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number:          11ED
Signing time:             Mon 09 Feb 2026 20:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:13 +0000
Files and hashes:         1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: HYHEcztHmwHwJ8nDN7Hb8aFaaYtNY2kPmlYpFk4qY9o=)
                          2: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (hash: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:83:c5:0e:89:0d:1a:dc:03:40:db:e1:cf:cd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
        Validity
            Not Before: Feb  9 20:00:13 2026 GMT
            Not After : Feb 10 20:00:13 2026 GMT
        Subject: CN=f13657420bbf2825eab0e93642389cb45bf859fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:1a:c5:b1:1e:3d:f5:6a:99:31:3e:99:22:
                    5e:91:c6:9c:4b:31:91:63:53:c0:6e:40:77:5c:98:
                    38:f5:b2:b6:af:0e:df:dd:50:f3:18:b1:1d:02:45:
                    40:d9:fe:76:7f:48:e2:c2:01:b8:6f:76:05:20:67:
                    69:7e:c8:35:ec:4b:97:2c:ad:92:be:8a:df:b6:4d:
                    34:59:c7:1a:ec:21:d7:2f:a0:1c:41:b7:f9:d9:aa:
                    9e:13:04:fb:94:13:a3:0b:3b:f6:7e:87:ed:31:48:
                    5c:bb:dc:7e:4c:61:5d:0a:84:34:fa:18:a9:97:84:
                    27:7e:33:2a:c0:37:15:69:22:75:45:85:0d:ce:c2:
                    5c:6f:69:6b:90:70:df:72:14:c2:16:a8:7b:da:b0:
                    42:b5:02:b6:de:93:ab:8c:35:17:95:2e:db:bf:7e:
                    2d:43:bb:be:e7:bb:44:62:69:9a:b0:8f:d8:d1:6b:
                    53:68:64:ad:88:15:eb:5b:67:62:4c:ea:3c:52:58:
                    08:49:e1:33:c7:23:48:30:d6:37:b6:23:d0:b1:8c:
                    fe:1f:cd:b3:8a:04:25:8c:9b:4c:26:e7:3b:b3:ca:
                    85:e8:d4:73:19:ef:72:7a:04:46:03:f6:46:39:86:
                    97:86:3e:f8:e4:f6:7d:39:5d:4b:cb:1c:8f:bb:b2:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:36:57:42:0B:BF:28:25:EA:B0:E9:36:42:38:9C:B4:5B:F8:59:FE
            X509v3 Authority Key Identifier:
                keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:34:60:29:b1:af:03:99:98:59:a7:d2:a2:8a:ac:12:95:
         6c:9a:91:a7:b0:d4:b0:ec:e2:5a:06:20:83:31:1d:fe:0e:54:
         f6:85:ef:4c:ba:98:76:3d:04:68:a9:c0:b2:d9:ed:f8:1f:fd:
         a3:65:24:72:1c:8a:8e:40:fc:0b:a4:4a:70:ba:44:9f:c2:f9:
         5b:c7:36:28:e2:e5:80:0c:d9:20:d8:7d:23:93:8f:d6:25:00:
         68:64:60:39:af:ef:14:7b:09:5b:5f:ea:0d:91:09:6f:7a:9f:
         45:65:3b:af:7c:78:f9:2f:4c:a9:be:9d:a9:7d:76:85:4f:4a:
         24:2c:8d:fa:a1:3a:6b:56:50:fd:4e:c8:5c:8c:ab:3b:0b:84:
         0f:06:74:ac:1b:06:45:69:f0:c1:98:3d:3f:a5:11:be:03:36:
         41:b4:47:cf:bf:b6:92:04:8c:59:c9:1f:a8:f9:fd:d5:9c:0d:
         c4:ec:c5:09:34:d3:a7:0a:4c:29:6c:9c:39:d6:2e:b6:2c:d8:
         99:9b:d7:b3:48:0a:37:7c:f6:65:74:70:06:b7:83:3a:0e:5c:
         18:dc:f9:fe:34:89:bc:50:40:86:ef:56:95:49:0a:67:2b:3e:
         5f:84:15:e1:5d:5a:98:e4:e2:e6:82:9d:47:19:f8:f7:6b:9d:
         45:04:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:33:52 2026 by rpki-client