This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
File:                     OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft (raw, json)
Hash identifier:          vUx0GpsZe0AMQ6EYqTQGKwFyqmxXsjG97wtukK5Yfm0=
Subject key identifier:   99:D7:F6:AB:29:F7:DF:68:E7:AB:1F:FD:BA:24:84:75:70:2F:18:58
Authority key identifier: 3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48
Certificate issuer:       /CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
Certificate serial:       019C424649FB27D3498EA6F1D4657F1B0CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
Manifest number:          C6
Signing time:             Mon 09 Feb 2026 12:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:28 +0000
Files and hashes:         1: OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl (hash: V2s1FpGZQz2ao24vF73jiGeFyY70ZnqLXd48ROkYLy4=)
                          2: ncoQIgVQq-l4i3o7afgIeOVITh8.roa (hash: UCj0b7zz0t4ZSAiuxt+hcxtD38EhmlG90E6jbVZ4rNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:49:fb:27:d3:49:8e:a6:f1:d4:65:7f:1b:0c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a03e888c223b3bfae819b220ffb25f26f1c2f48
        Validity
            Not Before: Feb  9 12:00:28 2026 GMT
            Not After : Feb 10 12:00:28 2026 GMT
        Subject: CN=99d7f6ab29f7df68e7ab1ffdba248475702f1858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:3c:59:e9:e1:5c:ed:eb:ab:54:f7:1d:c2:
                    9b:67:3c:79:0f:b3:c2:d8:96:18:2f:5e:54:aa:ca:
                    51:5d:f4:18:bd:ba:e1:82:7a:61:b1:b9:c3:16:03:
                    58:10:64:de:a2:fb:44:37:36:e1:05:d5:12:d8:01:
                    f9:f8:ad:8e:d1:96:f0:e5:3f:6b:e7:ce:79:ff:52:
                    54:4b:45:cf:02:6d:e8:f8:6f:a8:f0:3e:df:67:db:
                    92:92:d0:8b:4c:6e:f5:ed:b8:59:66:44:89:5e:9f:
                    99:76:c0:64:fd:54:db:4b:6e:29:5f:64:5c:f3:f9:
                    a9:c5:ef:31:19:82:68:9d:9e:35:b9:56:5b:8b:03:
                    e3:40:fd:7d:ac:ac:83:8d:3c:b4:0d:1c:9c:63:52:
                    80:bc:83:8f:ac:c2:97:53:be:db:58:15:17:26:0f:
                    40:e9:76:a5:54:49:2f:d9:fb:d9:7e:71:a4:d0:3d:
                    ef:0e:ad:ac:7b:ef:3b:90:0b:8c:ea:04:08:76:76:
                    54:7b:1d:04:d6:05:da:9a:e9:0a:b2:a4:9f:1d:f7:
                    35:34:3d:9a:76:1e:3c:17:ee:30:d1:9b:f8:91:ba:
                    37:b9:e2:fd:5e:39:28:60:e4:ad:7d:55:12:04:35:
                    7f:5d:80:84:95:eb:20:89:97:2a:1f:53:3f:81:04:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:F6:AB:29:F7:DF:68:E7:AB:1F:FD:BA:24:84:75:70:2F:18:58
            X509v3 Authority Key Identifier:
                keyid:3A:03:E8:88:C2:23:B3:BF:AE:81:9B:22:0F:FB:25:F2:6F:1C:2F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgPoiMIjs7-ugZsiD_sl8m8cL0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d90b97-af10-42c8-82d2-8481042e9a35/1/OgPoiMIjs7-ugZsiD_sl8m8cL0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:05:fb:a1:04:d7:cc:27:af:9e:5c:3b:9f:3b:82:58:3f:
         eb:65:4a:64:11:2c:0f:6e:b5:aa:30:34:e1:f8:05:39:4b:57:
         ae:e5:59:f1:25:cc:20:1e:2f:91:84:05:a8:fe:06:2a:82:af:
         ef:9e:4d:b9:0e:38:8b:05:06:61:40:9b:a3:be:2e:d3:ff:2e:
         76:ce:d9:22:29:ec:45:37:ef:8a:01:e6:a8:5c:57:5e:56:31:
         ea:5b:7a:ae:19:10:8f:d7:8d:1b:09:11:93:eb:6d:55:06:ab:
         55:da:22:b6:54:02:a0:84:fa:02:98:e7:aa:12:f1:96:6a:16:
         92:81:bd:ba:20:5f:53:b5:aa:72:3d:d8:30:50:eb:99:63:db:
         47:40:08:4e:f8:b4:3a:b4:e8:94:a8:3a:92:83:1b:21:85:0b:
         2a:c7:f3:26:0e:04:6f:ec:e9:14:03:13:ce:8b:4f:ad:0f:7b:
         67:e5:c7:d3:4e:4d:d6:e2:bf:1b:1b:8e:70:f4:df:3b:13:0e:
         f4:06:2b:6d:fb:21:89:7f:be:21:67:54:d3:b1:83:a8:a7:46:
         b3:62:fd:66:a1:d0:78:4c:95:16:08:55:27:7a:b1:63:df:37:
         83:07:f6:76:e9:b3:21:15:aa:65:8b:2c:88:f6:bd:69:2f:1f:
         1d:ab:d2:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkn7J9NJjqbx1GV/Gwy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDNlODg4YzIyM2IzYmZhZTgxOWIyMjBmZmIyNWYyNmYx
YzJmNDgwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD
Eyg5OWQ3ZjZhYjI5ZjdkZjY4ZTdhYjFmZmRiYTI0ODQ3NTcwMmYxODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI48WenhXO3rq1T3HcKbZzx5D7PC
2JYYL15UqspRXfQYvbrhgnphsbnDFgNYEGTeovtENzbhBdUS2AH5+K2O0Zbw5T9r
5855/1JUS0XPAm3o+G+o8D7fZ9uSktCLTG717bhZZkSJXp+ZdsBk/VTbS24pX2Rc
8/mpxe8xGYJonZ41uVZbiwPjQP19rKyDjTy0DRycY1KAvIOPrMKXU77bWBUXJg9A
6XalVEkv2fvZfnGk0D3vDq2se+87kAuM6gQIdnZUex0E1gXamukKsqSfHfc1ND2a
dh48F+4w0Zv4kbo3ueL9XjkoYOStfVUSBDV/XYCElesgiZcqH1M/gQSlZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnX9qsp999o56sf/bokhHVwLxhYMB8GA1UdIwQY
MBaAFDoD6IjCI7O/roGbIg/7JfJvHC9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDIt
ODQ4MTA0MmU5YTM1LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kOTBiOTctYWYxMC00MmM4LTgyZDItODQ4MTA0MmU5YTM1
LzEvT2dQb2lNSWpzNy11Z1pzaURfc2w4bThjTDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmsF+6EE
18wnr55cO587glg/62VKZBEsD261qjA04fgFOUtXruVZ8SXMIB4vkYQFqP4GKoKv
755NuQ44iwUGYUCbo74u0/8uds7ZIinsRTfvigHmqFxXXlYx6lt6rhkQj9eNGwkR
k+ttVQarVdoitlQCoIT6ApjnqhLxlmoWkoG9uiBfU7Wqcj3YMFDrmWPbR0AITvi0
OrTolKg6koMbIYULKsfzJg4Eb+zpFAMTzotPrQ97Z+XH005N1uK/GxuOcPTfOxMO
9AYrbfshiX++IWdU07GDqKdGs2L9ZqHQeEyVFghVJ3qxY983gwf2dumzIRWqZYss
iPa9aS8fHavSag==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:21 2026 by rpki-client