This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File:                     mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier:          rOKQ+UD3/RD/ZykeWEGV8uvO3l8lhuWnsM2zXUSDI0I=
Subject key identifier:   81:06:FA:4E:94:96:88:5D:41:D4:FC:0D:D6:8F:FF:ED:F7:7B:16:B9
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer:       /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial:       019C1BA703FEB6FB10C207FA38B7FB7D0126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number:          14F6
Signing time:             Mon 02 Feb 2026 00:00:55 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:55 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:55 +0000
Files and hashes:         1: CC_uQGJB-X8dNzS4njkHHnRy0EE.roa (hash: kLWeBF22uNWLbsgPVVSSeJVxiHQO+5+Sj42QETQzuhc=)
                          2: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (hash: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4=)
                          3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: Gu5x48RCx54UQTdoJCTSH5w0pnObc1FJu7/52uVwWjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a7:03:fe:b6:fb:10:c2:07:fa:38:b7:fb:7d:01:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
        Validity
            Not Before: Feb  2 00:00:55 2026 GMT
            Not After : Feb  3 00:00:55 2026 GMT
        Subject: CN=8106fa4e9496885d41d4fc0dd68fffedf77b16b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:2f:e2:56:65:71:e1:88:c7:95:dc:45:86:
                    0f:00:ae:20:a3:f0:b3:f8:0c:87:23:e3:fb:8b:53:
                    a7:f5:3c:6e:42:06:8f:1b:f4:41:c4:ad:94:9e:85:
                    ff:73:0f:7a:ed:4b:e1:2e:7e:b2:cf:79:04:ab:b5:
                    78:20:01:28:dc:9a:ce:cf:aa:06:7d:50:15:68:d4:
                    fd:30:8b:19:cc:ab:8d:52:13:df:01:99:1a:df:b8:
                    32:f5:a8:08:ce:1c:5a:24:cd:7a:62:b4:08:db:ca:
                    f3:25:74:af:a0:5f:88:08:68:f4:59:28:fc:cf:94:
                    5a:6b:37:bb:f5:1e:47:f4:1f:a0:25:fd:7f:f6:1d:
                    b2:f8:19:df:50:a2:fc:d3:86:96:53:bb:a8:83:3a:
                    c3:8b:6a:53:c6:8d:b7:70:33:e2:9d:77:3b:0b:f8:
                    05:9b:1e:d9:61:a5:fe:8c:03:a7:95:b9:85:b9:60:
                    3e:c0:55:9f:95:a8:c9:ed:ab:8d:4a:d7:47:db:3e:
                    86:5f:49:da:5c:4f:00:cb:89:e5:6d:6c:14:e0:ea:
                    7c:a1:39:cd:d1:02:21:ad:f3:41:2d:d5:67:57:ae:
                    72:3c:90:58:9a:3c:cc:0f:f6:11:39:70:b3:ac:76:
                    e2:62:c7:c0:6d:a5:0f:8a:68:29:96:e6:ff:d6:6a:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:FA:4E:94:96:88:5D:41:D4:FC:0D:D6:8F:FF:ED:F7:7B:16:B9
            X509v3 Authority Key Identifier:
                keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:36:21:1e:91:05:a5:22:0b:98:6b:40:99:eb:65:0b:44:2f:
         a8:96:80:10:b7:3c:90:d7:fe:47:89:86:a0:96:1d:a5:16:65:
         ba:b5:cb:eb:fc:2e:92:92:db:36:52:73:e9:66:c2:60:dc:13:
         18:41:6d:c0:ee:e8:d6:81:dd:ea:9d:f3:e2:0d:bc:46:6c:b0:
         a2:79:f8:3d:c3:f1:57:98:ac:68:e5:24:fc:f1:f4:12:23:a1:
         c3:ca:72:4d:0b:99:5a:b6:e6:62:60:0b:15:66:25:f1:b0:aa:
         c6:82:52:55:88:e1:21:4f:49:4c:5c:e5:70:8b:d1:86:8f:ec:
         1d:a1:3d:75:f0:a5:11:9d:db:fb:a6:64:50:e1:68:96:83:3e:
         c0:47:75:6d:46:4f:b2:6c:ad:95:10:60:52:72:99:74:06:ce:
         18:93:52:16:c4:9d:f6:c2:42:c4:2a:70:71:75:93:a8:52:21:
         54:4e:93:69:eb:75:ea:16:5a:51:26:7c:0b:2c:56:47:4b:2f:
         5b:c3:9c:b4:97:de:be:3d:f2:c9:77:d9:2d:90:e6:84:d0:4a:
         0e:a3:cc:bb:fa:d5:f4:df:67:03:4b:3c:1b:c8:55:61:b1:82:
         99:ff:9f:05:a8:df:3b:1f:7f:4c:38:1f:83:59:e0:f8:ac:37:
         6d:6e:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:21 2026 by rpki-client