This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File:                     OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier:          Mbju7LFk0cFjyP+zs3YmzDkBWKM0WPo4Nrt+GQUVV5E=
Subject key identifier:   4C:6F:E9:23:85:96:3F:CE:5B:8C:17:37:BD:74:3E:66:16:A1:5D:95
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer:       /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial:       019C4322670C51049EB8300DA712FE044714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 16:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:53 +0000
Files and hashes:         1: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: YBhjryXhdmhGWbuNZAtPQ+9rGH4m1m5Vbg6ckwRwSMU=)
                          2: r2XaIkvbtNRIA7GDmackHk60QAM.roa (hash: 5qhD+1z/Ukex+udgPBqOlQgjbCAqwLAXHXdPV8FaxfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:67:0c:51:04:9e:b8:30:0d:a7:12:fe:04:47:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
        Validity
            Not Before: Feb  9 16:00:53 2026 GMT
            Not After : Feb 10 16:00:53 2026 GMT
        Subject: CN=4c6fe92385963fce5b8c1737bd743e6616a15d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:ca:0c:e9:b7:af:25:a1:21:07:14:04:a5:
                    5c:b4:87:14:5c:67:f7:5a:7d:48:0b:7c:10:81:73:
                    0e:15:a1:d3:84:e6:6b:93:27:c1:ea:60:85:dd:9e:
                    9b:4e:d2:49:04:a4:44:7f:9a:3b:ed:70:07:46:15:
                    c0:ac:6f:fd:dc:06:ca:24:33:3d:22:d5:e8:e7:2d:
                    67:73:3c:15:8f:68:d0:31:62:4e:17:ea:01:34:f0:
                    1f:34:2d:d7:2a:77:44:66:4f:84:f9:30:9a:26:92:
                    4e:27:9d:40:28:c5:76:95:c8:17:c3:41:80:6b:02:
                    c3:9d:62:72:02:9d:2d:70:f9:d8:d1:3c:1a:c1:a4:
                    9d:31:6e:23:94:8b:ab:8c:01:70:dd:90:54:c3:1b:
                    09:de:5b:1f:31:f1:b7:c4:99:f5:ce:9a:73:0c:ff:
                    6a:39:70:a3:56:75:e8:ba:a9:d1:c3:c4:97:da:91:
                    e5:9f:9e:77:58:2b:a6:f6:94:40:d0:f4:bf:18:f2:
                    a1:6c:2d:55:90:bc:5a:60:60:dd:5f:fe:e4:e5:fe:
                    6b:88:7f:41:35:6a:3d:02:fc:e2:e2:c8:e7:52:b0:
                    c6:0d:2a:2a:66:ee:d2:54:0c:e0:d4:86:4c:64:ae:
                    40:b9:d3:fd:8e:3e:ba:cd:b3:67:fd:d3:7d:40:3c:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6F:E9:23:85:96:3F:CE:5B:8C:17:37:BD:74:3E:66:16:A1:5D:95
            X509v3 Authority Key Identifier:
                keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:d6:c9:e6:35:ab:83:73:ad:10:47:c8:f0:33:d7:fd:0d:
         93:39:b9:d7:e8:4f:9e:72:fd:2b:c4:fe:cb:51:e0:c3:dc:65:
         ec:9b:d2:23:53:2e:d5:b4:df:53:8a:d0:d4:d3:f4:d5:81:88:
         26:d0:a7:f1:5b:96:8d:94:59:39:41:39:76:0e:71:d7:d8:9d:
         0a:8e:2c:20:d0:6e:be:59:36:c0:50:86:ff:a5:e7:8f:ec:4f:
         67:15:f8:c7:93:d2:9c:b9:f6:28:87:47:0b:c4:4b:68:70:59:
         69:19:a7:68:64:e2:03:75:d8:ca:1e:0d:d8:b1:f9:c4:93:5e:
         b1:fb:c6:94:5f:37:d9:67:c8:ab:c3:41:85:5b:93:ae:3d:2a:
         39:1a:c0:96:27:1f:4f:73:2c:07:2a:d9:89:31:46:92:43:48:
         55:96:04:ef:f7:6f:be:5e:fe:7e:38:bc:92:37:2f:da:40:e9:
         d0:27:48:ab:66:87:65:3b:0a:45:e0:38:fd:f8:ee:a0:37:5f:
         cc:e1:5c:bf:63:e6:3b:c9:df:a4:1b:17:fa:07:23:d6:5f:5d:
         c5:73:67:1a:80:f4:cc:06:85:8a:64:08:c9:d8:33:fe:8c:d5:
         8a:7a:6a:84:c5:15:36:6a:99:e2:47:cd:01:c8:e4:24:9d:73:
         74:2b:7b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDImcMUQSeuDANpxL+BEcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTAwOTYyNDdhOGM1NGU1ZGU4YzFiMGRhZjEwNTRhZWM4
Y2M0NTAwHhcNMjYwMjA5MTYwMDUzWhcNMjYwMjEwMTYwMDUzWjAzMTEwLwYDVQQD
Eyg0YzZmZTkyMzg1OTYzZmNlNWI4YzE3MzdiZDc0M2U2NjE2YTE1ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpDKDOm3ryWhIQcUBKVctIcUXGf3
Wn1IC3wQgXMOFaHThOZrkyfB6mCF3Z6bTtJJBKREf5o77XAHRhXArG/93AbKJDM9
ItXo5y1nczwVj2jQMWJOF+oBNPAfNC3XKndEZk+E+TCaJpJOJ51AKMV2lcgXw0GA
awLDnWJyAp0tcPnY0TwawaSdMW4jlIurjAFw3ZBUwxsJ3lsfMfG3xJn1zppzDP9q
OXCjVnXouqnRw8SX2pHln553WCum9pRA0PS/GPKhbC1VkLxaYGDdX/7k5f5riH9B
NWo9Avzi4sjnUrDGDSoqZu7SVAzg1IZMZK5AudP9jj66zbNn/dN9QDxCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExv6SOFlj/OW4wXN710PmYWoV2VMB8GA1UdIwQY
MBaAFDrgCWJHqMVOXejBsNrxBUrsjMRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgt
Yjk3MjIxNDQ1MTNmLzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgtYjk3MjIxNDQ1MTNm
LzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbHWyeY1
q4NzrRBHyPAz1/0Nkzm51+hPnnL9K8T+y1Hgw9xl7JvSI1Mu1bTfU4rQ1NP01YGI
JtCn8VuWjZRZOUE5dg5x19idCo4sINBuvlk2wFCG/6Xnj+xPZxX4x5PSnLn2KIdH
C8RLaHBZaRmnaGTiA3XYyh4N2LH5xJNesfvGlF832WfIq8NBhVuTrj0qORrAlicf
T3MsByrZiTFGkkNIVZYE7/dvvl7+fji8kjcv2kDp0CdIq2aHZTsKReA4/fjuoDdf
zOFcv2PmO8nfpBsX+gcj1l9dxXNnGoD0zAaFimQIydgz/ozVinpqhMUVNmqZ4kfN
AcjkJJ1zdCt7Tw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:22 2026 by rpki-client