This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          fda5hmBF0pWa3I9TAPnTGM0SOdcnSTW3f7bpBWO3Q9A=
Subject key identifier:   12:46:D5:6B:F6:05:6F:42:94:A6:97:91:5D:23:FB:1E:73:52:98:2A
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       019C36E76E277313C1E287D00B6CCB0875B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          048C
Signing time:             Sat 07 Feb 2026 07:01:02 +0000
Manifest this update:     Sat 07 Feb 2026 07:01:02 +0000
Manifest next update:     Sun 08 Feb 2026 07:01:02 +0000
Files and hashes:         1: 5kdfSFfIXpTRDKj7nU9dTnk_a7Q.roa (hash: Qud0EaTIzAf2oGbBUwUkaVwSjph89PDDdo19BAvVZGk=)
                          2: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (hash: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY=)
                          3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: hfGzqMROy/kiRxStLHHBlTA/ezG2pSrKQvJRrZ3fTBo=)
                          4: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (hash: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:36:e7:6e:27:73:13:c1:e2:87:d0:0b:6c:cb:08:75:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Feb  7 07:01:02 2026 GMT
            Not After : Feb  8 07:01:02 2026 GMT
        Subject: CN=1246d56bf6056f4294a697915d23fb1e7352982a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:7f:17:ee:f0:cd:df:f8:05:d2:bf:48:a6:
                    dd:6d:bc:e7:3c:04:32:0d:6a:67:cd:7f:52:c1:00:
                    0b:f7:ff:fb:db:a9:e3:3e:1b:df:5c:ac:c5:bb:ad:
                    27:3a:24:e3:7e:0f:de:1e:70:0a:98:87:d7:65:c7:
                    3d:59:ee:e7:1e:79:be:e8:0b:2d:f8:be:b5:bf:1a:
                    21:2f:8d:6a:42:b6:10:b0:eb:5c:64:de:10:d7:55:
                    56:00:79:5f:50:b7:b9:e4:d5:23:0b:8d:01:fa:86:
                    6f:58:d7:35:26:6e:32:1e:62:9c:72:9b:66:dc:d9:
                    de:06:18:04:ea:11:7d:d0:6d:95:49:47:75:df:dc:
                    8e:7d:e9:3d:e6:b0:c9:f0:e3:ab:ea:4f:d1:ff:9e:
                    4a:60:5a:28:59:8d:64:e9:5d:77:9a:03:9c:a1:b5:
                    aa:18:c0:d4:66:c7:85:de:d0:a7:c8:3f:fc:9a:57:
                    af:90:a7:ce:16:54:bb:70:d5:77:64:68:f5:1d:ce:
                    9c:46:9a:37:9f:76:06:ce:1d:57:da:b5:db:3d:fa:
                    5a:ce:0d:bd:f5:0b:32:96:bd:4c:aa:18:51:50:b7:
                    b6:f9:2e:bd:25:4a:ec:6b:ac:52:69:34:8c:b8:05:
                    ed:c4:88:3d:cf:b0:b8:07:f0:42:69:2a:ca:51:aa:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:D5:6B:F6:05:6F:42:94:A6:97:91:5D:23:FB:1E:73:52:98:2A
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:88:01:34:9f:73:7d:74:53:7d:db:30:77:08:c4:80:ca:49:
         80:f0:e7:36:12:43:25:55:17:2f:4e:f7:79:15:28:8b:bf:67:
         79:c6:a9:98:cf:cb:66:dc:0a:5b:eb:ca:e8:c8:03:b1:bb:87:
         7d:20:12:b5:3e:19:86:86:4f:97:0b:73:31:0c:f2:80:59:14:
         ce:f1:61:3e:9e:f8:dd:d0:64:9b:5e:86:eb:1e:de:fb:f3:eb:
         f4:c4:34:29:87:d7:1f:f2:c5:db:21:c0:30:5f:a3:9a:87:3f:
         82:7b:bc:54:81:66:ea:bf:3c:88:99:79:db:af:93:46:fd:b5:
         79:47:9c:da:dc:be:bc:25:31:90:95:1e:f6:75:d0:b6:69:25:
         04:f1:10:c2:c0:f1:81:2f:cd:0a:5a:1a:7e:ec:61:4a:63:d2:
         6e:f0:9f:3e:d7:3b:86:b9:84:f9:c1:ee:6f:3f:36:f1:29:5f:
         9a:1c:52:2b:e2:e0:9a:09:b4:53:11:a3:cd:53:4f:b6:8c:89:
         b6:33:e9:09:3a:25:81:5a:88:e3:5c:9b:6e:c3:11:5b:77:75:
         55:d7:62:06:26:5e:4b:fb:75:aa:36:4b:6d:fd:2d:48:24:7b:
         51:91:79:24:dc:b5:24:f4:a4:bd:35:77:53:e9:39:08:0b:5b:
         34:da:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 16:32:04 2026 by rpki-client