This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File:                     OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier:          g5O3EoOHI4UxHs4qfRj6NEOpUTgTPHmAqAvcUoE73LY=
Subject key identifier:   4F:34:3C:B5:8E:52:DF:C4:9D:FD:65:24:67:0D:B1:06:11:1C:B3:E6
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer:       /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial:       019C4133D7240D1EF6909641EBAABCF120DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number:          17D8
Signing time:             Mon 09 Feb 2026 07:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:42 +0000
Files and hashes:         1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: BpmPLuypus3U6EotDHxtAgQnRpQpy8bztOTaMswQ8Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:d7:24:0d:1e:f6:90:96:41:eb:aa:bc:f1:20:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
        Validity
            Not Before: Feb  9 07:00:42 2026 GMT
            Not After : Feb 10 07:00:42 2026 GMT
        Subject: CN=4f343cb58e52dfc49dfd6524670db106111cb3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:a9:e0:e3:d2:c2:04:46:90:f4:3d:bb:67:
                    d3:64:12:52:ca:fe:7f:88:95:fc:bc:e8:cc:31:96:
                    f8:51:b6:7f:6a:cf:a8:c3:b4:d1:f5:88:0a:8d:1a:
                    10:32:11:e9:f1:9c:05:fe:2b:0d:11:9c:3e:eb:5a:
                    b6:f7:87:71:05:39:8a:ad:9e:0c:03:c8:fc:9f:2c:
                    d3:c3:5c:17:4a:4b:f0:8b:db:81:37:70:00:4f:eb:
                    48:d4:a3:81:f5:d9:4c:3c:1a:e0:01:17:ef:a8:62:
                    c7:2e:e0:88:c5:48:05:a5:42:ae:3b:6b:43:1b:61:
                    d9:96:1c:62:6b:9a:65:bf:a2:7a:b2:1f:3b:4f:8d:
                    cc:20:90:46:db:94:73:ec:6b:86:90:19:d6:d7:21:
                    2e:89:95:8b:c0:ae:14:42:47:6e:9d:07:7d:7c:1e:
                    06:1d:cc:aa:d9:86:55:ca:73:76:cf:39:fb:02:5e:
                    6f:0a:91:f9:ce:c7:30:ed:ac:30:42:26:17:c5:13:
                    b2:0e:ee:b1:20:47:42:06:d7:5a:7e:5d:10:45:d4:
                    0a:94:36:3b:c1:17:d2:a2:78:8d:bc:2a:b3:b1:52:
                    f3:a4:7f:d2:4e:9c:1c:4a:16:d5:76:f3:23:7f:2f:
                    b7:cd:05:7d:fb:6c:93:ff:66:6f:e3:53:f4:7a:78:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:3C:B5:8E:52:DF:C4:9D:FD:65:24:67:0D:B1:06:11:1C:B3:E6
            X509v3 Authority Key Identifier:
                keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:fa:ac:59:e0:7e:a3:f0:9e:a1:c6:26:4b:57:9a:4e:0d:
         b0:e5:f6:f9:39:5c:92:ea:f1:6f:2f:93:a1:d2:14:cd:b0:cb:
         17:e8:30:49:e5:55:4e:17:07:76:8f:64:71:9a:f9:0d:f0:f5:
         e8:ca:9f:64:3a:ab:66:c8:85:b9:4e:fc:a7:ee:36:c7:7c:50:
         40:7e:e2:b6:55:c1:f2:19:fc:3d:21:3d:23:37:cf:7e:62:85:
         09:d0:32:97:f0:05:0f:5d:45:d3:85:3a:39:2f:62:93:5d:48:
         ab:8e:a3:42:1d:78:74:3c:d0:90:a1:44:5e:99:8b:4b:cd:4d:
         af:b0:0e:02:ad:02:f6:96:ed:5a:b5:5b:08:49:84:91:ad:ab:
         40:8e:37:34:56:c9:61:a9:8e:d6:13:f6:a1:d7:be:ce:fc:cc:
         45:2a:ea:e0:09:e7:07:da:25:74:90:51:fd:dc:8d:66:d0:8c:
         88:a3:c9:53:ce:a8:d2:dc:be:d1:8f:55:ee:25:67:6c:96:3f:
         d9:2b:7d:b8:28:8f:f6:e4:f5:bc:e0:e8:00:70:0a:fa:81:69:
         5b:79:3d:3e:a6:f6:cb:de:13:3b:07:e9:a9:dd:99:c7:5a:2c:
         b7:e4:ff:bb:fb:56:fa:68:93:f6:94:7c:e6:4f:06:a6:d0:4a:
         e5:d0:63:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM9ckDR72kJZB66q88SDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk
ZjJkNmIwHhcNMjYwMjA5MDcwMDQyWhcNMjYwMjEwMDcwMDQyWjAzMTEwLwYDVQQD
Eyg0ZjM0M2NiNThlNTJkZmM0OWRmZDY1MjQ2NzBkYjEwNjExMWNiM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKp4OPSwgRGkPQ9u2fTZBJSyv5/
iJX8vOjMMZb4UbZ/as+ow7TR9YgKjRoQMhHp8ZwF/isNEZw+61q294dxBTmKrZ4M
A8j8nyzTw1wXSkvwi9uBN3AAT+tI1KOB9dlMPBrgARfvqGLHLuCIxUgFpUKuO2tD
G2HZlhxia5plv6J6sh87T43MIJBG25Rz7GuGkBnW1yEuiZWLwK4UQkdunQd9fB4G
Hcyq2YZVynN2zzn7Al5vCpH5zscw7awwQiYXxROyDu6xIEdCBtdafl0QRdQKlDY7
wRfSoniNvCqzsVLzpH/STpwcShbVdvMjfy+3zQV9+2yT/2Zv41P0engHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE80PLWOUt/Enf1lJGcNsQYRHLPmMB8GA1UdIwQY
MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt
Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj
LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmb/6rFng
fqPwnqHGJktXmk4NsOX2+Tlckurxby+TodIUzbDLF+gwSeVVThcHdo9kcZr5DfD1
6MqfZDqrZsiFuU78p+42x3xQQH7itlXB8hn8PSE9IzfPfmKFCdAyl/AFD11F04U6
OS9ik11Iq46jQh14dDzQkKFEXpmLS81Nr7AOAq0C9pbtWrVbCEmEka2rQI43NFbJ
YamO1hP2ode+zvzMRSrq4AnnB9oldJBR/dyNZtCMiKPJU86o0ty+0Y9V7iVnbJY/
2St9uCiP9uT1vODoAHAK+oFpW3k9Pqb2y94TOwfpqd2Zx1ost+T/u/tW+miT9pR8
5k8GptBK5dBj9w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:44 2026 by rpki-client