This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File:                     oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier:          kU56X338Pb2MxY2VpprVV31qf/s6thKWMBJxTGaGRo0=
Subject key identifier:   98:3E:63:36:04:D8:8C:AB:DF:B6:4A:B8:CF:4B:D2:37:24:5C:A8:60
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer:       /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial:       019C435909253ED96531CBEC0DA839F199E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number:          1262
Signing time:             Mon 09 Feb 2026 17:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:34 +0000
Files and hashes:         1: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: Wc5ZND2uTFBedgL+aMap8tDGmYqRPg56j8BP2zoPNOU=)
                          2: zLO5NhttWnGtKqBNs-55QF4xyAI.roa (hash: Y+DHFPwDb32W512hSzIFIuvnQ5dNais6OF6h18YAYzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:09:25:3e:d9:65:31:cb:ec:0d:a8:39:f1:99:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
        Validity
            Not Before: Feb  9 17:00:34 2026 GMT
            Not After : Feb 10 17:00:34 2026 GMT
        Subject: CN=983e633604d88cabdfb64ab8cf4bd237245ca860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:ef:29:b7:1d:71:b0:4f:8f:c1:10:06:6d:
                    7c:60:b9:bc:a8:5d:34:d6:bb:cf:f5:2a:6e:c6:b9:
                    cd:c4:a6:06:53:78:11:7f:8c:e3:0e:98:17:5e:be:
                    f4:74:35:b7:a3:65:d5:e0:4c:26:ba:a9:8d:03:3f:
                    41:9f:09:ef:85:b1:ed:70:3c:9e:cd:0f:7f:fb:a5:
                    b8:03:83:db:9f:c4:5f:99:1d:cc:05:e6:cd:9e:a1:
                    b2:64:7c:fb:84:33:21:c4:37:fc:14:91:ed:be:04:
                    a4:06:b0:33:80:ff:2e:74:0c:34:7f:f4:ab:e2:a3:
                    45:17:f7:58:62:32:e0:16:79:a8:94:36:2f:5c:08:
                    0b:27:a4:ed:1d:1a:45:af:af:0a:06:4c:7f:16:a5:
                    90:6a:c1:5b:d7:58:2e:fc:cf:e4:74:9e:98:4d:b7:
                    cd:cc:9d:1c:18:7e:98:9d:02:b1:78:b0:9b:03:80:
                    72:fb:4a:15:b9:9e:89:60:6b:bd:08:12:c6:51:1d:
                    f4:f3:f6:11:00:86:f6:d3:55:8b:db:b6:52:69:99:
                    27:ec:b4:73:3c:27:4b:e4:58:bf:7c:0e:55:79:ff:
                    53:a3:1a:b9:4a:0c:02:48:42:5b:e3:e2:b0:4b:cd:
                    fe:37:fc:d0:8d:6b:93:82:3f:ea:25:db:e7:59:dd:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:63:36:04:D8:8C:AB:DF:B6:4A:B8:CF:4B:D2:37:24:5C:A8:60
            X509v3 Authority Key Identifier:
                keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:8c:45:ba:f8:b9:fb:e1:93:d3:62:fd:30:ff:d2:86:65:
         88:cd:60:32:2d:f8:8f:ef:e8:ae:7b:0d:a7:24:d0:cc:ff:25:
         cb:1e:75:42:00:1a:2a:23:69:f1:1a:2d:32:50:70:9f:4b:fe:
         13:c5:8a:35:2f:c3:e8:a0:87:c8:3b:1a:b6:7a:4d:9f:0a:26:
         fb:cb:06:09:5a:fb:9d:75:cf:02:53:a0:cd:33:30:90:d1:8b:
         74:f7:32:97:fe:18:6c:b0:2e:a1:fd:6b:3e:86:ac:cf:f6:85:
         74:c4:92:f5:8c:2d:54:27:47:0b:13:29:8e:e0:37:19:19:45:
         f5:d8:c0:7a:b8:1f:56:cd:52:9b:2e:61:76:c8:ce:f3:4c:02:
         46:6f:d4:c3:ac:61:0b:fa:70:a2:c7:98:d9:c9:46:b8:58:80:
         81:ba:d8:da:bf:b6:0f:4d:db:7b:66:d0:2f:2b:85:1b:2c:60:
         e1:44:2f:39:4d:bd:55:10:bd:ca:46:6b:19:66:28:2a:16:78:
         23:dc:70:47:b1:c0:3b:31:0d:09:14:53:8c:42:87:fb:ae:c9:
         cf:5f:0c:9e:2c:d1:8d:b6:a2:20:f1:b7:ec:90:b2:1a:74:9e:
         85:32:52:70:02:4d:b8:3f:5b:ee:d9:36:98:d5:9a:03:d0:7e:
         88:4e:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:51 2026 by rpki-client