This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File:                     oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier:          c5j/HQY/Q4tpvMMVHJF5hmmQfD0bkZ4xuYqVutj6L7A=
Subject key identifier:   64:2E:74:FD:6C:20:B5:F6:F0:FB:C5:0E:B6:9F:C3:59:8E:AF:C3:F9
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer:       /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial:       019C43FD8A4D920AD4EA08FC20B73D2A7FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 20:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:15 +0000
Files and hashes:         1: Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa (hash: QUllUIUWzb1bn3tS38z/e3aKNKTT0J3rQMusPQtlNMo=)
                          2: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: 7OqcxEjhHUYFFDo9KiYCS8oErKC0YIewZF2HKZLZyWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:8a:4d:92:0a:d4:ea:08:fc:20:b7:3d:2a:7f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
        Validity
            Not Before: Feb  9 20:00:15 2026 GMT
            Not After : Feb 10 20:00:15 2026 GMT
        Subject: CN=642e74fd6c20b5f6f0fbc50eb69fc3598eafc3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:47:f3:03:a6:43:b0:2f:23:bf:8d:76:72:
                    7c:00:1e:02:6f:d8:d6:49:72:0e:e4:8d:d2:8e:c5:
                    b6:d7:35:c4:94:c9:7d:6c:38:2b:e7:78:dd:6c:5e:
                    44:4d:b2:c8:54:36:ce:c8:70:d4:15:50:be:27:dd:
                    be:d9:58:20:e2:de:39:33:2b:74:b6:32:8e:c4:b4:
                    77:ec:4f:02:a4:23:85:05:2f:18:93:68:91:65:b8:
                    ef:36:d8:a6:27:b1:bd:59:a2:ed:72:77:4b:2b:f1:
                    6c:75:06:5f:4e:2b:7d:c0:6d:5a:2e:af:99:15:37:
                    bc:c1:d6:2b:55:41:7d:7a:7f:6f:e5:37:cd:f4:95:
                    7e:fe:29:e1:79:07:60:11:f7:6a:37:58:c2:67:10:
                    14:9d:e9:16:f9:af:29:d9:a9:d0:d2:dd:de:90:79:
                    c9:01:b1:e3:37:79:1d:d8:d2:3b:dd:59:d2:80:b2:
                    f4:f3:93:d9:62:01:72:e2:6a:6b:10:eb:e2:a9:a0:
                    dc:fd:d2:56:18:d0:f4:0d:4a:a3:65:16:4c:f5:b8:
                    f0:07:18:96:d0:14:5e:b2:3e:f7:64:4a:19:37:77:
                    c9:9a:4e:3a:df:41:4e:50:f4:64:c0:0f:f6:04:13:
                    c1:e2:70:9c:f4:40:bd:9b:fb:87:48:e3:8d:32:e0:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:74:FD:6C:20:B5:F6:F0:FB:C5:0E:B6:9F:C3:59:8E:AF:C3:F9
            X509v3 Authority Key Identifier:
                keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:1f:2b:15:12:cb:7f:94:00:a2:3f:ee:d7:ac:19:5b:3e:
         91:d1:39:f2:d6:a9:bc:fc:bf:61:37:3a:3b:e7:b4:45:41:a1:
         b5:7c:bc:df:11:2d:73:2c:0b:02:17:0b:a0:b0:fe:57:f3:7d:
         71:10:f7:b4:7b:ee:0e:c9:f6:b4:a4:73:7b:8f:7d:f4:a7:81:
         4f:80:a5:b7:c2:3e:b6:4f:b4:13:12:e2:46:c3:f0:88:47:75:
         44:d3:aa:3b:81:ac:0c:37:03:95:d2:37:3c:2b:5b:93:40:f8:
         15:7f:ab:2b:1f:29:59:23:eb:74:e3:f9:bf:e6:ff:4c:b8:42:
         ce:93:8c:eb:bd:2a:5f:cf:c0:52:43:cc:c5:0e:1e:e2:e9:17:
         9d:dd:bb:6b:bd:7f:c3:9f:7a:fa:c6:2d:9b:a4:bc:b1:05:70:
         57:cb:55:79:0a:89:8d:48:5a:ba:22:1b:05:ab:90:ba:c6:e3:
         ec:8e:db:43:e3:a9:c3:66:ca:4a:e1:82:8c:f4:19:08:41:fe:
         d3:6f:2f:4f:89:fb:42:4e:b8:0a:b7:1d:2e:ca:ec:2b:00:49:
         78:92:70:a8:74:22:ce:c1:5f:4e:f2:0c:11:20:c9:35:88:61:
         0a:37:d2:73:81:5e:f7:51:b3:80:62:1b:fe:37:bb:d4:f7:06:
         f8:49:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:10 2026 by rpki-client