This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File:                     oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier:          ZDAn2TVdLZebG7zGkDQS48lb6CWUE0w6Nb27tqD4p5M=
Subject key identifier:   A3:2D:AC:13:11:BE:3D:63:55:52:96:07:73:A3:30:6E:F9:5A:30:92
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer:       /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial:       019C41A1D3B9734EC25307D877E1B3A4E8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number:          06D8
Signing time:             Mon 09 Feb 2026 09:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:50 +0000
Files and hashes:         1: TRTbys13hMPw7qPZ6_zT9S6DlZU.roa (hash: UwtEWUeqSkdN9j3umwCxrdjYmKQ9n0cv0zhOxAG4uV4=)
                          2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: vI9raJ+CBk5cG7x6m572Qu/qW8ceGCz72tRfk4JelDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d3:b9:73:4e:c2:53:07:d8:77:e1:b3:a4:e8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
        Validity
            Not Before: Feb  9 09:00:50 2026 GMT
            Not After : Feb 10 09:00:50 2026 GMT
        Subject: CN=a32dac1311be3d635552960773a3306ef95a3092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:0a:69:bc:64:8b:ee:07:f8:2e:7e:99:df:
                    63:84:ac:04:69:1e:91:20:cd:4f:ee:7d:a3:b2:b1:
                    a4:55:49:61:76:38:72:11:fa:5d:76:b9:3b:64:09:
                    31:84:19:78:4e:5e:aa:bb:34:00:45:32:77:78:de:
                    b2:2f:f0:bc:0d:75:0e:7b:36:f4:c7:66:2f:05:f0:
                    cd:86:63:fe:50:b3:bf:e1:a6:9d:d4:ff:b1:f3:ea:
                    7e:96:cf:80:7a:79:0f:cc:d0:56:86:46:e4:81:dc:
                    e1:bf:f6:bb:93:0e:51:07:9f:66:aa:33:58:3c:31:
                    bb:6f:91:77:82:08:1e:20:57:a9:bf:38:f1:d4:84:
                    17:56:fa:ef:1d:e7:95:b7:14:97:72:55:d4:a5:6e:
                    5c:7a:02:fc:6e:a4:f5:42:d5:fc:33:29:cc:b9:01:
                    b6:80:a3:e7:41:48:98:4f:d3:19:a5:54:f5:1d:3f:
                    d1:76:34:c9:23:10:99:50:8b:e5:3f:14:02:8f:be:
                    6b:d9:41:72:dc:ac:2c:67:98:5e:a7:42:11:ee:8a:
                    73:9e:d6:67:8a:74:2a:c9:89:96:6c:29:a1:14:6d:
                    09:db:b8:7e:4d:a6:1f:88:90:80:53:01:a4:75:4b:
                    50:dd:19:3b:05:6d:29:14:84:12:37:33:ec:ae:46:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:AC:13:11:BE:3D:63:55:52:96:07:73:A3:30:6E:F9:5A:30:92
            X509v3 Authority Key Identifier:
                keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:f0:34:7a:e3:16:9e:69:18:e7:72:12:c5:96:4f:f3:9f:
         ab:99:f7:fa:ad:fd:7c:79:8f:31:b7:23:e5:8e:59:87:ee:d7:
         0b:d4:29:ce:e9:4c:bd:d4:fc:d9:fe:76:b7:ca:49:50:4a:2f:
         6a:0e:b1:69:d3:2e:ec:1e:ff:e8:4f:61:41:63:8b:46:de:ab:
         5c:48:0c:76:ab:a8:93:ca:ef:be:0e:ca:f8:87:71:35:75:76:
         75:64:66:7a:40:5e:f1:5c:d2:2a:de:26:f9:1e:fb:03:55:d6:
         95:fc:1b:79:cb:16:e5:67:e5:db:ea:0e:d8:f2:89:4a:22:4c:
         01:62:a3:d8:83:56:71:0d:9e:38:99:b7:90:0d:50:a2:bc:67:
         1a:fe:b7:d3:bb:1d:73:3b:b9:6d:7c:52:d8:b7:f9:84:eb:bf:
         c3:46:a5:fe:e6:66:46:ee:c7:3c:60:b6:34:b7:2d:64:ce:71:
         ed:b5:fa:41:bc:73:85:23:75:3d:2e:62:71:13:bb:34:4f:1b:
         56:ab:d3:70:04:63:2c:fb:0e:1b:cf:91:6b:57:48:34:92:fb:
         86:e6:e3:9d:a4:90:a0:5f:fb:50:cf:7e:fe:e0:75:b5:8b:af:
         72:79:fc:5f:d6:e7:39:d5:0f:eb:6f:38:7e:e3:be:09:92:20:
         d0:1e:7c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBodO5c07CUwfYd+GzpOjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj
OWQ4ZGEwHhcNMjYwMjA5MDkwMDUwWhcNMjYwMjEwMDkwMDUwWjAzMTEwLwYDVQQD
EyhhMzJkYWMxMzExYmUzZDYzNTU1Mjk2MDc3M2EzMzA2ZWY5NWEzMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq60Kabxki+4H+C5+md9jhKwEaR6R
IM1P7n2jsrGkVUlhdjhyEfpddrk7ZAkxhBl4Tl6quzQARTJ3eN6yL/C8DXUOezb0
x2YvBfDNhmP+ULO/4aad1P+x8+p+ls+AenkPzNBWhkbkgdzhv/a7kw5RB59mqjNY
PDG7b5F3gggeIFepvzjx1IQXVvrvHeeVtxSXclXUpW5cegL8bqT1QtX8MynMuQG2
gKPnQUiYT9MZpVT1HT/RdjTJIxCZUIvlPxQCj75r2UFy3KwsZ5hep0IR7opzntZn
inQqyYmWbCmhFG0J27h+TaYfiJCAUwGkdUtQ3Rk7BW0pFIQSNzPsrkYplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMtrBMRvj1jVVKWB3OjMG75WjCSMB8GA1UdIwQY
MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt
NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm
LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+7wNHrj
Fp5pGOdyEsWWT/Ofq5n3+q39fHmPMbcj5Y5Zh+7XC9QpzulMvdT82f52t8pJUEov
ag6xadMu7B7/6E9hQWOLRt6rXEgMdquok8rvvg7K+IdxNXV2dWRmekBe8VzSKt4m
+R77A1XWlfwbecsW5Wfl2+oO2PKJSiJMAWKj2INWcQ2eOJm3kA1QorxnGv6307sd
czu5bXxS2Lf5hOu/w0al/uZmRu7HPGC2NLctZM5x7bX6QbxzhSN1PS5icRO7NE8b
VqvTcARjLPsOG8+Ra1dINJL7hubjnaSQoF/7UM9+/uB1tYuvcnn8X9bnOdUP6284
fuO+CZIg0B58kQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:48 2026 by rpki-client