This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File:                     oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier:          bKmzn2QgupsnF7ND7YsEMQ4PUmP8nL+OCpKw5VAtuo4=
Subject key identifier:   46:75:E4:8A:54:24:D5:4D:B9:A6:37:45:45:69:6B:DD:0F:DE:24:F8
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer:       /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial:       019C44D9E743852E67C6D6335FE98C964A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number:          1818
Signing time:             Tue 10 Feb 2026 00:00:56 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:56 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:56 +0000
Files and hashes:         1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=)
                          2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=)
                          3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=)
                          4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: hlnXC3VStpuZyYsH+qScvt2TNkfHGkYNC2gKxa5uBBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:e7:43:85:2e:67:c6:d6:33:5f:e9:8c:96:4a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
        Validity
            Not Before: Feb 10 00:00:56 2026 GMT
            Not After : Feb 11 00:00:56 2026 GMT
        Subject: CN=4675e48a5424d54db9a6374545696bdd0fde24f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:f9:f4:4d:73:4b:ea:c4:08:09:ae:6a:38:
                    97:06:56:a8:41:f3:b1:88:8d:e2:c7:1d:57:df:6e:
                    6e:ee:27:78:86:0e:45:db:ff:a1:c1:35:f5:0e:71:
                    04:8d:e0:e7:ce:5d:da:22:35:10:e6:bf:98:07:8a:
                    ee:98:58:5c:84:0d:59:57:8f:51:ff:d6:66:5d:3d:
                    8c:b2:88:bc:b6:ce:0e:2f:e7:b7:58:8f:45:78:72:
                    f7:ea:1c:a1:d8:9e:da:5f:17:97:f2:d3:e4:da:10:
                    81:65:a5:a9:a1:cb:25:96:a6:d2:1c:26:a0:ff:8a:
                    75:74:a2:c6:b0:c8:14:50:30:45:2c:f2:d1:dc:4b:
                    1d:c7:84:d1:cb:dd:48:f7:18:01:72:78:22:08:e4:
                    d3:f5:87:3f:a3:36:91:3f:0c:70:2e:dd:f7:7f:2a:
                    f6:e1:ba:b0:dc:41:94:3a:2a:26:1d:04:35:ba:8e:
                    41:be:71:39:41:46:f6:77:a4:28:b1:68:74:08:8c:
                    1f:66:1f:b0:91:79:38:e5:de:3b:3c:8a:5f:d1:5d:
                    8f:c9:e9:20:90:8f:7c:8e:d6:0f:ea:32:9a:5d:27:
                    8d:ef:c8:4e:3a:0c:fe:93:38:19:a4:95:df:8b:37:
                    91:9f:84:b8:5f:6b:d3:b6:be:32:85:8a:60:8c:ef:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:E4:8A:54:24:D5:4D:B9:A6:37:45:45:69:6B:DD:0F:DE:24:F8
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:59:be:fa:e8:08:0c:c5:5e:9d:8f:1a:db:02:c2:5a:02:
         10:a0:ee:3d:ce:19:c4:16:df:22:ea:63:db:80:5a:9b:c8:55:
         a5:d8:fe:8c:23:37:52:a8:de:02:c8:82:77:a1:d2:35:db:55:
         9b:b4:c6:54:84:6a:40:95:6b:73:e9:a0:6b:39:18:b0:50:4f:
         85:30:38:0f:47:96:1a:7b:73:62:d1:18:15:ef:5e:51:45:66:
         41:d0:a2:41:d9:d2:07:75:04:30:eb:83:60:38:ff:38:ed:9e:
         b0:5f:15:4a:c1:16:86:ac:0c:77:71:f1:5b:2f:6a:fe:b3:c8:
         b2:58:c5:4d:c7:e4:71:ba:3e:8a:af:f0:8f:84:b9:2c:b0:6f:
         a5:01:7b:68:bc:8d:14:0c:59:28:c1:44:6c:01:e4:07:6d:e9:
         35:55:83:9c:3f:e7:e9:3d:52:78:6d:e1:45:2e:e9:5e:0f:8f:
         0b:77:29:73:db:17:53:82:1a:98:77:f7:69:f5:64:11:ee:ba:
         52:4a:7e:d2:24:97:53:02:81:51:a4:d6:62:85:9d:e3:b8:b4:
         07:26:85:47:33:79:45:ce:2b:b9:1c:68:54:4e:41:bb:1c:1c:
         ff:72:c4:0b:60:e4:63:67:fa:64:17:2b:6f:f7:39:3c:18:77:
         31:c2:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:24 2026 by rpki-client