This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          tXQM5AvpZ004oD3C1Hc4AVzPXAmJIUTGywNScrOr9kM=
Subject key identifier:   93:B3:D3:41:B0:FA:1F:5D:CF:D0:CD:CC:03:E6:D4:9D:9B:EA:26:86
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019C420FBD81D973C539BF90C7324CAFDBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          088D
Signing time:             Mon 09 Feb 2026 11:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:53 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: TVUj10kWYtmp0a3Q5jaBMUWUtrY3Dli8xT6cffhGgso=)
                          3: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          4: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:bd:81:d9:73:c5:39:bf:90:c7:32:4c:af:db:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Feb  9 11:00:53 2026 GMT
            Not After : Feb 10 11:00:53 2026 GMT
        Subject: CN=93b3d341b0fa1f5dcfd0cdcc03e6d49d9bea2686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:16:90:3b:43:ec:e8:36:c5:2a:fc:92:38:
                    6a:49:11:a6:fe:85:5d:49:fd:56:d0:f0:6c:79:85:
                    e3:92:a3:61:29:04:7c:83:09:f1:47:02:3f:f9:26:
                    5c:f7:42:64:38:a6:81:4c:bf:40:fa:9b:68:55:83:
                    8d:58:7d:ca:56:f5:d8:52:34:ba:6b:e8:db:d4:46:
                    f7:37:47:fe:8c:53:b1:76:a8:25:27:fe:8c:9a:e3:
                    a3:08:85:88:aa:91:ae:77:33:b1:21:75:2d:e9:34:
                    04:c3:24:bf:7f:44:2e:38:94:d8:da:1c:32:41:86:
                    38:cf:01:77:3c:a4:31:5c:43:3e:86:23:c7:4d:29:
                    35:3e:f2:b6:15:b6:1b:96:5c:ff:48:c5:e5:94:f8:
                    fe:d0:0d:26:c7:77:2a:35:0e:c5:b2:a1:51:56:67:
                    3a:74:dc:75:19:4a:11:4e:a7:c2:43:46:e7:e9:52:
                    b6:b3:0d:d0:55:7a:e4:4e:e2:19:27:49:7a:48:e1:
                    76:d5:eb:c1:5e:2d:a7:8e:37:c3:d6:fd:1f:80:62:
                    06:c3:e7:56:29:6a:a7:5a:8d:dd:6f:2b:8f:ad:ae:
                    fd:cc:bf:3f:0b:0a:47:48:8b:cd:ec:56:a9:dd:9a:
                    a3:f6:9c:19:89:d5:6e:41:f6:82:ec:72:e3:19:ae:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:D3:41:B0:FA:1F:5D:CF:D0:CD:CC:03:E6:D4:9D:9B:EA:26:86
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:09:f3:51:38:37:a1:c9:13:5b:3a:3a:6f:4e:27:8d:08:97:
         11:0f:ed:a8:1f:fe:e8:43:80:a0:f5:dc:b8:48:b2:40:41:45:
         57:ed:5d:28:56:df:01:45:9e:ac:3c:61:46:e3:28:04:7e:f1:
         50:7a:c7:b5:de:5b:65:51:45:7e:5a:6b:4e:c7:83:b1:4e:81:
         bb:11:bd:6e:55:c6:74:18:ac:de:4e:7c:74:a6:2c:50:45:0e:
         b4:d7:a6:52:ee:ea:09:a1:56:43:3a:ad:55:06:b2:42:6d:05:
         6a:f2:45:f4:fc:3d:3c:6a:2a:11:15:d0:a2:7f:70:64:5f:b4:
         25:e3:6c:d0:c3:da:cd:7f:3e:69:90:3b:fa:47:9e:a4:fc:c5:
         87:2c:e3:d3:44:b6:ef:06:44:b0:6a:9f:20:c2:2b:7f:80:fd:
         08:4c:18:75:32:68:a1:9e:96:17:67:b8:34:3d:70:ca:35:2c:
         66:80:ea:85:14:8e:4c:f4:f2:99:a7:f8:d4:68:e5:e9:ca:4c:
         8e:a1:43:9e:53:6b:a5:11:a9:f8:f9:9c:78:1b:f1:e5:bc:33:
         e7:6f:6a:45:5d:d1:4a:41:f7:75:1b:08:c3:d8:97:cc:8b:96:
         9a:f4:a4:1f:38:b2:c6:80:c3:16:46:c9:8d:b4:10:42:5a:1d:
         75:3b:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:37 2026 by rpki-client