This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File:                     OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier:          UyP4qXAjhImTnS+lkVx6EBGqJCpxtSywaxS+vhR8Q9E=
Subject key identifier:   05:C6:AA:EE:80:A2:E7:83:6D:0D:9E:07:B8:C9:45:36:DF:7A:83:6B
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer:       /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial:       019BFA2E2723BF8F1F8618D5760252039949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 12:01:27 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:27 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:27 +0000
Files and hashes:         1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: f6xAbKwYVkbOLtTseJU3TJlNFFOcf2SJK8zUE1oSfBA=)
                          2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
                          3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:27:23:bf:8f:1f:86:18:d5:76:02:52:03:99:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
        Validity
            Not Before: Jan 26 12:01:27 2026 GMT
            Not After : Jan 27 12:01:27 2026 GMT
        Subject: CN=05c6aaee80a2e7836d0d9e07b8c94536df7a836b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:67:4d:6b:98:6c:b7:8c:7f:8e:39:a2:9b:
                    10:9a:e4:a9:4c:69:a2:fa:be:85:ac:25:c4:47:7d:
                    ba:46:3a:d7:1f:82:25:cc:97:46:c1:d5:ac:71:45:
                    7c:c0:bd:8c:9e:f1:00:4a:1f:85:d6:7a:39:f1:cd:
                    ed:58:34:ed:37:b5:4d:3f:dd:a4:c1:e9:df:20:cb:
                    b1:a3:33:51:44:fd:66:c3:e7:cb:28:47:65:94:20:
                    ad:c0:88:e2:73:87:ca:aa:12:64:5f:dc:dc:6a:25:
                    73:43:4c:e7:b8:e1:c2:c3:af:5e:d4:94:14:94:04:
                    fe:f1:07:f9:95:bb:4b:2b:3c:99:fe:28:89:88:58:
                    6e:95:1e:e7:cb:8f:86:0a:2d:e3:4b:bd:0e:e6:18:
                    3a:10:3b:0d:d9:fd:2a:da:84:9c:24:dd:85:de:83:
                    78:4c:fc:9d:50:81:76:74:47:32:03:c0:09:23:e3:
                    bd:72:91:37:0f:09:8a:e3:7c:c8:01:58:49:a9:6a:
                    b4:03:62:8b:23:7b:2f:78:28:ad:af:a5:d3:d0:eb:
                    2b:57:0b:3e:d1:81:91:e0:f1:bb:39:6b:a0:e7:38:
                    ae:84:dc:7f:ea:07:f7:2f:b6:79:74:64:22:1a:a7:
                    59:42:39:65:d5:1c:93:62:93:d5:67:42:8c:68:89:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C6:AA:EE:80:A2:E7:83:6D:0D:9E:07:B8:C9:45:36:DF:7A:83:6B
            X509v3 Authority Key Identifier:
                keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:72:53:22:a4:96:17:35:e2:03:51:25:ec:4e:ff:b2:56:
         f4:f4:40:6c:52:d3:6f:6f:6e:9d:ed:f1:5a:c9:d4:2f:2b:2a:
         0d:36:58:24:02:a0:8e:82:ea:14:76:1c:c8:bd:e3:5e:95:9a:
         8c:05:97:ee:9a:65:d1:3d:56:52:94:dc:5f:de:e1:ab:71:ab:
         c3:d7:af:08:6b:58:f8:4e:da:f2:70:5e:80:59:47:29:83:85:
         bb:27:92:d5:2f:6e:d1:de:63:3d:16:e3:49:83:dd:2d:15:3b:
         74:ab:03:6c:78:86:d5:39:7a:35:15:f6:0e:0d:75:7f:72:b6:
         11:d9:18:75:f6:ba:4a:2f:0d:ad:50:f3:74:a1:7f:1b:76:d0:
         83:cf:bf:d2:ad:d8:e4:0c:6f:b5:f3:49:5f:7b:65:e6:a1:bc:
         37:ec:60:3f:3e:6f:3e:de:a1:99:8a:46:de:9e:45:94:3d:f8:
         87:b6:ea:c4:ac:df:4a:f1:64:67:20:9e:ae:f3:3a:3f:4a:55:
         08:d6:ca:be:e9:b4:e3:20:d1:8c:c6:be:d8:9d:a7:0f:8e:0c:
         99:c1:f1:3f:20:17:bc:c8:a3:03:2d:8a:ae:04:97:1d:b8:49:
         37:3d:22:e6:12:20:29:18:f0:7a:56:88:9d:f6:11:3f:1a:5c:
         bc:c7:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:45 2026 by rpki-client