This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          Vd2lmvCLJeLg6YOGvONCHMZpjn8yIMWnOa2UKl6C/h0=
Subject key identifier:   7A:DA:2B:C2:24:50:C7:3A:44:A3:46:92:5B:77:72:D2:06:96:E5:5E
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       019BF6BF14143676B9D32E2E6A165ECC8993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0865
Signing time:             Sun 25 Jan 2026 20:01:16 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:16 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:16 +0000
Files and hashes:         1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: Om2M3KctBWTEC4lhfRmyDYKvwV1v7fzYc1jz7LEsrUQ=)
                          3: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
                          4: nOhWNY3k5NHztVEKXXk1vRCnDmU.roa (hash: ZO9GHz2eOWtuW3pNgPKTouW9OSlwfQuUBg+Jbg0bqMM=)
                          5: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:14:14:36:76:b9:d3:2e:2e:6a:16:5e:cc:89:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Jan 25 20:01:16 2026 GMT
            Not After : Jan 26 20:01:16 2026 GMT
        Subject: CN=7ada2bc22450c73a44a346925b7772d20696e55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:a5:e8:6d:e6:db:b4:8b:94:8a:fe:04:a4:
                    1b:3a:3a:d8:40:b1:46:3c:e1:f3:dd:63:49:77:88:
                    89:b5:17:2f:55:f9:c3:65:19:74:8b:4f:91:b7:36:
                    67:52:21:0f:5a:e2:46:5c:f2:f1:45:de:19:1a:ac:
                    49:ac:64:b6:e3:16:61:e6:2f:36:a7:79:c8:d2:98:
                    fd:f8:80:05:2a:40:4c:85:a0:03:a7:5d:6f:80:a0:
                    f3:29:68:40:18:12:2a:0f:d1:35:c8:66:bb:80:cf:
                    95:08:4a:f4:68:ab:37:9e:74:10:f6:3c:e0:98:93:
                    15:9b:fc:65:cc:c5:b9:6a:b4:95:4f:56:13:57:e9:
                    70:8b:ee:6e:fa:8b:cb:be:6d:c0:d9:8b:f7:51:f3:
                    e4:76:fa:1b:5a:9d:4b:f2:4e:d4:32:f4:19:3a:c3:
                    8e:a4:45:c4:b3:ea:01:ab:4e:92:df:82:0c:c2:1d:
                    63:d9:eb:35:b9:72:53:f2:2a:2c:c9:c2:e3:d8:81:
                    e0:68:5e:37:a6:a7:fe:8b:1e:96:6f:7b:2d:68:b6:
                    3c:d7:f8:7b:54:b4:ab:ed:5b:b2:14:06:ba:4a:10:
                    a1:37:42:1e:7a:ac:2d:bf:52:5e:86:ee:f5:d9:68:
                    9e:07:db:b2:d9:3d:f8:44:5b:6d:6f:22:0a:6b:7e:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:2B:C2:24:50:C7:3A:44:A3:46:92:5B:77:72:D2:06:96:E5:5E
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:02:bd:c9:5c:02:52:43:19:82:0a:2c:bc:43:88:ab:a3:bf:
         04:6d:d5:22:41:b7:5d:2f:6b:f3:12:76:d3:af:42:82:b4:52:
         8f:17:e3:0e:21:53:77:0f:9e:ef:64:b4:6f:b2:02:02:93:57:
         66:3e:1c:a7:b1:b4:20:9e:28:fc:14:2f:bb:4a:e6:a7:64:5f:
         5c:69:3b:2c:12:e2:4a:46:b2:58:c2:4f:43:f2:b6:f4:23:a1:
         06:7b:0b:67:ce:46:2c:be:eb:58:99:3c:62:e3:6b:79:89:0f:
         d9:72:22:88:26:44:14:fc:ae:65:cb:78:f1:3a:4c:df:95:14:
         6b:77:08:d2:c1:44:6b:86:89:b3:0f:0b:bc:7b:36:18:c7:f2:
         e2:4a:6a:0d:de:6f:c4:4a:7b:23:d7:02:45:6b:01:43:21:4f:
         87:bb:fb:a9:aa:94:0f:e4:40:c0:6e:de:ba:3d:14:be:7e:e1:
         85:7d:4d:d4:27:55:96:5e:84:f3:3f:63:37:36:13:b1:fc:a2:
         eb:34:5c:30:6b:ab:f2:d2:47:49:8b:64:ce:a1:8a:31:7d:26:
         3e:d7:b8:eb:1c:fa:cd:08:7f:77:14:45:49:71:33:77:df:3f:
         0d:86:6a:9a:27:ae:16:2c:8f:ca:c7:74:61:72:a4:6a:93:7f:
         c4:46:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:04 2026 by rpki-client