This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File:                     8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier:          F1joh/dlqpP4XDiKDXP4Vxh7EF1le9DkwHKeqLtsyCo=
Subject key identifier:   41:3F:B8:F9:E0:78:B6:8E:52:69:ED:58:3C:0E:AD:1D:90:B0:42:6E
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer:       /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial:       019C439087B5327FC19EDDEEB4F2A7240A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 18:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:11 +0000
Files and hashes:         1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
                          2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: EcFKCYsDdvFZ36Kyl1hgnVddfZZo2Ua0+g19aQxv5R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:87:b5:32:7f:c1:9e:dd:ee:b4:f2:a7:24:0a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
        Validity
            Not Before: Feb  9 18:01:11 2026 GMT
            Not After : Feb 10 18:01:11 2026 GMT
        Subject: CN=413fb8f9e078b68e5269ed583c0ead1d90b0426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6f:e6:60:39:cb:50:c7:68:6a:b0:5b:74:66:
                    b6:a1:2c:b1:07:23:2b:12:11:9d:c8:bf:c5:99:51:
                    15:df:ee:46:74:3a:21:71:4e:5e:1d:9a:c2:39:49:
                    82:b1:f4:7b:d7:74:a8:06:74:41:58:97:f0:4e:c6:
                    48:dc:dc:9b:e9:a1:59:1e:ea:b2:c4:a0:d5:5b:a2:
                    db:0b:2a:e6:5c:36:65:a5:a9:1e:e6:4f:18:f1:32:
                    ef:ff:62:c7:9e:90:65:e7:4a:5e:b8:07:5c:91:2c:
                    83:c2:11:99:a2:69:aa:93:ed:ce:e7:60:e5:63:de:
                    41:2f:3e:5a:57:00:99:d4:da:14:c6:91:44:96:94:
                    6e:e6:10:76:0c:3b:26:45:5e:d7:d2:46:1c:c0:f2:
                    8c:87:29:a2:b4:2e:26:ae:4a:09:b7:56:1e:ed:f8:
                    bf:02:f5:f8:23:60:1f:21:26:bd:f6:ee:52:aa:21:
                    5b:60:d2:73:df:7b:ad:df:59:ec:84:52:3f:2d:67:
                    53:35:f6:00:66:bc:34:27:c8:2d:2e:03:cf:dc:79:
                    06:51:c8:9e:25:4f:3a:88:9b:1a:24:96:83:0f:94:
                    de:3d:06:3a:e3:6d:ca:3f:62:b0:91:6d:ef:58:b8:
                    62:88:fd:a4:79:1e:62:6d:6f:4c:88:27:7c:40:6b:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3F:B8:F9:E0:78:B6:8E:52:69:ED:58:3C:0E:AD:1D:90:B0:42:6E
            X509v3 Authority Key Identifier:
                keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:67:4a:e0:f8:0a:28:03:2e:86:40:43:8f:c4:32:f5:10:7f:
         07:88:21:12:1f:7d:34:4e:d9:fb:99:f5:7f:66:34:59:c4:36:
         8e:a4:c1:a5:5b:14:2e:03:a3:85:73:47:71:d3:ff:d3:51:68:
         e7:08:fa:f5:7b:97:3a:d2:31:1c:f4:20:45:4a:8c:06:c8:d9:
         17:1e:f2:87:5d:59:5c:81:e4:00:ea:24:5d:38:85:cf:31:dc:
         6f:47:cc:ef:e6:00:86:9c:9b:23:e0:33:9a:4e:fd:dc:26:f6:
         20:3f:69:e8:60:ea:0f:48:0e:08:73:45:e0:68:13:18:85:ee:
         00:4e:de:15:5d:c1:b9:ec:48:c0:02:c6:95:f0:7a:cd:23:55:
         3f:69:e3:ef:66:a1:98:bb:c2:a9:f7:7f:07:ca:6a:2d:81:b3:
         a4:19:44:42:0f:b1:d7:92:f7:a4:8e:3e:ae:fc:3f:25:95:97:
         cb:ed:e6:46:48:01:8f:23:73:17:73:25:d6:92:99:53:2c:89:
         8a:44:15:58:7c:1c:ee:2f:d8:9a:2c:ca:e5:4f:80:c8:cf:2b:
         50:29:e5:2d:f8:f6:3f:47:c1:ba:54:1a:3a:e3:11:d0:4c:c4:
         33:e3:83:fd:e9:04:6f:8f:be:35:4d:3c:7b:14:39:ea:5f:a6:
         42:1a:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:01 2026 by rpki-client