This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          SH4JohCQIUa8yEpJGpfxZzZLCanc0nss/EV3mIBvvBo=
Subject key identifier:   AE:A4:62:55:2F:00:A6:B5:AA:19:85:F7:76:16:16:1E:F7:F2:16:76
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       019C42B3FD44F3E2D032BD84C4464284A4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:17 +0000
Files and hashes:         1: 7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa (hash: g3m4Cs0LnAb1ACKe4HSyReBYZHQrU1ca/nDV4+67Nvc=)
                          2: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: 9EqRci6x6ZQXpyOHwfebYbGDJyHVqwoggl0wZycQeEc=)
                          3: 8r77MtNd6JHrFBBnLm_5J_BuAIQ.roa (hash: VZcgGbj6NNnM5Pi5ovNgKWOCK7R74IyyThYZ0XXcsZw=)
                          4: Tf6UQDYvPckU1C2Jn1veoujriQ4.roa (hash: VWiJc3Oh+BpFRYnKzjPdk+rjnYM47zy15kr7GUYXyXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:fd:44:f3:e2:d0:32:bd:84:c4:46:42:84:a4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Feb  9 14:00:17 2026 GMT
            Not After : Feb 10 14:00:17 2026 GMT
        Subject: CN=aea462552f00a6b5aa1985f77616161ef7f21676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:3d:e0:0f:fd:79:9d:64:3f:8f:84:e3:3e:
                    75:81:17:18:6d:a2:06:14:95:85:bc:fe:8f:9c:99:
                    72:14:41:19:4c:62:1b:a0:e9:21:88:ad:be:ce:28:
                    a8:13:a5:38:50:5d:cf:00:03:4d:d9:c0:7f:fb:75:
                    a2:53:52:b3:1d:ed:97:eb:98:35:5c:2d:c6:df:9c:
                    9d:d0:c8:33:f2:a0:28:5a:f8:b2:c6:21:d1:a1:9f:
                    32:4e:1f:76:3d:06:52:2b:dc:3a:87:bb:23:08:32:
                    22:f9:c2:6c:b9:92:62:6c:cb:d1:ad:fd:47:cd:66:
                    ae:9c:80:89:2f:51:56:e6:73:7f:ee:1b:56:7f:d1:
                    95:61:ff:53:4f:04:9e:86:07:3f:74:5a:9b:7b:59:
                    a6:fe:fc:40:73:55:62:07:ee:f4:37:73:08:64:5a:
                    3e:3b:f0:cd:cd:df:7a:29:47:e9:59:d6:4f:08:5e:
                    c8:2c:4a:81:67:e5:05:21:44:3e:69:d2:57:fa:e2:
                    ba:08:f7:ed:e9:df:e3:e8:57:65:ad:c0:d5:b9:07:
                    46:f7:b7:c7:6b:91:91:da:a9:37:96:6b:25:97:de:
                    41:2f:ac:a9:c4:d8:ec:ff:52:86:cd:f1:8c:01:72:
                    dd:d9:98:7b:2b:f8:71:28:1d:94:0b:74:7e:71:45:
                    af:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A4:62:55:2F:00:A6:B5:AA:19:85:F7:76:16:16:1E:F7:F2:16:76
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:04:5d:13:ab:2b:2a:dc:61:c6:c2:15:70:97:d5:ce:93:4b:
         5b:32:c0:79:c9:19:9e:5b:06:30:f0:4a:2d:df:0c:07:1f:51:
         c2:b3:27:e4:64:6f:49:f9:cc:a6:b4:4a:09:27:3d:d9:39:7f:
         61:23:af:3d:a4:50:91:77:f4:9c:f9:f2:1f:7d:d1:3a:82:32:
         43:73:a3:cd:bb:2c:98:ed:78:94:0f:d4:be:7e:50:ee:04:b2:
         5b:d6:fa:04:c5:8e:c7:ce:00:6b:44:38:ce:4b:d9:63:e1:bb:
         e9:80:e0:ef:29:d5:42:37:7a:74:44:99:d9:1d:09:44:12:7a:
         fb:d6:b3:a3:db:de:22:bd:f2:3e:59:a9:f0:d5:6d:59:be:cc:
         d1:c1:ba:c9:3d:eb:0b:85:e2:90:7d:d1:b1:e1:69:23:b3:a3:
         1a:0d:6c:8f:54:c4:66:74:25:ec:37:1d:4e:77:9c:27:a2:c5:
         2f:46:54:cf:79:2c:c7:db:cf:c8:a5:d6:78:77:60:36:66:be:
         bf:46:f4:77:ad:35:63:c0:24:84:18:27:7c:87:9b:3d:ba:e0:
         4b:07:cb:39:51:5d:4c:cc:8e:93:f4:b4:af:b4:78:6c:8d:89:
         95:de:f9:fe:c8:f5:7a:5d:95:fd:39:b6:79:0a:f9:ca:43:be:
         3a:31:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:08 2026 by rpki-client