This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          tJl5JYDW1HGwyZcxqKkw7NG0opcRYB/O0qqQ2F78X1o=
Subject key identifier:   7C:2D:86:97:83:6C:6E:E5:F6:1F:D1:B1:11:00:32:30:E2:BD:30:7C
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       019C5B616557598FEAFCC9ED8C691D14CE12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          1243
Signing time:             Sat 14 Feb 2026 09:00:35 +0000
Manifest this update:     Sat 14 Feb 2026 09:00:35 +0000
Manifest next update:     Sun 15 Feb 2026 09:00:35 +0000
Files and hashes:         1: 77AvDdKcjWN-CcQl0EOLY3aF31k.asa (hash: 86tVYakj/U2xx342Q4+JTTb3h+snr680pJZIccmqx9g=)
                          2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: rxrO/hKXgc9vRh15IrAi16GeQm4aHvOQb8RfB3mVqAU=)
                          3: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
                          4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
                          5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
                          6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
                          7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
                          8: T13_FpAETOo3zpDz-m5p4Yo43tU.roa (hash: qg17lmbhvQRAnJl5UzZbEihU9vs9JAWpSUDuAPfFKjI=)
                          9: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
                          10: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
                          11: _rHhp3dSYrAKOlnkapqRB1yefkc.roa (hash: oed1XeIiLPoYidtZJ6x5WeunpoTBMJO8BbUCjhaG6qE=)
                          12: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
                          13: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
                          14: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
                          15: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
                          16: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:5b:61:65:57:59:8f:ea:fc:c9:ed:8c:69:1d:14:ce:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Feb 14 09:00:35 2026 GMT
            Not After : Feb 15 09:00:35 2026 GMT
        Subject: CN=7c2d8697836c6ee5f61fd1b111003230e2bd307c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4c:f9:fb:42:00:a0:56:3c:71:a5:ba:be:0c:
                    02:a0:43:1e:61:a1:9b:70:af:22:cd:2e:b3:c2:a6:
                    4a:09:08:a8:4a:25:60:ae:b2:1f:8f:c7:ed:88:5f:
                    9f:a4:bd:6d:e9:16:e7:d1:7c:77:b9:c0:e6:8e:60:
                    d4:94:da:79:56:a5:b7:04:44:e5:5c:6e:ee:b3:7a:
                    50:7d:a2:04:af:20:d9:35:43:e6:58:e1:b8:0b:85:
                    e2:47:f6:b9:ee:93:aa:ad:b9:fa:71:02:b0:68:0d:
                    9e:74:88:b9:95:e7:ce:a1:f2:83:2b:f1:7c:78:02:
                    ae:b3:29:b9:a9:a3:63:a6:5a:37:6e:3d:e0:7a:60:
                    4f:9e:cd:c5:e1:2a:77:be:5a:a1:69:d5:d2:71:6b:
                    02:68:1e:94:70:81:72:4a:9b:58:c6:3c:58:12:95:
                    1e:bd:84:2f:51:47:34:35:90:7d:a1:df:a6:6a:fb:
                    4e:f3:04:b8:ad:d9:7f:a8:a6:59:02:5e:9e:d4:86:
                    95:f5:bc:fc:1c:b6:c2:81:8e:ed:d5:27:16:b1:8b:
                    2a:d1:ea:fd:90:99:ea:b3:72:d0:1a:dc:c7:f2:b0:
                    fc:95:c1:44:e4:9b:34:7b:03:3b:72:53:3c:b7:b4:
                    37:68:df:b3:9c:db:8a:5f:2c:9c:39:c6:09:5b:bf:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:86:97:83:6C:6E:E5:F6:1F:D1:B1:11:00:32:30:E2:BD:30:7C
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:77:85:17:fc:bf:ab:7e:5d:a1:92:9b:38:a2:d9:d7:68:d3:
         01:69:9c:5c:6e:13:e7:7d:c1:44:4e:a2:bf:0a:18:f3:1f:97:
         0a:87:4e:00:0d:7a:aa:5b:b1:23:ee:c2:37:f3:31:46:a6:6d:
         97:38:e2:45:e2:46:ed:bd:4d:0c:2e:cc:7e:34:83:3c:f9:86:
         e0:2c:e3:f6:af:fc:11:1f:d9:df:d8:7e:94:2d:b0:45:5d:07:
         5b:6b:e4:ae:1d:02:df:cf:23:b0:7e:84:ac:61:90:0e:2d:f4:
         21:6a:4b:bd:5b:bd:69:5b:9e:6b:db:ff:45:91:aa:b6:a7:0f:
         63:45:32:69:d8:12:f2:ea:c5:92:5c:82:5d:5f:ec:8e:e2:a7:
         a3:7b:06:cf:d2:e1:ef:ae:1c:8b:56:c6:8e:03:b5:e0:89:17:
         40:cf:f4:0b:85:a3:42:18:0d:c5:d3:10:03:2d:31:4e:28:2c:
         c4:0c:45:de:65:ee:a2:3b:db:0c:ad:4f:a5:e1:e4:db:2a:9e:
         d4:d8:fd:7b:65:45:3a:28:57:a0:89:09:de:0f:52:d8:d0:7e:
         f6:e5:8d:e5:6b:ac:10:6c:19:96:2b:00:fb:24:42:f8:ae:ef:
         97:d3:fc:41:1b:3a:83:74:31:e4:77:96:5d:ef:47:a9:5e:83:
         fe:54:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 13:46:37 2026 by rpki-client