This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File:                     oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier:          y27V/QoGp2HmR0Kg844R61PkgZvAOjmHVmXAilv39mI=
Subject key identifier:   FF:18:7C:25:DD:CA:6D:8F:67:86:A4:32:01:35:35:C5:11:89:DD:C0
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer:       /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial:       019C5D1992061316F291E524428072BD7F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number:          1742
Signing time:             Sat 14 Feb 2026 17:01:22 +0000
Manifest this update:     Sat 14 Feb 2026 17:01:22 +0000
Manifest next update:     Sun 15 Feb 2026 17:01:22 +0000
Files and hashes:         1: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (hash: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo=)
                          2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: n8j+E0a+R7OfXG/0rT4kNQHEGu+UyeW8O9ZhEUHFJiY=)
                          3: pteb03Zrz-92mfGhlVuUAxWiO1c.roa (hash: Tlsfv5MPyjgb+Ws3wZ+t04Extj+nRQ2rvjb3jvw/n0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:5d:19:92:06:13:16:f2:91:e5:24:42:80:72:bd:7f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
        Validity
            Not Before: Feb 14 17:01:22 2026 GMT
            Not After : Feb 15 17:01:22 2026 GMT
        Subject: CN=ff187c25ddca6d8f6786a432013535c51189ddc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:a6:3c:c6:b4:89:2e:33:80:e3:f9:40:ab:
                    72:f0:20:d9:9f:e8:9b:4e:b1:2d:a1:82:b9:58:d5:
                    69:39:da:db:53:05:88:b5:20:b4:d4:cf:e8:64:20:
                    1f:bb:c6:c0:de:f9:fa:24:4a:aa:39:e6:a1:8e:e2:
                    24:16:7f:91:3a:cd:ee:59:ce:da:1b:58:39:6d:3b:
                    82:2c:c3:5b:77:e2:5e:51:82:de:2a:6e:9a:7e:b4:
                    73:8d:19:74:16:08:06:ef:b7:58:c4:d1:27:33:2c:
                    73:da:53:84:51:68:78:61:9f:fb:ce:8d:5b:08:a3:
                    f2:36:6f:00:29:43:c3:2e:24:73:80:25:73:12:46:
                    21:6d:4c:c1:95:cc:b5:3b:58:ff:a3:f3:d2:50:bc:
                    3d:0f:1a:e6:0c:5a:29:4e:60:0b:7b:d9:b3:65:75:
                    98:e2:72:1a:44:1a:84:bc:a0:bf:9e:6c:aa:51:2b:
                    5f:f6:4d:ca:4f:e9:2f:7b:f0:d3:f4:c6:21:18:85:
                    04:af:e9:37:f0:14:bf:07:0f:d1:a6:71:19:61:1c:
                    3d:38:aa:8b:9e:50:21:e3:a4:1a:6a:4b:6c:a3:69:
                    b0:22:f1:12:3e:d3:76:f8:c2:a8:89:61:bc:7e:26:
                    30:f3:ed:3c:9a:9d:73:63:45:5f:cc:86:6e:9a:87:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:7C:25:DD:CA:6D:8F:67:86:A4:32:01:35:35:C5:11:89:DD:C0
            X509v3 Authority Key Identifier:
                keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:b6:01:17:ba:55:66:8c:af:49:c2:21:f5:6f:df:82:e4:
         ad:25:04:2e:7e:79:e8:44:d1:2a:9c:a2:b9:f5:58:bb:d7:2e:
         75:af:bc:e1:f6:4a:01:df:07:e7:6a:d9:a5:bd:0f:41:00:4f:
         cd:36:0a:9c:ab:2a:aa:fc:b0:e2:fb:a0:5a:31:a4:f9:7b:91:
         78:88:53:20:69:d3:ed:37:5b:78:b7:13:0d:ef:da:8c:4c:50:
         56:26:ac:04:c0:a6:81:cd:e0:42:5f:32:83:c0:c7:d3:a8:39:
         2f:be:30:e4:a1:69:fc:b0:83:f8:0a:a6:2c:b6:51:3d:ed:0f:
         66:84:40:f8:d5:4d:0b:7e:cb:73:0f:e5:f6:49:fd:68:ad:53:
         c0:26:87:0b:77:aa:da:e8:44:a8:0b:b4:62:0e:5c:f3:b7:4e:
         ec:cb:00:ef:46:23:ad:34:82:fc:a1:1b:4f:3a:13:28:f6:17:
         ff:74:79:da:7f:b7:aa:9d:b4:2d:74:a2:be:0a:e3:51:58:cf:
         9a:ac:ec:5d:b5:38:f3:3b:5b:20:dd:a7:5a:aa:ac:03:fa:ef:
         be:59:e1:b3:12:46:a8:11:5c:38:a9:0e:f8:80:3f:29:5f:93:
         f2:7a:98:7f:8e:b8:29:6b:13:c9:68:22:8a:92:bd:8f:22:41:
         a4:ba:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 18:38:20 2026 by rpki-client