This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File:                     G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier:          WiEP7oOT8SUZnM0AHzDnstEvHj0PfwQaazFxPNLQR7c=
Subject key identifier:   91:6D:22:3D:CD:D6:A9:10:B8:6C:99:05:07:32:A1:71:C3:03:4A:7C
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer:       /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial:       019C43FE5DAA32A7D0094DF173BC7D3BCF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number:          118C
Signing time:             Mon 09 Feb 2026 20:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:09 +0000
Files and hashes:         1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: vfVqmMqBCG7S/fAd2vd1LyYZYNCvQs+uzmoIKxYrtmA=)
                          2: GTlzvN8hJSJgM1qwowoO5bn8qLU.roa (hash: 73NFakx+FzAAGVTAVqagiaRLqwrqzSJ1FS4nqNgvaXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:5d:aa:32:a7:d0:09:4d:f1:73:bc:7d:3b:cf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
        Validity
            Not Before: Feb  9 20:01:09 2026 GMT
            Not After : Feb 10 20:01:09 2026 GMT
        Subject: CN=916d223dcdd6a910b86c99050732a171c3034a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:4b:2a:94:c1:b7:b1:f2:38:88:a2:bb:e4:
                    79:4c:a1:e3:e1:e6:95:e3:69:de:6f:3e:01:4c:12:
                    12:7d:7a:df:29:95:b7:b3:e8:f2:73:d0:06:69:a6:
                    da:04:6b:ca:ab:e5:e5:5d:a1:16:d8:e7:07:bf:b2:
                    78:3d:7a:08:78:34:24:70:5d:c3:b6:52:8c:56:67:
                    67:2c:44:de:29:4d:d5:14:eb:f6:e6:c3:5c:23:53:
                    db:94:52:a6:39:8c:97:b5:16:25:b4:30:41:7b:ff:
                    0c:ca:99:86:0f:e7:bf:c0:75:06:56:80:c7:af:ee:
                    92:b2:be:c5:37:83:f0:fe:a5:09:97:ec:73:11:61:
                    8a:cf:48:3e:db:a8:92:9d:4d:c2:d9:ea:a6:65:cc:
                    10:04:a2:c6:d3:01:dd:02:30:2d:12:9c:76:38:94:
                    20:e6:c3:46:87:c5:06:1c:dc:a2:86:fd:0f:b1:58:
                    1b:0d:7d:00:dd:96:a4:64:6f:5a:92:52:6d:25:67:
                    f4:fb:e1:ee:60:d2:22:26:83:b3:62:50:64:2e:6d:
                    21:07:93:bc:ef:8e:73:00:a5:87:dc:1f:89:97:76:
                    ba:2f:4e:a2:7e:ca:59:66:67:42:1b:dd:2a:ec:eb:
                    29:ff:47:f5:af:34:9a:b6:22:28:c7:85:5f:7d:a9:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:22:3D:CD:D6:A9:10:B8:6C:99:05:07:32:A1:71:C3:03:4A:7C
            X509v3 Authority Key Identifier:
                keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:88:37:a2:25:36:f7:fd:b4:0b:15:55:1e:e6:86:85:a1:
         ea:7d:ea:55:2a:5d:32:e6:24:84:ac:4b:09:bb:33:4c:39:00:
         af:a8:9e:73:e2:fa:0c:4b:4c:a0:d0:e7:21:97:c2:27:15:21:
         e3:d7:24:f9:db:04:05:f3:59:00:f7:36:f9:ab:ce:e1:0e:a2:
         ee:4d:db:54:17:90:7e:89:b8:e7:af:6f:ef:09:6a:50:43:7a:
         19:c2:ce:39:ef:5c:51:56:ac:2f:81:5d:25:37:ec:c8:44:90:
         d3:ee:70:52:35:e3:41:89:83:9b:20:74:35:fb:96:1f:91:c9:
         1e:27:bc:9c:5e:34:1e:2f:99:98:ab:87:6b:da:17:50:90:37:
         e0:ae:7d:b9:8a:39:03:1b:69:be:18:9f:26:dc:a9:7e:1a:04:
         17:ec:e3:fd:dc:7c:5a:c7:bc:0c:b2:2d:0c:df:17:1e:b6:f0:
         dd:ce:7c:51:ec:0a:55:79:ac:0f:c7:12:c2:d2:c0:c0:af:1e:
         f2:af:df:3e:3b:f7:0b:cf:a5:b8:8c:1a:b0:67:bf:7e:7e:62:
         d5:a5:26:e6:46:e4:f8:08:f8:e9:19:d8:2d:8e:78:3a:df:ef:
         57:01:3b:02:72:39:06:0f:4e:3d:ae:b0:6a:61:f1:3a:19:25:
         ae:c3:07:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/l2qMqfQCU3xc7x9O89JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiN2U3YmRjOGUxNWJhNmIyZTZkMDk1NTI0NzZiYjFiNTVi
MTU5YzMwHhcNMjYwMjA5MjAwMTA5WhcNMjYwMjEwMjAwMTA5WjAzMTEwLwYDVQQD
Eyg5MTZkMjIzZGNkZDZhOTEwYjg2Yzk5MDUwNzMyYTE3MWMzMDM0YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZRLKpTBt7HyOIiiu+R5TKHj4eaV
42nebz4BTBISfXrfKZW3s+jyc9AGaabaBGvKq+XlXaEW2OcHv7J4PXoIeDQkcF3D
tlKMVmdnLETeKU3VFOv25sNcI1PblFKmOYyXtRYltDBBe/8MypmGD+e/wHUGVoDH
r+6Ssr7FN4Pw/qUJl+xzEWGKz0g+26iSnU3C2eqmZcwQBKLG0wHdAjAtEpx2OJQg
5sNGh8UGHNyihv0PsVgbDX0A3ZakZG9aklJtJWf0++HuYNIiJoOzYlBkLm0hB5O8
745zAKWH3B+Jl3a6L06ifspZZmdCG90q7Osp/0f1rzSatiIox4VffalG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFtIj3N1qkQuGyZBQcyoXHDA0p8MB8GA1UdIwQY
MBaAFBt+e9yOFbprLm0JVSR2uxtVsVnDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODIt
MzBlNTQwZDVkM2E3LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODItMzBlNTQwZDVkM2E3
LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcmIN6Il
Nvf9tAsVVR7mhoWh6n3qVSpdMuYkhKxLCbszTDkAr6iec+L6DEtMoNDnIZfCJxUh
49ck+dsEBfNZAPc2+avO4Q6i7k3bVBeQfom4569v7wlqUEN6GcLOOe9cUVasL4Fd
JTfsyESQ0+5wUjXjQYmDmyB0NfuWH5HJHie8nF40Hi+ZmKuHa9oXUJA34K59uYo5
AxtpvhifJtypfhoEF+zj/dx8Wse8DLItDN8XHrbw3c58UewKVXmsD8cSwtLAwK8e
8q/fPjv3C8+luIwasGe/fn5i1aUm5kbk+Aj46RnYLY54Ot/vVwE7AnI5Bg9OPa6w
amHxOhklrsMHeg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:20 2026 by rpki-client