This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File:                     _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier:          hvTRr7USYvbsO4UvjeAk81yvgloQexMu+8nT2cW9zUo=
Subject key identifier:   E6:E5:25:A1:31:E2:6A:D2:DD:A3:12:1F:16:A0:92:BF:2E:E8:FA:CA
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer:       /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial:       019C432266E089ED1839FDC1194A15C7922F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number:          02FC
Signing time:             Mon 09 Feb 2026 16:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:53 +0000
Files and hashes:         1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: q5n6rwLylwEVwefwRI8SPD9WCyR/TvIlxgUrt8Ahge8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:66:e0:89:ed:18:39:fd:c1:19:4a:15:c7:92:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
        Validity
            Not Before: Feb  9 16:00:53 2026 GMT
            Not After : Feb 10 16:00:53 2026 GMT
        Subject: CN=e6e525a131e26ad2dda3121f16a092bf2ee8faca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:b6:4b:d8:f3:2d:bf:92:1e:86:f7:0e:2e:
                    ed:2f:cc:4b:b1:49:b6:f7:36:a7:8f:2c:69:a9:a2:
                    a3:ee:69:10:1b:65:75:44:b6:b5:01:3b:b3:b3:68:
                    86:94:c0:1f:7e:96:83:94:31:04:1b:79:ae:1f:41:
                    2e:df:6e:c9:0a:aa:41:6a:74:48:40:4f:59:22:2c:
                    51:a3:87:44:7b:eb:68:8c:0a:a7:34:85:58:4b:95:
                    f9:c9:6b:dd:16:52:04:cf:ee:7a:17:78:21:c3:ef:
                    43:d7:ae:07:69:da:a3:02:fe:be:db:47:25:24:e2:
                    ab:a3:9d:68:3e:a2:da:f6:ad:83:d9:c6:fc:1e:83:
                    2e:ee:4b:4a:e1:cc:e9:a6:01:aa:a9:ba:91:ed:fe:
                    1c:3e:20:c2:ae:06:13:c4:b9:51:bf:2d:5b:3c:ac:
                    fa:a9:84:fd:ae:2f:53:74:93:b9:5a:73:c2:d6:79:
                    e2:df:05:d1:40:f4:6a:30:2d:f5:57:4a:0f:e1:7f:
                    8b:cb:f4:ec:3b:63:28:88:ed:98:66:15:a6:46:0d:
                    13:8c:fe:56:95:be:34:29:12:da:15:a9:b6:37:5c:
                    79:ce:de:f8:4a:2c:b2:f3:ce:c1:e3:ce:a8:ce:ef:
                    54:fe:6e:80:d2:8a:32:e6:26:fb:c6:f9:82:5d:8d:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E5:25:A1:31:E2:6A:D2:DD:A3:12:1F:16:A0:92:BF:2E:E8:FA:CA
            X509v3 Authority Key Identifier:
                keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8f:97:6b:8a:b2:3c:65:cc:05:cf:e2:a0:c6:5a:d5:37:27:
         2e:83:46:5d:58:82:24:05:37:87:fe:50:a6:ec:9f:e0:c8:61:
         d2:bb:ca:59:98:a1:c3:88:7b:78:ed:0c:dd:ad:7c:15:81:c3:
         f4:39:40:15:b1:f9:b5:53:91:69:b6:26:3f:fd:d6:34:51:3f:
         06:81:03:93:be:26:0a:c5:d9:b1:52:d2:85:1f:2a:42:35:1f:
         c3:c3:9d:0d:73:c9:37:4d:83:65:9b:65:e6:37:d3:c0:f1:50:
         39:47:2e:7e:78:48:ae:e8:5a:c7:21:b9:9a:14:08:e9:aa:e6:
         a0:bb:c4:75:29:ed:41:60:c8:0a:c3:ac:f7:b5:52:84:e1:29:
         00:d9:e7:19:44:13:de:32:17:47:85:fb:84:51:6f:00:88:2d:
         a5:bc:7d:32:a7:cf:a4:b0:3d:8a:7c:f7:fe:97:69:9a:6b:41:
         f5:78:6d:1f:5d:33:54:dc:d3:c6:b8:19:ab:99:23:74:8d:95:
         79:36:24:2a:ab:f0:26:90:60:36:fa:6f:ab:26:b6:ea:b4:3d:
         7b:0c:49:e3:cc:6f:6c:ba:4c:05:86:08:af:00:a6:14:dc:5d:
         8c:af:b8:8e:8e:7d:d1:4e:7b:09:81:16:e5:d7:ed:6d:3a:61:
         bd:d8:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:35 2026 by rpki-client