This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File:                     Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier:          MFup4l3Qq4+XAGHrtFrcZC3lD+kS7KIkc6DjtrLJFEk=
Subject key identifier:   7B:CF:81:C1:15:D7:3C:72:6A:64:14:5B:6C:DE:14:88:0B:7D:BC:92
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer:       /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial:       019C4322AEC85D5665191B7762360F28227C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number:          0B3C
Signing time:             Mon 09 Feb 2026 16:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:12 +0000
Files and hashes:         1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: 2j92295cYtZyUdNRqEfzLxduNxT0IVhpRBD4oH6Ifsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ae:c8:5d:56:65:19:1b:77:62:36:0f:28:22:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
        Validity
            Not Before: Feb  9 16:01:12 2026 GMT
            Not After : Feb 10 16:01:12 2026 GMT
        Subject: CN=7bcf81c115d73c726a64145b6cde14880b7dbc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:c9:1a:ff:b4:f8:9b:02:03:75:9c:70:6d:
                    5c:fb:52:1a:db:3c:a2:20:af:46:a9:8d:52:7e:4e:
                    1a:14:bb:59:27:bd:59:e0:cb:e2:c2:94:4c:67:df:
                    27:9f:9e:0a:36:02:1d:0c:c2:7c:21:73:07:57:71:
                    f8:35:ca:20:ac:5d:a5:7e:15:95:cc:3d:10:ab:0d:
                    a4:c7:2c:ff:a1:27:11:09:e4:81:f5:c3:9d:a5:26:
                    69:7d:20:13:cd:09:27:84:03:ba:93:c8:16:75:01:
                    38:31:bc:91:6c:35:dc:4e:76:ed:60:04:ea:55:e9:
                    54:fd:c0:21:aa:75:c3:39:08:26:cf:d9:3f:31:40:
                    5f:dd:f6:f8:0f:d6:26:09:36:0d:2e:3e:04:8d:76:
                    c3:fa:25:10:5b:13:0d:b9:27:05:b7:69:55:72:a2:
                    f9:20:15:fc:fe:07:eb:01:ae:c6:7a:ed:ee:71:42:
                    99:90:d5:56:5e:24:f3:35:ad:b5:c9:0a:5a:f3:d9:
                    b0:86:9c:be:e8:a6:f3:47:9a:23:40:1c:bc:8d:48:
                    86:f8:bd:e7:1a:9c:57:35:3e:df:d3:c0:47:09:33:
                    26:26:fd:75:7c:ce:29:3b:89:21:b6:87:d6:3e:0c:
                    fd:a6:4e:e7:3d:a3:05:4b:1f:a5:65:bb:0b:0e:3f:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:81:C1:15:D7:3C:72:6A:64:14:5B:6C:DE:14:88:0B:7D:BC:92
            X509v3 Authority Key Identifier:
                keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:b7:1a:e5:d2:e6:32:97:63:7a:b6:7c:9d:c4:2a:b0:75:
         50:4b:8b:a4:6e:c7:c8:45:7e:a6:af:c7:f6:32:29:7d:52:c0:
         59:5d:cc:cf:d2:93:df:21:8f:c8:41:44:55:e4:bc:67:fd:d4:
         5a:2a:02:62:8c:b0:a5:1b:87:bf:3c:bc:e9:79:0d:46:c9:df:
         cb:e5:3f:af:e1:a6:fb:7e:7a:b0:d3:16:fd:01:c8:e2:dd:58:
         91:42:3c:92:90:6b:bf:42:14:61:a4:58:be:8f:8b:c2:f1:cf:
         76:5b:5b:89:59:1a:92:69:86:d7:fe:6a:0e:e1:af:c1:94:e0:
         d0:84:59:0c:85:be:72:3c:98:97:fc:70:b1:f7:5f:e3:8a:77:
         01:5f:fd:e5:08:b8:5c:a3:40:ec:1c:0c:18:06:0b:29:0a:f3:
         ce:b1:99:f6:57:d9:1f:0c:8a:5d:64:11:f0:c7:f2:72:36:90:
         b6:29:b9:6e:15:96:de:82:cb:8d:72:c4:ac:4b:4a:a8:7f:bc:
         e8:7c:44:b6:58:06:39:ef:19:1e:7a:d8:e5:7a:1c:d9:47:b7:
         3f:ac:d8:bc:2e:cc:e0:1b:f1:b9:df:4a:30:15:78:b6:4e:e4:
         05:4c:95:ac:f8:b6:55:44:a7:35:cf:7c:21:9b:15:62:f6:da:
         e7:17:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:50 2026 by rpki-client