This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File:                     LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier:          tHSvl9awrNaftrZARgu5nVZ1zduKrIbfkMA853xzjac=
Subject key identifier:   26:33:54:F8:45:50:5E:36:0A:8E:1F:B0:4F:9D:A8:1F:E6:F0:A3:EC
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer:       /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial:       019C41A1B25479C739A75B58D26FEBAFC041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 09:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:41 +0000
Files and hashes:         1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: 7O8pYNMocbsefNyE3XwnAq3N1Hpy2l8esVpS1Q/gNjI=)
                          2: cO4n71Ca1KW9YOy3Lk5tseYgVLs.roa (hash: mIrTwfJ5XFJdShmQyd6p7zVMdef2lZJKuLHzMy3HxFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:b2:54:79:c7:39:a7:5b:58:d2:6f:eb:af:c0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
        Validity
            Not Before: Feb  9 09:00:41 2026 GMT
            Not After : Feb 10 09:00:41 2026 GMT
        Subject: CN=263354f845505e360a8e1fb04f9da81fe6f0a3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:dd:d3:4d:1a:7c:81:a9:f8:8d:a6:68:6d:
                    9b:2d:41:be:d0:22:fd:41:af:54:eb:0a:03:85:24:
                    fb:bc:30:aa:01:c7:b4:d4:44:c6:f7:7a:ef:4e:4e:
                    6d:28:cb:97:bd:75:ac:b2:16:f4:60:c7:d6:d6:52:
                    f6:da:5d:46:4c:3e:a6:a1:03:25:eb:0b:4f:6d:63:
                    4f:11:cf:7c:1b:d7:b9:5e:86:10:16:fa:fe:28:51:
                    fe:3f:d7:5c:82:0a:b1:20:8e:14:5d:01:c7:88:56:
                    1d:b6:58:7e:d8:be:cb:11:ff:31:b8:bb:27:1e:9a:
                    66:3f:ba:e7:8f:cf:cd:3c:45:35:5d:a0:65:fc:bc:
                    b4:03:83:a6:27:eb:09:b8:b2:d9:5d:7e:7d:53:26:
                    4a:3f:6a:5b:ae:cc:d8:76:dc:08:78:c1:61:99:2c:
                    14:cc:ce:65:b7:d4:20:a7:65:3d:53:d7:d9:2a:d9:
                    bb:40:49:dd:58:7a:31:f3:98:c0:83:4c:c1:fa:99:
                    26:11:19:e9:6d:0a:a2:86:a6:fb:f5:98:0a:f0:ac:
                    bf:e5:e4:a5:aa:d1:dd:e7:d0:f8:16:15:c7:e8:f2:
                    01:ac:75:a6:96:bf:79:5d:9e:88:99:d9:e5:f3:5c:
                    0e:6d:a5:d4:e8:9d:27:e8:01:90:d9:ed:26:4b:61:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:54:F8:45:50:5E:36:0A:8E:1F:B0:4F:9D:A8:1F:E6:F0:A3:EC
            X509v3 Authority Key Identifier:
                keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:5d:83:a3:97:cb:69:5b:2e:81:44:eb:63:52:a6:6a:13:
         4e:5a:cb:36:55:af:f3:7c:b3:f7:30:f7:ee:ee:71:e2:93:53:
         1f:70:08:72:9f:a7:0e:4b:bf:0e:8d:44:72:eb:76:50:fe:6b:
         aa:6e:16:f1:e5:28:57:ab:0b:4d:c3:2f:5b:1d:6e:44:d1:f3:
         88:3e:6c:7b:31:70:fb:b4:23:13:0c:20:e5:d0:e8:67:69:15:
         de:90:5c:63:d5:37:73:7e:1a:d2:3d:93:c1:18:28:c5:59:78:
         4c:63:3e:54:26:d4:d2:24:b4:d2:ca:6c:8d:04:32:b1:24:9a:
         9f:f1:92:d9:5c:a7:c9:f1:f6:da:c6:d2:ac:6c:2f:15:b4:87:
         c7:1d:f3:13:de:87:0e:4f:a1:ad:3c:51:3b:bb:6a:23:1d:a9:
         f4:b6:f5:6b:fd:43:36:be:60:fd:05:9b:bc:cc:86:db:77:55:
         05:12:c1:c0:d9:db:62:30:d2:d9:46:42:6e:2c:90:3c:c1:ed:
         43:0d:d7:b6:be:1d:6c:b5:c9:14:fa:ae:fa:46:8d:7e:fd:4d:
         7a:f0:0a:a6:a1:4f:20:cc:f9:3a:86:74:f7:8f:30:de:c9:c3:
         a3:f2:b0:9a:9c:b4:8e:b1:75:2e:a7:08:df:0c:4a:e4:ac:cc:
         97:02:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:21 2026 by rpki-client