This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File:                     LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier:          q05PynP7cotNqG1EdJFhr6KqW2z25n2KSpkfSqD7Eh0=
Subject key identifier:   00:67:82:6A:30:4A:5A:6D:5F:68:45:73:ED:2F:38:6C:77:00:78:38
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer:       /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial:       019C420FC7BA0170D41012CE1BCD46FDDF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 11:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:56 +0000
Files and hashes:         1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
                          2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: B74vKlS4DVn5V33qTWMpQuE8fb+DkTHioHxfZbv1GXc=)
                          3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
                          4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c7:ba:01:70:d4:10:12:ce:1b:cd:46:fd:df:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
        Validity
            Not Before: Feb  9 11:00:56 2026 GMT
            Not After : Feb 10 11:00:56 2026 GMT
        Subject: CN=0067826a304a5a6d5f684573ed2f386c77007838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:20:07:b0:63:72:34:c4:43:29:b7:99:c3:
                    4f:31:a7:ea:ee:19:4b:c2:13:d0:fe:ba:e8:b4:19:
                    80:66:52:13:35:7e:f8:ee:56:87:55:6a:be:65:b8:
                    9e:6c:33:08:10:ab:0f:ad:05:7f:bb:a8:fe:51:8a:
                    da:64:82:16:68:f9:0b:24:42:95:65:9f:1f:a0:b7:
                    00:2f:c8:d2:79:2e:0c:f6:96:7c:55:64:ed:1e:5f:
                    d7:1a:73:a6:9f:44:22:2b:80:e5:1b:db:03:53:89:
                    c1:a7:60:67:18:f0:73:b7:56:32:b0:07:dd:6c:18:
                    a5:a2:18:ce:93:54:5d:80:7e:38:be:71:fb:18:60:
                    a4:fb:94:45:46:3b:b1:35:f5:dc:7d:0f:dd:83:a9:
                    25:20:3d:05:fa:fe:5a:60:1a:d9:05:5e:57:8a:4a:
                    b0:72:aa:22:81:62:8c:fd:27:f8:33:39:54:45:60:
                    c2:ec:4a:75:5f:8b:9a:51:2d:c4:35:cc:26:01:34:
                    bd:7a:ed:21:b2:16:57:86:27:43:85:c7:88:d7:aa:
                    b5:4f:0f:cb:a2:57:aa:8f:ee:f9:e2:75:cd:0d:f4:
                    82:ce:a4:96:e9:30:78:e9:f3:49:11:f5:7f:d1:27:
                    e9:9d:1f:c1:60:96:bd:16:1d:64:3f:69:58:7b:cd:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:67:82:6A:30:4A:5A:6D:5F:68:45:73:ED:2F:38:6C:77:00:78:38
            X509v3 Authority Key Identifier:
                keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:04:4a:57:c5:c4:2c:97:4c:20:f3:47:78:09:5d:d7:94:69:
         c5:ea:48:41:47:e9:2d:4a:5e:c7:4a:96:de:65:6e:62:2b:70:
         f7:09:f7:f9:0f:29:6f:93:91:2e:b8:34:fe:aa:28:27:d3:56:
         0b:bc:51:9a:ca:70:04:c2:93:e8:59:33:ba:3a:3d:d3:2c:3a:
         e7:43:d6:cc:fe:91:91:5d:32:fc:46:83:58:76:80:90:88:b0:
         eb:44:3b:20:d1:81:46:9a:ca:d1:60:9a:d1:d7:d5:33:ba:26:
         79:9a:a8:d7:d8:4e:cf:13:ae:28:75:ef:dd:f3:f4:c4:80:d4:
         79:c9:08:30:57:05:67:ce:b4:04:0a:66:be:9f:80:d2:43:3f:
         02:96:79:1c:d9:37:4d:53:9f:62:69:ee:5d:c4:6d:13:4f:50:
         31:73:97:93:34:4c:ca:97:a8:1f:e4:df:33:a5:e9:98:73:3e:
         5c:60:aa:c6:1c:a8:e0:ca:51:dc:5c:28:9c:64:46:03:14:30:
         68:62:59:15:0a:e5:7d:44:31:88:aa:5f:d7:5b:e5:6e:f7:07:
         32:d2:8e:5d:51:a3:65:51:7e:ce:5d:b8:ff:96:82:a7:e2:16:
         ca:d2:70:ab:c7:f6:da:8d:be:fc:44:84:24:58:fa:45:e3:14:
         ec:c9:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:21 2026 by rpki-client