This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File:                     Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier:          a0D1BiTQ8cPw3D9IMcn57LlTtBX/MfwmnN5e9ScbcJQ=
Subject key identifier:   5C:B8:FE:63:FB:BF:AE:30:F3:1C:93:74:80:D4:C5:50:BC:D2:93:63
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer:       /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial:       019C43FE0F240A42576197C875C544485AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number:          03AB
Signing time:             Mon 09 Feb 2026 20:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:49 +0000
Files and hashes:         1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: NSZpYRYZLL969h4kpYPt7t6QxLIceJrysCiU4oi0lrA=)
                          2: ntTY6bNs75yEDx8qQmeYR0RBDCE.roa (hash: iKXOwiDpqDa+XDGha/hoiXx2V9ibK6G6tZTQtPFDEqI=)
                          3: sFud2BTbJwkG-pVAdyDfG15ADY4.roa (hash: eFUaMvgAqEZ4NQM49KaL16OfknWWnOfs9H02j9J+2Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:0f:24:0a:42:57:61:97:c8:75:c5:44:48:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
        Validity
            Not Before: Feb  9 20:00:49 2026 GMT
            Not After : Feb 10 20:00:49 2026 GMT
        Subject: CN=5cb8fe63fbbfae30f31c937480d4c550bcd29363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:da:d7:0a:aa:ad:98:7b:e4:8f:50:dc:0c:
                    b1:a4:af:75:6e:02:04:81:93:c6:fe:ae:ef:93:51:
                    15:e6:b5:7e:d6:07:c0:7e:ac:4a:49:b3:01:e8:61:
                    78:b3:42:13:20:03:7b:cc:2b:98:02:02:77:48:c2:
                    9c:45:aa:f8:b4:4e:73:07:40:17:90:4a:4a:8d:ef:
                    93:49:25:12:eb:85:78:1f:b6:25:85:ad:8f:45:55:
                    96:d2:de:78:b8:e3:a4:71:f8:d0:39:40:59:ef:c6:
                    83:07:f9:e1:88:68:4e:ae:65:0f:b2:04:65:15:c2:
                    01:5b:1b:15:74:d2:b6:20:d8:8c:ef:73:e4:22:d2:
                    28:f4:f6:fa:73:99:09:e2:b3:45:5d:f9:15:ff:a1:
                    46:10:b1:f7:d4:c8:4a:66:a3:b1:3e:b7:c4:76:13:
                    8f:43:2b:d9:72:10:cb:fd:ef:bf:37:c9:d8:1a:58:
                    d6:0b:ae:43:93:d4:e6:23:1e:25:30:3c:04:7a:a3:
                    d6:91:17:14:93:b3:8c:2e:da:ef:96:92:21:99:3e:
                    41:fc:1d:4a:c0:3d:9e:fe:3a:4c:06:b9:4b:9f:87:
                    a1:a1:ba:3c:5a:f3:ef:8b:13:c1:6e:e4:fc:f8:2b:
                    c7:a3:13:16:78:1b:4f:68:d6:41:b3:03:47:20:a9:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:FE:63:FB:BF:AE:30:F3:1C:93:74:80:D4:C5:50:BC:D2:93:63
            X509v3 Authority Key Identifier:
                keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:45:e0:d6:b6:52:86:d1:6f:b1:df:de:2b:14:33:0c:4f:78:
         98:ef:33:03:03:96:3b:36:79:68:f2:d4:cd:c1:10:30:bd:14:
         f9:e7:50:a6:ff:83:a9:ed:88:28:38:ea:1f:4b:50:08:30:e4:
         99:89:6e:51:94:26:3e:8c:46:04:69:73:5a:21:65:42:6e:08:
         c5:6f:6b:e0:19:dd:09:f2:eb:61:2a:11:cb:e8:42:01:3e:f3:
         0d:ee:12:a2:c2:ad:90:e5:1a:82:ad:46:2d:f8:22:ec:be:be:
         46:e3:40:93:66:4b:ef:0d:9f:84:17:a7:95:fd:08:f8:55:89:
         95:85:0e:e0:26:8c:21:1f:c6:49:b0:79:17:9a:21:40:c4:c6:
         cc:9c:c6:c6:8f:97:13:c2:8b:b0:dc:8b:02:51:bb:f7:1e:ad:
         59:db:27:18:51:c5:17:19:ba:9d:48:57:4f:13:d2:ae:2c:56:
         d5:b1:1d:26:aa:6e:15:c4:d5:0b:52:a6:41:f5:1d:1f:c2:9f:
         04:e5:50:2a:36:f5:1f:c3:8a:30:1c:f0:95:04:bd:e8:39:19:
         13:fa:ab:05:90:58:2e:4a:62:79:7c:c0:d2:00:e4:ab:92:86:
         69:37:78:4d:ac:5e:13:e7:aa:15:1c:17:c3:11:7f:25:89:17:
         e5:2c:a7:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/g8kCkJXYZfIdcVESFr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkY2QyYzJjMTQxMWI0NmIxOGY3MGU2NzcxMDFhZGExMWNj
YjUxOTgwHhcNMjYwMjA5MjAwMDQ5WhcNMjYwMjEwMjAwMDQ5WjAzMTEwLwYDVQQD
Eyg1Y2I4ZmU2M2ZiYmZhZTMwZjMxYzkzNzQ4MGQ0YzU1MGJjZDI5MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZba1wqqrZh75I9Q3AyxpK91bgIE
gZPG/q7vk1EV5rV+1gfAfqxKSbMB6GF4s0ITIAN7zCuYAgJ3SMKcRar4tE5zB0AX
kEpKje+TSSUS64V4H7Ylha2PRVWW0t54uOOkcfjQOUBZ78aDB/nhiGhOrmUPsgRl
FcIBWxsVdNK2INiM73PkItIo9Pb6c5kJ4rNFXfkV/6FGELH31MhKZqOxPrfEdhOP
QyvZchDL/e+/N8nYGljWC65Dk9TmIx4lMDwEeqPWkRcUk7OMLtrvlpIhmT5B/B1K
wD2e/jpMBrlLn4ehobo8WvPvixPBbuT8+CvHoxMWeBtPaNZBswNHIKmbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy4/mP7v64w8xyTdIDUxVC80pNjMB8GA1UdIwQY
MBaAFC3NLCwUEbRrGPcOZ3EBraEcy1GYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDct
ZGIzNmVlYTgzMDdmLzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZmZhMWYtY2Y0YS00YzkwLWIzMDctZGIzNmVlYTgzMDdm
LzEvTGMwc0xCUVJ0R3NZOXc1bmNRR3RvUnpMVVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0Xg1rZS
htFvsd/eKxQzDE94mO8zAwOWOzZ5aPLUzcEQML0U+edQpv+Dqe2IKDjqH0tQCDDk
mYluUZQmPoxGBGlzWiFlQm4IxW9r4BndCfLrYSoRy+hCAT7zDe4SosKtkOUagq1G
Lfgi7L6+RuNAk2ZL7w2fhBenlf0I+FWJlYUO4CaMIR/GSbB5F5ohQMTGzJzGxo+X
E8KLsNyLAlG79x6tWdsnGFHFFxm6nUhXTxPSrixW1bEdJqpuFcTVC1KmQfUdH8Kf
BOVQKjb1H8OKMBzwlQS96DkZE/qrBZBYLkpieXzA0gDkq5KGaTd4TaxeE+eqFRwX
wxF/JYkX5SynPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:11 2026 by rpki-client