This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File:                     LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier:          8Cp4H64HWJoLwpNumESDGA1sH2PRY3NwwqQPkGYdv64=
Subject key identifier:   41:85:D5:A0:76:B7:BB:06:32:EE:07:3C:F5:EF:27:B3:98:22:F8:A2
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer:       /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial:       019C43220BFBC8420719AC4519F814E5DC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number:          0F94
Signing time:             Mon 09 Feb 2026 16:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:30 +0000
Files and hashes:         1: EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa (hash: KygpTZidDj6IJAoJpYsnybjIOxvZc9DyQui8eumvF1w=)
                          2: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: hhJk8sRKlg82/l+UHrBY1+S6sfsIkZvojLw1CtHoPwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:0b:fb:c8:42:07:19:ac:45:19:f8:14:e5:dc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
        Validity
            Not Before: Feb  9 16:00:30 2026 GMT
            Not After : Feb 10 16:00:30 2026 GMT
        Subject: CN=4185d5a076b7bb0632ee073cf5ef27b39822f8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:2b:84:d6:70:81:85:84:ce:df:7d:a6:35:
                    7f:2e:11:3f:04:34:d6:ef:0b:6c:8c:e5:af:b1:4e:
                    b0:3c:94:b7:bc:0a:98:3c:ad:a2:a6:ac:58:cc:25:
                    e5:9b:16:ce:c8:b4:2e:05:01:11:87:82:94:fc:94:
                    14:05:6a:60:4f:db:8b:9e:48:d2:d5:3f:f2:c9:19:
                    41:8e:e9:ca:81:8a:9e:4a:71:4a:49:3e:d0:8e:27:
                    1c:3f:79:95:6d:7c:93:b0:a5:c9:10:15:89:64:29:
                    70:7f:b1:6e:28:24:75:c3:26:ed:dc:29:a1:78:c6:
                    53:d9:bd:cc:a1:9f:aa:3b:04:5f:c8:5c:5b:35:f5:
                    81:44:cc:2a:e1:2b:59:ae:ba:88:ca:1d:f1:b3:97:
                    49:5d:61:b4:2b:c7:43:72:e2:a8:c6:f1:ec:95:18:
                    dc:4c:48:62:3c:66:64:77:67:33:1f:25:bf:9f:ec:
                    43:d9:0f:02:99:63:88:71:e9:f2:55:27:72:c1:8e:
                    3f:9f:8b:44:64:6e:12:b3:9d:06:6d:8f:c2:48:ec:
                    61:45:2f:0c:f3:97:d5:24:40:e2:77:4b:97:4c:7a:
                    f1:1d:a2:75:a4:2e:63:5c:ce:a9:b0:69:dd:14:ce:
                    ee:fe:ab:e3:67:31:d4:e4:5d:f8:4a:7f:26:91:48:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:D5:A0:76:B7:BB:06:32:EE:07:3C:F5:EF:27:B3:98:22:F8:A2
            X509v3 Authority Key Identifier:
                keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:18:14:de:69:7d:4d:0a:b5:42:c8:10:40:b6:72:8d:c9:bf:
         9e:5e:da:36:35:d9:db:2b:16:34:50:27:8e:0d:56:9d:29:62:
         d9:34:62:05:b3:f0:04:07:69:58:92:de:58:f3:5a:1a:0f:8d:
         61:bb:4f:fb:9e:e8:07:80:bb:4a:22:ea:9a:e8:ec:7d:19:cb:
         17:f6:dc:b2:2e:df:03:69:7f:3a:02:ac:18:c3:1b:2d:26:fd:
         fe:04:8b:c6:28:7a:8d:a7:91:df:b2:cd:45:32:49:d5:ed:db:
         de:87:da:12:c3:b8:66:1e:92:0d:6f:e3:1d:ba:d5:8b:d1:ac:
         4d:28:01:b0:da:6b:79:28:e8:9e:d7:4b:c2:dc:bd:bb:69:2f:
         79:e5:a0:7b:71:61:54:4e:6d:7a:cf:44:0f:2d:2a:c1:ad:8f:
         6b:eb:32:86:b6:81:07:6a:b6:ba:e6:f3:ef:d2:27:5e:dc:83:
         48:d4:ae:52:05:f2:85:51:95:1a:ee:f2:8f:17:cb:a0:ba:2d:
         2b:2b:b0:d2:ad:66:f3:2e:0c:08:4d:e1:66:aa:b9:6a:8f:0c:
         84:6f:d7:b5:da:27:f2:95:58:7b:f7:66:69:68:37:0f:c9:6e:
         93:66:a5:21:6b:da:1c:12:07:e2:6e:e5:e9:22:81:8a:3c:66:
         06:ec:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:00 2026 by rpki-client