This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File:                     LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier:          yvFBlY7ZeaAGx3oG2bwOYtrcZ9x6hnmYV+SyRSCMvWY=
Subject key identifier:   23:F3:E1:A0:77:EE:20:F5:C0:AE:32:8E:F5:08:0D:BD:28:65:5B:04
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer:       /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial:       019C051F4E17575AD543AA53369574FE3875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number:          0DF5
Signing time:             Wed 28 Jan 2026 15:01:03 +0000
Manifest this update:     Wed 28 Jan 2026 15:01:03 +0000
Manifest next update:     Thu 29 Jan 2026 15:01:03 +0000
Files and hashes:         1: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: YBBjQasHHdK5wW47/9131pTs52/gJxF1o+eKwyR0WT0=)
                          2: r45G67-96LJpADDZJVJ0gLKO_X4.roa (hash: xLucZhj5eosliNF0R5ZBpKqpdmf4rFaViGwVRkuYRmo=)
                          3: u7gow9KmygGFJud8Kbx8Q5bXl10.roa (hash: zOMjeXXBLvQlEvulfQkHinq9NE+I+uXsiNr8CDWlugI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:1f:4e:17:57:5a:d5:43:aa:53:36:95:74:fe:38:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
        Validity
            Not Before: Jan 28 15:01:03 2026 GMT
            Not After : Jan 29 15:01:03 2026 GMT
        Subject: CN=23f3e1a077ee20f5c0ae328ef5080dbd28655b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:e9:b1:7a:af:79:a3:41:16:57:ab:11:c4:
                    05:3e:05:94:14:7c:12:a5:2b:e6:d8:a6:c1:f0:df:
                    4c:ab:67:a3:86:b8:c2:8f:6f:98:97:47:49:8b:66:
                    4e:4d:9e:49:71:4c:08:87:39:a7:bf:63:42:88:94:
                    d6:fd:c2:0b:3b:01:fb:71:4b:38:f7:dd:b4:8e:40:
                    76:4c:82:a8:bb:34:af:94:9b:5c:17:55:4e:c4:92:
                    1d:5e:e3:73:1e:44:91:0a:7f:e3:08:80:d2:c7:39:
                    a5:49:8c:52:f8:10:56:a5:75:f1:78:6b:00:f8:44:
                    23:30:9f:19:72:83:de:0e:d1:e7:8d:77:6e:39:fa:
                    e8:8a:a2:fe:80:c5:3a:2d:10:81:75:51:5e:f4:4f:
                    38:98:64:38:6e:16:2e:51:13:b1:61:54:fe:cc:39:
                    fc:75:ce:b1:f4:e8:f7:a7:cb:4d:7c:84:43:a1:d2:
                    9f:dd:8d:a7:e1:b6:ea:e4:d0:c7:ab:f7:be:ce:dd:
                    c2:2b:8d:88:ed:33:42:99:fc:1e:78:ed:f0:a8:0c:
                    32:6c:f8:d4:62:d1:2c:bb:ee:e3:f1:2e:2e:99:f2:
                    34:ce:a7:d0:db:ee:4a:7d:a3:4a:0c:f7:e4:33:9c:
                    99:59:20:62:96:50:2d:64:e4:1a:3a:94:4e:77:28:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:E1:A0:77:EE:20:F5:C0:AE:32:8E:F5:08:0D:BD:28:65:5B:04
            X509v3 Authority Key Identifier:
                keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:26:47:c4:b0:14:89:d3:8e:be:e3:ec:46:51:ee:b2:fb:
         69:c0:48:be:0d:2d:02:24:e7:b1:49:94:b0:a3:e8:da:ce:23:
         17:be:da:a9:e7:c7:47:20:1e:01:ba:57:65:bf:ea:d7:bd:7c:
         be:16:1f:7e:ce:3e:e9:a1:a7:bd:e1:ef:cd:62:6e:b7:c4:66:
         98:07:8d:96:0b:5d:9f:2c:f9:7f:e8:65:23:44:53:15:f9:ad:
         63:f4:e2:29:a8:7e:83:ce:a7:9a:fd:6b:23:22:85:8a:81:af:
         47:87:79:ff:97:4a:84:57:4d:e0:ef:2a:66:5e:d0:7c:d0:05:
         41:60:84:06:be:da:2d:9b:9b:5f:88:10:9c:29:0c:7a:23:1f:
         ee:fc:83:bc:0d:7a:d9:c0:d0:06:50:6c:0a:30:45:1a:09:15:
         6e:e0:5e:69:92:05:af:35:53:ce:75:2a:b0:e3:bf:5f:5f:e3:
         ce:9d:de:0c:a5:f3:63:52:ee:4f:88:86:1d:18:ad:76:50:44:
         9d:50:84:6a:9b:5b:dd:b1:20:d1:33:72:a2:db:b9:84:26:d0:
         08:bc:af:d4:ca:81:f3:7a:e6:a3:44:88:0d:ed:3b:61:29:ec:
         1b:4c:77:15:97:cb:ac:e9:f3:04:d5:5a:b5:f1:97:6f:e8:af:
         02:af:6a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:35:05 2026 by rpki-client