This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File:                     llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier:          NyzghrmXpZ5Gfv8GRpcmgBa8leXUkoTOIjeGksfjvos=
Subject key identifier:   BE:54:40:A6:8E:0B:A9:86:6C:4A:D7:15:2C:B1:93:F7:80:7F:2D:A1
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer:       /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial:       019BFA2DA5967D76BFC87C7076CDE0839328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number:          0F50
Signing time:             Mon 26 Jan 2026 12:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:53 +0000
Files and hashes:         1: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: f8+5hsz/n1J04c7HbU10mRJfh0K1bvOxGGn0zJPxuGM=)
                          2: vsmnrTln0FKIYbUICJTrn_gYJUQ.roa (hash: 8GWosWzTHZxxvdZfNNXEvhtfiz2Ewi4ZMP6/Lvtvauc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:a5:96:7d:76:bf:c8:7c:70:76:cd:e0:83:93:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
        Validity
            Not Before: Jan 26 12:00:53 2026 GMT
            Not After : Jan 27 12:00:53 2026 GMT
        Subject: CN=be5440a68e0ba9866c4ad7152cb193f7807f2da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:6b:b7:bc:42:fd:94:e8:d9:c4:3d:7c:a3:
                    19:de:56:70:f0:d0:15:47:60:fa:f9:26:87:45:a8:
                    3d:69:b9:95:6c:60:56:87:93:27:e5:59:aa:98:fe:
                    a1:f1:11:b6:f3:c7:73:c3:75:ff:e9:fe:d0:af:3c:
                    79:c1:01:d5:d5:c6:7a:16:8d:b3:79:ad:c4:a8:0f:
                    76:0b:f4:53:a6:77:93:b3:cd:c4:ce:2b:05:ff:f5:
                    4a:f9:30:f5:71:be:95:1a:02:15:47:89:64:da:0f:
                    a7:72:a9:21:42:d8:23:ab:0b:e9:60:22:e6:c0:b4:
                    1c:2f:8e:42:40:0d:58:11:f5:17:8a:18:89:64:f3:
                    fd:24:b0:a0:cd:bc:b0:48:84:31:53:24:8e:f1:f2:
                    cd:aa:b9:9c:98:ed:94:55:94:e0:12:ce:a9:c5:3c:
                    79:58:2f:ec:d6:fd:2d:d9:9a:97:31:99:65:36:0c:
                    a8:f5:1a:98:15:b5:37:e5:2d:2c:13:c2:76:3d:14:
                    6b:74:3c:aa:bb:44:8a:2b:1f:fd:53:fd:82:3a:fb:
                    b0:68:7f:68:8e:61:d9:ea:55:24:0d:42:29:9e:54:
                    11:c4:f7:f4:71:ad:f3:41:5c:54:94:9f:b3:a3:97:
                    78:28:19:01:29:76:b4:f9:10:44:d8:74:27:2b:8d:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:40:A6:8E:0B:A9:86:6C:4A:D7:15:2C:B1:93:F7:80:7F:2D:A1
            X509v3 Authority Key Identifier:
                keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:ed:b6:a2:08:05:db:91:bf:df:f8:79:ef:bb:f5:b8:d4:
         ba:25:f7:a5:09:9b:b6:72:4b:61:08:0e:7b:41:4e:ef:9c:11:
         aa:c9:f5:ec:c1:be:7a:68:3c:69:db:3a:ab:ce:7e:5d:51:13:
         6d:de:5b:f4:a9:be:b9:96:81:e9:f0:d4:ab:bc:d8:fb:ff:73:
         29:74:6c:cc:47:03:a9:2c:04:f2:c7:4e:28:7a:3f:3c:8f:e9:
         5a:1e:16:b9:fb:b5:7b:a0:92:82:a6:4c:52:4a:ec:f2:d1:8d:
         b6:c1:dc:a1:ba:a4:5d:14:b2:c7:0c:be:17:0b:04:2b:0c:19:
         8f:51:18:9c:c5:cf:4e:48:1c:db:6c:25:0d:06:22:38:bd:67:
         6b:4d:81:29:c1:3b:63:75:fc:0e:59:ec:e4:12:28:25:1f:36:
         c2:65:cf:54:e0:fb:60:0c:f2:cf:36:93:c7:12:3a:b3:b0:7b:
         d1:54:91:c0:36:71:a7:82:d7:b4:24:33:de:0d:8a:1c:1b:cc:
         cc:dc:21:f1:56:4c:86:20:89:0e:81:15:a9:41:55:d1:fe:c1:
         bd:32:91:6d:ed:5f:e6:2b:e2:ed:85:bd:2e:22:b4:9a:ed:c8:
         bb:80:ab:0d:95:b9:68:17:92:df:49:c0:df:9d:a1:31:bf:42:
         e9:7d:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:56 2026 by rpki-client