This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File:                     lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier:          JMJoxjO/EP5X8dL6CiNDHtefHvCQAugpT/f5LRI2tUI=
Subject key identifier:   8B:94:84:D9:0F:F0:FE:55:25:7B:27:93:0D:C2:8E:A0:94:36:6A:C4
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer:       /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial:       019BFE0A1BF22096117F5F5516208F5266CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number:          13B6
Signing time:             Tue 27 Jan 2026 06:00:33 +0000
Manifest this update:     Tue 27 Jan 2026 06:00:33 +0000
Manifest next update:     Wed 28 Jan 2026 06:00:33 +0000
Files and hashes:         1: FoFknui6N7AV-MVsL0GcCguJMuY.roa (hash: zSrSbQATu/hSvIQfL/GtZLhgnMs95GytYnvic5x5vKc=)
                          2: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: OX5AtU0t87U96s38Mi+J9k3t+yAap24srvFTQXohWWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:1b:f2:20:96:11:7f:5f:55:16:20:8f:52:66:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
        Validity
            Not Before: Jan 27 06:00:33 2026 GMT
            Not After : Jan 28 06:00:33 2026 GMT
        Subject: CN=8b9484d90ff0fe55257b27930dc28ea094366ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:35:b8:38:9b:9d:f8:76:bf:4b:f8:4c:9b:
                    fc:f6:82:8b:3f:99:bb:2f:14:f6:88:67:e2:27:b0:
                    29:dd:c3:94:39:44:dd:22:89:a9:27:85:b9:51:41:
                    d8:be:50:51:61:4b:b3:4f:13:f8:94:a8:ba:80:bd:
                    cd:40:02:ff:d6:4f:3c:58:96:da:3c:9d:d3:06:75:
                    bd:8a:43:17:8c:16:52:ad:e5:62:92:64:c8:cb:da:
                    f9:66:12:f0:bc:49:61:cd:9b:56:ad:86:da:78:d2:
                    eb:24:ff:26:30:4f:ba:fb:15:29:ed:23:4c:b2:66:
                    75:38:13:83:81:a5:e2:bd:b3:c4:7a:44:4a:de:94:
                    ca:9e:0f:fa:d2:3f:34:4e:db:88:2c:68:f9:c4:da:
                    65:cb:d9:90:08:5c:99:1b:38:8d:5b:97:eb:37:81:
                    9c:a5:73:ef:93:11:08:ac:57:f3:1c:78:2e:b6:25:
                    d1:10:f4:3e:27:77:2f:2f:65:f1:93:f4:04:d1:bd:
                    d2:70:79:95:e3:42:3e:73:2d:a9:84:3e:38:84:3c:
                    3e:08:58:a7:7c:b3:8f:09:f4:a5:99:b6:9c:f6:a2:
                    e4:d6:b2:b2:73:36:5d:c4:f3:8b:e2:18:e3:a9:25:
                    3f:72:bb:f1:54:c0:65:46:41:d1:b0:ee:9f:20:dc:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:84:D9:0F:F0:FE:55:25:7B:27:93:0D:C2:8E:A0:94:36:6A:C4
            X509v3 Authority Key Identifier:
                keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:33:a7:c9:10:d0:8a:03:70:dc:a9:23:e5:e0:85:bb:ff:
         18:67:35:f5:91:d6:a9:d3:b6:96:12:3e:9b:ca:85:36:54:1a:
         e8:92:bd:4e:68:3c:10:22:19:56:71:f3:68:e0:41:bf:3b:71:
         de:e5:bb:45:e7:c7:28:2c:1e:22:86:24:08:ea:d9:6b:69:be:
         ba:fb:a6:b8:5b:23:c7:60:c9:ee:b8:40:8d:9c:d4:6c:3b:f2:
         71:37:71:c4:d1:09:21:75:7b:92:ae:3a:0f:2d:50:6c:90:a6:
         3e:5f:59:19:39:e9:42:15:a2:7e:9c:40:59:f0:08:14:c0:0f:
         8e:19:fb:25:f4:17:2d:d3:5e:f3:1d:28:5a:38:7b:a2:57:07:
         43:98:30:ad:9e:ce:c7:42:c8:91:d6:6a:d6:f9:27:f7:3c:cb:
         60:d1:fa:fc:0b:cd:a3:e4:d2:7a:e7:07:86:b2:56:71:5c:7a:
         ae:c1:49:0b:21:38:d2:da:9d:52:00:94:d7:fb:b0:89:6e:a0:
         02:a5:41:b0:b1:bd:06:a5:19:83:ed:5c:59:81:83:bf:b7:16:
         9b:7e:22:35:93:b0:7c:b7:be:0f:76:39:4b:04:76:15:21:b9:
         8e:2f:cb:60:c6:ba:21:9c:c7:b6:e9:7e:70:7f:76:ae:0e:a6:
         cb:53:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:47:21 2026 by rpki-client