This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File:                     la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier:          9q50S6VQRY44ObX2QjiE4AN8zGB/3TiCUAfme8TRAz4=
Subject key identifier:   EA:59:38:08:3A:6D:9D:3A:09:CE:DF:24:26:B5:16:A3:78:BC:9C:EB
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer:       /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial:       019C4322C5690E9B1279C6B66B470E29519B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number:          0F7F
Signing time:             Mon 09 Feb 2026 16:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:18 +0000
Files and hashes:         1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: QuHayndG18AFvY2wkDojLNlQJg/NJJMF7Qncpj6e30E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:c5:69:0e:9b:12:79:c6:b6:6b:47:0e:29:51:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
        Validity
            Not Before: Feb  9 16:01:18 2026 GMT
            Not After : Feb 10 16:01:18 2026 GMT
        Subject: CN=ea5938083a6d9d3a09cedf2426b516a378bc9ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:16:f2:f8:8e:fb:e2:a4:e3:81:dd:1e:b6:
                    1d:5d:e0:32:0e:dc:5b:53:2b:94:20:d6:7b:ff:de:
                    9b:39:35:05:6e:22:34:8f:d1:0b:8e:05:46:d6:36:
                    8b:f0:a9:73:64:88:90:7e:6c:6d:e9:4a:09:f9:bf:
                    55:f3:ec:af:69:10:84:47:ca:29:6d:cf:bd:5f:74:
                    52:5b:54:5d:b3:d5:84:f8:72:f0:9d:02:d5:44:78:
                    df:de:99:92:35:d7:1c:2f:34:d2:32:07:17:fd:0a:
                    6d:1d:0c:2d:c9:fd:c4:96:39:1c:98:3e:fd:fd:6c:
                    cf:81:42:c8:fb:e3:81:85:c8:f3:ac:a0:3b:1c:c5:
                    c3:8a:71:8c:68:21:42:70:44:40:27:b7:03:e0:9a:
                    b5:02:f9:13:37:7f:73:eb:9b:b6:73:98:8d:e2:4e:
                    01:8e:5d:57:4e:c5:c2:ea:ee:21:ac:45:64:a3:f3:
                    6b:46:a0:a0:84:2c:05:f3:fb:13:e4:3a:a9:34:68:
                    aa:bf:87:ce:32:e4:fc:11:fc:32:88:f1:f8:b3:ee:
                    d7:06:93:8a:7e:e5:09:50:7c:54:6c:be:64:c7:d2:
                    5e:94:0d:98:dd:88:0f:0c:30:ae:32:16:22:bc:22:
                    ba:b0:8a:34:8e:9d:83:01:1d:c4:77:ec:ae:49:9f:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:38:08:3A:6D:9D:3A:09:CE:DF:24:26:B5:16:A3:78:BC:9C:EB
            X509v3 Authority Key Identifier:
                keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:3b:25:6f:c5:9f:24:74:4a:ef:62:30:1f:01:ac:7e:11:
         b1:c2:d7:e9:eb:71:5e:00:39:fc:35:6b:5b:e7:88:a0:13:0f:
         19:a6:86:2b:56:9a:b2:82:a9:3f:6e:94:97:63:a5:5a:43:55:
         35:11:18:81:37:c6:bb:a7:7b:3e:00:88:24:d2:8c:c5:65:b8:
         da:b3:28:9b:d3:f4:80:26:fd:cb:df:d1:19:9b:f7:da:23:ec:
         eb:d6:cf:89:f0:d5:a5:32:63:85:1c:a0:48:08:30:69:3e:99:
         75:f6:09:a1:9d:de:b1:64:61:1c:4a:a9:ab:53:2f:ec:b2:a4:
         f3:96:8e:36:0e:81:7c:14:04:5d:33:50:1a:68:0a:7a:f8:09:
         ad:a0:9f:44:48:b3:e6:de:34:9d:4b:20:71:c9:92:f5:fc:f6:
         91:80:17:6d:f9:cc:c0:ac:d1:9e:25:a4:26:c6:db:fa:1e:69:
         05:e7:d3:12:26:21:4b:7e:d3:60:e0:58:70:9d:cb:5b:4d:f1:
         16:61:ac:62:df:47:d3:e7:68:97:45:6c:d1:64:66:ed:1a:f1:
         69:15:1e:a8:34:52:b5:75:82:39:f5:6b:9c:b1:80:be:1b:3d:
         54:70:2e:7c:30:50:2a:31:ad:8a:ac:91:03:93:2d:6d:b0:1c:
         7f:44:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:44 2026 by rpki-client