This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File:                     LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier:          qtorcaw0axTcfe5POYLfctNAqgkbSjVihATsig3WOLk=
Subject key identifier:   B2:60:EF:23:68:61:F7:6F:91:D7:6B:B1:76:B9:BF:E2:6B:18:7E:74
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer:       /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial:       019C41A25407AD8591AAECB28BA879513E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number:          1026
Signing time:             Mon 09 Feb 2026 09:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:23 +0000
Files and hashes:         1: 1a0Y-XPntLJBTaP7Z1JCmBOeYnc.roa (hash: PDXJOAnSiEAeJBJEKNLP3n4C9TS71R3MwFilb6PORGw=)
                          2: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: tQqP5KdnRiEITvOlD2fIi/CVe2mz4YipTSZIMbbQUjE=)
                          3: ijFoRhXfDlfrNpWNyFmogIXNNoA.roa (hash: adP2IDTZNzyeUMfynFkS2hIcBFbJGISzpZDlTGKl9HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:54:07:ad:85:91:aa:ec:b2:8b:a8:79:51:3e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
        Validity
            Not Before: Feb  9 09:01:23 2026 GMT
            Not After : Feb 10 09:01:23 2026 GMT
        Subject: CN=b260ef236861f76f91d76bb176b9bfe26b187e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:38:ba:3f:1b:15:94:73:73:3b:d1:be:81:
                    cf:b9:6b:ef:5a:78:0d:c9:02:f9:41:74:dc:d2:29:
                    92:a3:f4:3b:4e:c8:e7:9d:86:83:cd:80:27:7c:b8:
                    26:00:04:2e:ae:8c:89:e3:b6:e4:a5:bf:62:bf:cb:
                    86:16:fd:2f:2e:3d:13:e2:73:b3:d0:9b:36:8c:a9:
                    85:7a:e5:54:a8:c0:b4:3a:05:20:c6:5d:39:6f:78:
                    78:3f:cc:c9:af:e2:96:1c:7a:47:3d:6d:b2:24:ca:
                    f6:b9:1d:97:ca:14:eb:9c:42:78:d4:7e:d8:1e:1c:
                    2d:1f:1a:6c:61:5b:93:c4:18:5a:99:6a:df:86:f9:
                    b5:a2:9f:b9:b8:71:5b:c0:f9:db:a9:b2:cd:76:fe:
                    7d:58:3f:5c:dc:2a:cb:c0:a3:ff:e4:3e:df:7d:70:
                    d6:20:42:6e:81:16:e7:af:f4:e5:4e:ae:51:6e:91:
                    0a:64:4a:2e:ed:b7:9b:c0:7e:54:e1:b8:c9:cb:92:
                    ef:33:1a:53:2c:93:66:b2:e6:67:b3:28:ed:bf:84:
                    64:c8:e0:31:90:e8:cf:44:1a:d0:47:2d:c7:39:51:
                    79:c1:13:d9:74:fd:a6:0f:83:e5:ba:5a:04:28:3c:
                    9b:2d:b0:c1:bf:86:ce:c4:10:4f:45:e4:6a:8a:61:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:EF:23:68:61:F7:6F:91:D7:6B:B1:76:B9:BF:E2:6B:18:7E:74
            X509v3 Authority Key Identifier:
                keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:57:9f:a4:04:97:ba:22:7e:80:5b:22:8b:69:20:54:df:03:
         3e:ed:96:7f:71:03:5c:13:22:34:f5:3b:1e:a6:77:f3:b3:d5:
         af:4a:72:84:e6:c8:ab:0c:59:76:ba:e2:4d:22:ad:0b:79:55:
         58:92:ce:3d:20:04:93:29:59:5c:49:ab:0d:f8:34:b9:ce:0d:
         a5:4f:fa:18:fe:e6:d6:5f:7f:41:4b:55:9b:f2:eb:68:b0:d3:
         39:b4:95:8e:65:14:ee:f1:3a:c6:5f:c0:57:71:b2:2b:a8:11:
         5e:1e:22:4b:f4:ef:3d:ef:ed:19:32:c2:f8:10:b8:4c:d5:89:
         7b:38:c1:32:4b:da:6a:d5:bb:82:07:ce:25:1b:69:1f:fd:09:
         06:2a:21:9e:cf:da:42:02:46:a2:1e:e7:cc:b9:49:8e:ce:62:
         f0:b4:b8:fd:e3:9f:c6:cf:da:4a:b6:d5:b1:ae:65:29:32:19:
         21:90:36:2a:84:70:83:94:0e:62:18:11:ce:9f:5d:c9:e6:d3:
         e1:22:98:17:9c:cd:6a:15:63:99:bf:67:fe:18:bb:e0:6b:48:
         34:e6:33:eb:d9:6e:e6:a6:9d:20:9a:d1:04:21:0d:fb:da:aa:
         e1:40:eb:df:19:ea:7a:1b:22:c9:4a:0c:01:55:6d:51:da:d9:
         5e:00:f3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBolQHrYWRquyyi6h5UT5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzVmMzVkMjU2Y2M0YTViODgzMTliYjdlNGJiYmEzMjll
NDkzNDEwHhcNMjYwMjA5MDkwMTIzWhcNMjYwMjEwMDkwMTIzWjAzMTEwLwYDVQQD
EyhiMjYwZWYyMzY4NjFmNzZmOTFkNzZiYjE3NmI5YmZlMjZiMTg3ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoU4uj8bFZRzczvRvoHPuWvvWngN
yQL5QXTc0imSo/Q7TsjnnYaDzYAnfLgmAAQuroyJ47bkpb9iv8uGFv0vLj0T4nOz
0Js2jKmFeuVUqMC0OgUgxl05b3h4P8zJr+KWHHpHPW2yJMr2uR2XyhTrnEJ41H7Y
HhwtHxpsYVuTxBhamWrfhvm1op+5uHFbwPnbqbLNdv59WD9c3CrLwKP/5D7ffXDW
IEJugRbnr/TlTq5RbpEKZEou7bebwH5U4bjJy5LvMxpTLJNmsuZnsyjtv4RkyOAx
kOjPRBrQRy3HOVF5wRPZdP2mD4PluloEKDybLbDBv4bOxBBPReRqimGC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJg7yNoYfdvkddrsXa5v+JrGH50MB8GA1UdIwQY
MBaAFCx1810lbMSluIMZu35Lu6Mp5JNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhYelhTVnN4S1c0Z3htN2ZrdTdveW5razBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MGExZTUtN2QyYS00OGQ2LWE1MGUt
Zjk2ZmI0ZWE3ZTcwLzEvTEhYelhTVnN4S1c0Z3htN2ZrdTdveW5razBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MGExZTUtN2QyYS00OGQ2LWE1MGUtZjk2ZmI0ZWE3ZTcw
LzEvTEhYelhTVnN4S1c0Z3htN2ZrdTdveW5razBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFefpASX
uiJ+gFsii2kgVN8DPu2Wf3EDXBMiNPU7HqZ387PVr0pyhObIqwxZdrriTSKtC3lV
WJLOPSAEkylZXEmrDfg0uc4NpU/6GP7m1l9/QUtVm/LraLDTObSVjmUU7vE6xl/A
V3GyK6gRXh4iS/TvPe/tGTLC+BC4TNWJezjBMkvaatW7ggfOJRtpH/0JBiohns/a
QgJGoh7nzLlJjs5i8LS4/eOfxs/aSrbVsa5lKTIZIZA2KoRwg5QOYhgRzp9dyebT
4SKYF5zNahVjmb9n/hi74GtINOYz69lu5qadIJrRBCEN+9qq4UDr3xnqehsiyUoM
AVVtUdrZXgDz3w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:11 2026 by rpki-client