This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File:                     L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier:          bZBiAmhHrJVfFjxYlhV63ZrrNUvOf+ZXUd1TGHIqYv8=
Subject key identifier:   38:32:72:CE:82:32:54:35:5C:A2:76:76:5F:E5:99:09:28:8B:9E:F9
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer:       /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial:       019C42B469A24D16F328CD3A636B1EAB9B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number:          0EC4
Signing time:             Mon 09 Feb 2026 14:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:45 +0000
Files and hashes:         1: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: KwK4hqdP6tNlGcJK/X87ZfAR+G56F3HtgPvv1W2J8ZQ=)
                          2: MebPMP4MKMDRPcWsqA1RWlWN-u0.roa (hash: EdSN3u2MFCBqnyk+W6CQKHBVKlUmG8nORx98tAwp5Qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:69:a2:4d:16:f3:28:cd:3a:63:6b:1e:ab:9b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
        Validity
            Not Before: Feb  9 14:00:45 2026 GMT
            Not After : Feb 10 14:00:45 2026 GMT
        Subject: CN=383272ce823254355ca276765fe59909288b9ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:72:9c:c8:d5:61:9f:9d:1d:0c:25:6c:ae:
                    8b:c3:6a:d1:fd:d7:6f:4c:d9:79:51:af:ec:94:68:
                    b0:d7:d7:28:8e:61:e7:f0:f7:31:3c:fa:8d:cb:4b:
                    8f:91:14:e1:ac:1f:b0:7c:e1:82:db:d5:bc:69:f3:
                    6e:07:3d:06:84:74:9b:16:a8:1d:0c:28:67:a9:9f:
                    be:0e:5d:6c:1c:31:65:b2:aa:11:de:55:7a:36:23:
                    c2:36:8f:fc:13:85:12:45:89:1a:19:53:df:d7:e8:
                    ee:9c:e6:c9:ef:37:b3:d3:40:df:18:71:60:10:4a:
                    0c:bb:4a:de:a7:68:1c:df:a0:60:87:ed:82:d3:2e:
                    f2:59:8b:9c:fc:5e:66:24:e2:48:dc:06:26:78:60:
                    71:19:fc:53:3b:a4:c3:8c:df:61:0d:73:e7:a9:e6:
                    bc:7e:64:d6:24:e5:ac:93:a9:69:3b:60:d4:37:4d:
                    59:04:f3:94:9d:49:09:5d:f4:15:d0:a4:0d:76:a9:
                    38:b6:81:2d:e4:c2:75:a0:1f:ad:78:5a:18:6c:c8:
                    e0:71:fb:54:e2:8d:f9:a7:18:68:61:8a:75:44:ba:
                    cd:8e:9a:af:5f:68:6d:5a:a4:6f:04:b0:c8:0c:e4:
                    5b:9b:0a:67:d4:41:99:9b:84:58:20:7a:0e:85:1d:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:72:CE:82:32:54:35:5C:A2:76:76:5F:E5:99:09:28:8B:9E:F9
            X509v3 Authority Key Identifier:
                keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ab:2d:95:66:fe:01:fe:d3:22:46:51:a8:71:a4:0e:64:9b:
         ce:01:09:83:af:c3:f5:4f:30:e4:28:e7:6d:fe:1d:75:30:77:
         35:91:2c:4e:84:ec:fa:04:a9:f6:ed:22:b0:8c:ca:ff:ce:63:
         32:2b:0b:94:1b:f3:cd:f9:80:f2:45:6d:88:a8:ab:7f:9c:b9:
         46:9e:22:7e:2e:75:87:26:32:13:de:92:d3:85:81:0f:52:98:
         70:44:a0:82:e3:f6:ce:5f:6f:d7:15:8c:ce:ec:70:61:d1:0c:
         70:9b:de:4f:d2:67:b8:a6:89:d1:17:6f:81:f3:b4:7b:54:a1:
         4a:e3:82:85:86:c1:42:ba:fd:b3:83:2d:8c:df:f5:18:d5:3b:
         4f:6a:63:8c:56:ad:c9:b9:ec:61:63:1b:50:79:7c:d4:9d:dc:
         3c:c0:c5:b4:71:b5:a7:98:87:5c:e7:78:8f:01:0d:6a:20:81:
         2b:5a:82:f4:ca:6e:49:4c:75:72:c6:78:f7:2d:93:66:0b:ca:
         7a:f7:2f:51:63:4e:bd:08:94:8b:f4:59:05:9f:ae:39:05:f9:
         52:6f:40:c2:4f:a8:81:24:fb:e5:c0:69:18:3e:d4:59:20:27:
         29:25:84:61:7c:de:f0:0f:32:7c:76:a2:58:e4:10:0a:b7:e2:
         6f:8d:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:10 2026 by rpki-client