This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File:                     Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier:          RA1sEBF3JXeWXXuiHrKZI0+1o4jYyLDftUB4L4eGCvo=
Subject key identifier:   95:9A:2D:04:D3:50:A7:73:80:67:21:A3:FC:46:BC:3C:7C:EA:6B:11
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer:       /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial:       019BFCF85EAF0C24C7BBE60E91384B7D7D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number:          1808
Signing time:             Tue 27 Jan 2026 01:01:34 +0000
Manifest this update:     Tue 27 Jan 2026 01:01:34 +0000
Manifest next update:     Wed 28 Jan 2026 01:01:34 +0000
Files and hashes:         1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: ejzNcPzDoiOG2cBKKV0qI9pLjDdFWn/y7btYRK5HwmA=)
                          2: OUfdeNNDs8OS_Zz61BkSY7Pif-E.roa (hash: rEyjhKBNegyLt3vLHkJhC5gpFSZPB3EMOpngPcDHA6k=)
                          3: kjwAci0-xsN-FW2yHLM0zLU2az4.roa (hash: ZKpTRPaiSMpihhfsD4iTWrJFTjTfyomHoD/xRGDDVIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f8:5e:af:0c:24:c7:bb:e6:0e:91:38:4b:7d:7d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
        Validity
            Not Before: Jan 27 01:01:34 2026 GMT
            Not After : Jan 28 01:01:34 2026 GMT
        Subject: CN=959a2d04d350a773806721a3fc46bc3c7cea6b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:1b:73:af:04:2d:90:bc:15:d8:e2:69:95:
                    52:3d:e4:b2:71:b0:e7:ec:7a:78:d1:99:57:46:4e:
                    69:e5:06:e3:e0:c7:b9:49:5a:44:9f:d7:96:f8:15:
                    c6:f4:da:4c:d5:df:74:19:57:0b:a6:45:08:f8:9b:
                    e6:40:90:f0:aa:9f:aa:a5:f5:9d:b9:0a:4a:bf:bd:
                    55:10:a5:13:65:22:ed:d0:e3:3c:79:8b:6e:ad:14:
                    4b:da:14:13:7d:f0:fd:72:81:37:ac:aa:a4:6b:28:
                    c9:b4:fe:da:c8:df:7a:47:0c:ef:0d:f7:f1:4d:eb:
                    57:1c:c9:43:83:e9:8e:02:b3:bb:c6:57:47:c4:1e:
                    14:ba:e3:8b:df:d9:9b:0f:60:cd:21:48:7c:84:80:
                    e7:d5:c4:7f:5c:6a:88:e1:66:cc:b2:92:6a:6d:a0:
                    26:b8:1b:0d:46:45:ae:84:e7:5a:df:f2:02:8c:41:
                    5e:9d:0f:9f:71:12:5a:bf:31:c6:15:e7:cb:03:62:
                    fa:49:68:9f:94:d9:36:c7:28:f0:c4:0d:24:ae:df:
                    99:e2:5f:16:09:58:78:9f:51:36:08:3e:84:bd:c5:
                    78:6d:db:3b:cc:f0:d7:1a:6e:df:86:74:69:c4:ae:
                    83:3e:3c:36:d4:4a:f1:33:4f:0c:12:2d:d2:ce:0e:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:2D:04:D3:50:A7:73:80:67:21:A3:FC:46:BC:3C:7C:EA:6B:11
            X509v3 Authority Key Identifier:
                keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:68:c7:e3:91:52:5f:8a:2b:fa:20:03:f4:e6:ef:21:e1:
         da:91:7c:52:27:a3:d7:eb:d6:89:81:ab:1e:dd:ae:7e:ef:82:
         c2:76:3f:be:3f:e4:2c:2b:d5:4a:21:3a:de:de:08:a9:54:ae:
         db:ec:08:58:c1:0a:c7:7e:91:f7:f4:11:7b:03:40:bb:2f:b2:
         bf:6d:d6:09:df:17:90:f5:68:d6:1f:f9:ea:b6:ce:cf:69:b5:
         74:5a:7b:8b:7d:14:68:33:cf:a2:06:77:d3:5c:a3:20:1a:d9:
         e3:07:ed:55:1c:95:c9:da:f6:77:b1:ef:21:e1:21:e6:6c:59:
         66:58:b4:32:7f:6d:d0:63:2f:d8:f2:cb:0b:c9:07:28:65:24:
         e5:40:e8:4d:ce:78:85:58:52:03:5a:67:b3:31:ed:9e:58:0f:
         64:5e:73:6e:39:3f:6b:49:2e:36:4e:9d:15:97:38:a2:83:5d:
         22:ad:79:bd:b9:fa:96:30:87:37:b8:40:28:7b:d3:3f:28:eb:
         75:02:e4:d4:58:84:0e:64:a9:d3:8d:d3:83:9c:52:3d:da:0c:
         fc:16:89:22:7f:b4:94:bc:ba:64:ed:5d:98:cc:f0:90:cf:be:
         c4:3d:c2:2f:7e:3a:bb:bf:61:d6:e3:b9:0a:9c:45:6d:6c:99:
         81:b7:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:33 2026 by rpki-client