This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File:                     _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier:          HW6kj4JPQS5cui+LpkcK20otrnL7iLxXAbLpYS60bIw=
Subject key identifier:   22:CF:AC:54:12:32:82:86:4D:A7:19:09:1A:2A:D5:E6:09:8A:97:9B
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer:       /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial:       019C37FA859485F424DF32DBB864949FE212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number:          0626
Signing time:             Sat 07 Feb 2026 12:01:30 +0000
Manifest this update:     Sat 07 Feb 2026 12:01:30 +0000
Manifest next update:     Sun 08 Feb 2026 12:01:30 +0000
Files and hashes:         1: M-XgOjesPXIogjBIQr0FL2b7KV0.roa (hash: cfiY/wJuu827u4/W0gn3sJ9LCmjPRCXCxBqRyHWf5wA=)
                          2: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: Hs+SB0No2DInFJ753NOvkjuks/8/J5SUpgia3pIXTbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:37:fa:85:94:85:f4:24:df:32:db:b8:64:94:9f:e2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
        Validity
            Not Before: Feb  7 12:01:30 2026 GMT
            Not After : Feb  8 12:01:30 2026 GMT
        Subject: CN=22cfac54123282864da719091a2ad5e6098a979b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:7f:89:f6:1b:4e:34:4d:ab:d2:66:56:06:
                    2c:da:26:49:ea:5d:8b:97:9a:22:29:f0:dc:07:61:
                    62:47:f0:d8:c9:fe:5a:7a:85:3c:e7:1f:f2:14:e2:
                    57:07:44:91:4f:1d:2c:80:f4:f1:81:21:2a:ff:fe:
                    44:11:e3:a5:bb:f6:b3:28:3b:07:f7:78:58:d8:64:
                    78:55:e2:72:a2:d4:bc:78:bb:55:d6:61:12:80:fe:
                    0b:4f:c6:2f:5a:8a:fe:88:13:f9:21:bc:65:ff:b3:
                    56:6c:98:80:99:b1:b8:c2:e9:b0:8c:61:ae:e6:84:
                    82:f7:00:ae:15:d1:69:c0:dc:7d:5f:86:76:ca:6b:
                    89:51:6a:4b:0f:a6:1c:e9:29:34:8e:07:9f:91:60:
                    fd:bf:48:e1:3f:0f:77:9c:1f:c8:11:23:43:ab:ab:
                    33:f1:0e:46:59:e4:0d:b8:0d:5f:45:6d:91:59:b7:
                    3c:34:4a:db:b5:77:ae:d4:de:72:32:63:f7:ea:42:
                    83:d1:78:b4:ab:93:15:ae:d7:77:25:be:ce:fe:f8:
                    3f:94:85:0f:e0:4a:83:bf:c3:4b:6a:5c:da:c5:e6:
                    60:93:cf:22:90:63:30:d5:8b:64:8e:64:e8:84:b8:
                    f1:2f:df:29:40:28:33:af:db:b3:c7:97:cf:86:31:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:AC:54:12:32:82:86:4D:A7:19:09:1A:2A:D5:E6:09:8A:97:9B
            X509v3 Authority Key Identifier:
                keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:72:f2:6f:fe:53:5a:fd:85:46:d6:29:d3:58:11:62:8d:6e:
         70:1b:01:cd:47:81:dc:a8:2d:6e:a0:ae:8a:c5:5a:c9:6a:10:
         fe:a0:c4:17:3a:87:1c:c4:f7:9e:b9:d0:ea:b7:45:3d:90:64:
         b8:65:b8:4e:98:e7:1f:a1:fa:08:db:d2:66:01:85:56:d9:4e:
         16:0e:c3:a1:3c:c8:aa:2c:bf:e9:91:58:7f:c0:9f:52:67:9e:
         7b:d7:fc:7a:55:06:1c:b8:d3:fc:60:da:b2:30:2a:0d:88:77:
         be:75:b4:d4:2d:41:60:55:19:ef:f4:7f:00:97:2b:30:e3:fc:
         e4:58:e2:41:13:64:d2:a7:47:44:81:94:52:3e:02:4b:21:56:
         67:e8:09:64:2d:14:99:86:28:dd:d9:01:c4:7e:15:b4:4f:a1:
         d4:06:9b:ee:78:bd:d7:55:c8:e4:a2:85:37:85:bb:ae:f3:de:
         2f:f1:bc:26:ac:0c:90:cf:27:69:76:8a:b0:9a:14:bc:85:07:
         ee:90:78:4c:07:73:f1:56:d4:78:c4:d1:e8:eb:72:73:68:5c:
         3c:9d:c7:21:db:4e:55:bd:cd:f7:89:48:f7:20:e4:ae:21:03:
         a9:4c:e3:bf:8b:a4:7d:a2:6a:9f:86:7f:1f:6f:63:d0:67:b5:
         20:c0:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 20:51:55 2026 by rpki-client