This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
File:                     LTX2XfLLPqFuURUvrHWUf6nDC_c.mft (raw, json)
Hash identifier:          vWVSEvu1stgvYe++fo7A4kn83aIhdCAC0hXeSPFQZrA=
Subject key identifier:   94:04:18:84:C5:93:82:35:83:53:1F:85:07:4E:22:65:C8:E3:1A:1E
Authority key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Certificate issuer:       /CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Certificate serial:       019C41D8E277CFFACAF8332478A1B44AF587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
Manifest number:          0BA6
Signing time:             Mon 09 Feb 2026 10:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:58 +0000
Files and hashes:         1: LTX2XfLLPqFuURUvrHWUf6nDC_c.crl (hash: pg41MZAJMNUws1hbpirhHAjfzxOHCL21fGuA8ad2Dm4=)
                          2: cbLVNecqa7eq_vrX9tOzHDnMN5o.roa (hash: SWXGQ0jOPhnlg3Y4HYwKdPGZdXvc9we70rw/MqzG2NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e2:77:cf:fa:ca:f8:33:24:78:a1:b4:4a:f5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
        Validity
            Not Before: Feb  9 10:00:58 2026 GMT
            Not After : Feb 10 10:00:58 2026 GMT
        Subject: CN=94041884c593823583531f85074e2265c8e31a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:e4:45:b9:bb:1a:11:e9:b0:ec:07:15:07:
                    45:87:20:6d:0a:f5:53:32:56:25:df:12:58:13:99:
                    b9:38:53:eb:70:25:27:5c:45:49:e1:61:c5:a7:83:
                    8e:69:f4:22:5c:d4:a5:9d:56:a8:ca:79:b9:ee:8f:
                    d9:07:c2:8c:be:96:f6:72:42:5d:04:c2:0b:16:e6:
                    07:6e:31:ee:d0:1a:e0:3c:8b:fc:b9:76:e7:5d:3f:
                    90:bb:be:9c:ac:09:13:c1:3d:78:16:60:a9:f0:eb:
                    36:04:c4:1a:62:77:21:46:26:cf:fa:29:0e:45:89:
                    90:c5:e6:b0:65:d4:de:ec:34:da:a3:d7:7b:ce:0d:
                    37:ef:94:76:2d:0d:8c:3f:b7:42:d9:31:bc:17:4d:
                    4a:42:d9:a5:a2:62:76:8c:cf:e7:f1:58:91:b5:16:
                    3e:fa:79:da:ec:d4:9a:a3:88:83:be:aa:ec:c1:e5:
                    68:6f:e2:07:7c:68:01:96:53:ba:2f:9c:44:69:b8:
                    49:76:38:8c:a0:76:2b:75:53:06:b7:75:60:b4:0e:
                    46:27:55:13:31:31:35:bf:c4:d6:e1:d8:5b:b1:ff:
                    e8:0e:27:68:05:3f:32:e8:73:16:1b:4a:dc:a6:0b:
                    ca:bd:4c:8e:ec:0a:7a:62:82:0d:a0:0d:38:a9:75:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:04:18:84:C5:93:82:35:83:53:1F:85:07:4E:22:65:C8:E3:1A:1E
            X509v3 Authority Key Identifier:
                keyid:2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:d1:8d:11:91:9d:55:dd:f2:c7:42:30:bf:f1:94:d2:09:
         64:ab:38:f9:9c:77:6d:37:2c:85:13:e4:90:91:3f:77:9b:f8:
         60:d6:b3:f7:e6:02:ba:fe:04:75:c6:13:9e:57:42:dd:01:da:
         b1:12:d3:02:e4:6e:0e:77:0e:2d:4b:f9:e0:30:c3:40:fe:84:
         18:e9:6b:e4:50:4b:ae:77:34:6f:0a:24:46:59:29:33:9f:1f:
         4e:2f:80:89:0f:c7:dd:59:92:58:e7:66:1f:63:bc:df:22:87:
         3d:8c:d0:5a:5d:16:95:54:06:d1:49:1d:53:a3:f0:97:d0:00:
         24:e9:d7:53:e2:4e:5d:14:cc:3f:52:74:ac:b5:a8:ed:2c:ce:
         28:46:fb:49:a0:31:92:41:7a:d5:28:92:c0:ab:78:de:89:1c:
         ad:f7:01:4a:a2:31:ce:38:b4:dd:12:6f:38:5a:50:23:4f:8f:
         22:d3:b6:cb:c7:94:96:7c:4e:38:10:49:43:dd:a7:56:aa:d9:
         6d:bc:23:cb:ed:49:de:7c:8d:b5:6e:da:6b:0f:bb:aa:18:22:
         f4:10:3a:b0:56:d2:f2:0d:13:7b:e6:db:6e:7a:a8:7d:9e:8d:
         8d:42:9e:ff:1f:97:2d:fc:73:37:03:f7:81:3e:7c:c5:fa:3d:
         ea:4f:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:42 2026 by rpki-client