This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
File:                     LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft (raw, json)
Hash identifier:          RbIXIQ8ueAJT5wrXDbZyvacPMy2JR8AqitNcGLifwhw=
Subject key identifier:   F8:E7:89:7B:D1:D6:36:24:03:97:10:74:01:00:95:CD:B4:5D:F0:49
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Certificate issuer:       /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial:       019C446C3573C91733CDEA407CB0C1CC0578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
Manifest number:          01CC
Signing time:             Mon 09 Feb 2026 22:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:08 +0000
Files and hashes:         1: GxprRy6go3u5_DAdndXbJ5nUbwg.roa (hash: 2ASCUCuWedqY/SvOcJo00rP++cWKEIODdp7vE3Sk8Vs=)
                          2: LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl (hash: q0S7LvsiZ4Shr/URQ2JLkj+lEztsGxIYNuo2ftt9BUI=)
                          3: esQ4LQtwMGAVPfo5Iqwd6J1wFFg.roa (hash: Zp5wls9Z57v3c+rmph9lPmQEqF9p8BKAcLAfNlb+aO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:35:73:c9:17:33:cd:ea:40:7c:b0:c1:cc:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
        Validity
            Not Before: Feb  9 22:01:08 2026 GMT
            Not After : Feb 10 22:01:08 2026 GMT
        Subject: CN=f8e7897bd1d6362403971074010095cdb45df049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:c3:53:09:68:4b:7d:b9:91:4c:d7:a1:d5:
                    76:8b:f0:65:7f:5a:e1:e6:62:8a:52:44:4d:79:44:
                    a6:b6:33:83:bb:d3:e9:73:69:75:ba:54:ec:bb:bc:
                    37:44:23:12:79:1f:5d:28:08:83:29:cc:d2:c2:e5:
                    e4:04:68:1d:45:23:80:c5:8d:43:f1:b8:b0:5f:75:
                    cb:2a:c8:2b:7e:e1:15:e8:ff:e7:38:ae:df:4d:f5:
                    f3:74:3d:bf:56:ab:f2:a6:24:e5:2b:63:3d:a2:91:
                    5e:ec:48:08:b9:7a:e8:bc:1c:b9:34:bd:ad:fb:7e:
                    1a:ce:d9:bd:3e:55:94:b3:1d:af:44:1b:2d:38:20:
                    e4:fb:71:e5:b9:28:b6:43:31:1d:43:97:81:b8:be:
                    2e:f6:b3:be:3e:f7:05:4a:52:b1:20:78:bf:33:36:
                    71:04:51:ee:76:46:36:2d:37:42:99:11:58:10:60:
                    03:df:c7:f0:65:63:c2:52:de:7e:1c:08:2a:2a:f0:
                    2f:41:e7:a0:9d:8d:15:c5:49:29:0e:6c:37:93:2c:
                    dd:f4:de:8d:eb:5a:37:f9:cc:2c:cb:4b:3e:b2:ef:
                    8b:3a:29:06:cd:b5:d9:1a:db:05:c5:21:a7:37:0f:
                    e5:cb:55:95:7e:7e:63:34:09:31:8f:c6:69:23:8b:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:89:7B:D1:D6:36:24:03:97:10:74:01:00:95:CD:B4:5D:F0:49
            X509v3 Authority Key Identifier:
                keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:06:c4:cf:76:35:eb:4d:aa:fa:14:72:70:4d:8f:ef:67:
         03:7e:94:71:ac:72:02:37:3b:35:d3:2a:cb:8b:a4:ae:8c:ab:
         d5:a0:16:c5:20:35:2a:ff:bc:f6:98:c9:1c:42:ec:f3:1b:35:
         d2:cf:29:4f:59:68:b6:61:eb:76:d4:45:de:9d:eb:f1:49:00:
         d5:e1:38:c6:24:ba:65:17:90:b2:55:2c:6e:a1:0c:0d:30:34:
         c0:68:eb:8f:08:5f:b2:f7:70:f9:6b:ce:e4:9d:c0:26:c1:b7:
         a8:55:79:2d:63:b7:da:c4:be:e9:f5:72:b4:a6:2c:5c:0b:20:
         50:5a:22:0a:6e:74:34:0d:81:32:cd:88:6f:22:e7:91:c4:fb:
         b1:ea:9d:fa:fd:ca:a2:63:59:1d:af:f8:ec:6b:d9:4e:77:a7:
         47:f6:14:20:17:a1:17:81:25:1b:e0:e9:64:2d:86:4c:a2:79:
         08:f6:93:9b:3a:14:d2:e5:16:b4:14:bb:1b:cf:ec:08:d0:92:
         99:8f:90:4c:a7:7c:a2:ea:3b:1e:19:84:ef:24:6b:7a:19:6a:
         ae:23:44:a1:b9:3f:69:a8:23:d0:2c:42:f5:bf:81:5d:ba:a7:
         7d:c8:ed:cd:7d:3f:88:74:31:f8:c4:36:1c:d3:ce:ca:f3:6f:
         d3:9c:f6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbDVzyRczzepAfLDBzAV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTk3MjY4YTU3NTM0ZjhjZjFiNjNiNzk0ZWVmMGQ3N2M3
YjQzYTIwHhcNMjYwMjA5MjIwMTA4WhcNMjYwMjEwMjIwMTA4WjAzMTEwLwYDVQQD
EyhmOGU3ODk3YmQxZDYzNjI0MDM5NzEwNzQwMTAwOTVjZGI0NWRmMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJLDUwloS325kUzXodV2i/Blf1rh
5mKKUkRNeUSmtjODu9Ppc2l1ulTsu7w3RCMSeR9dKAiDKczSwuXkBGgdRSOAxY1D
8biwX3XLKsgrfuEV6P/nOK7fTfXzdD2/VqvypiTlK2M9opFe7EgIuXrovBy5NL2t
+34aztm9PlWUsx2vRBstOCDk+3HluSi2QzEdQ5eBuL4u9rO+PvcFSlKxIHi/MzZx
BFHudkY2LTdCmRFYEGAD38fwZWPCUt5+HAgqKvAvQeegnY0VxUkpDmw3kyzd9N6N
61o3+cwsy0s+su+LOikGzbXZGtsFxSGnNw/ly1WVfn5jNAkxj8ZpI4tyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjniXvR1jYkA5cQdAEAlc20XfBJMB8GA1UdIwQY
MBaAFC1ZcmildTT4zxtjt5Tu8Nd8e0OiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83MWI0MjgtY2U4Mi00ZTkxLWJhMDkt
NGUwNDgxZGM3ZDFjLzEvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83MWI0MjgtY2U4Mi00ZTkxLWJhMDktNGUwNDgxZGM3ZDFj
LzEvTFZseWFLVjFOUGpQRzJPM2xPN3cxM3g3UTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+oGxM92
NetNqvoUcnBNj+9nA36UcaxyAjc7NdMqy4ukroyr1aAWxSA1Kv+89pjJHELs8xs1
0s8pT1lotmHrdtRF3p3r8UkA1eE4xiS6ZReQslUsbqEMDTA0wGjrjwhfsvdw+WvO
5J3AJsG3qFV5LWO32sS+6fVytKYsXAsgUFoiCm50NA2BMs2IbyLnkcT7seqd+v3K
omNZHa/47GvZTnenR/YUIBehF4ElG+DpZC2GTKJ5CPaTmzoU0uUWtBS7G8/sCNCS
mY+QTKd8ouo7HhmE7yRrehlqriNEobk/aagj0CxC9b+BXbqnfcjtzX0/iHQx+MQ2
HNPOyvNv05z2Pw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:54 2026 by rpki-client