This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File:                     lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier:          BgTg1WFwar5VTuToIOdjd02FICn/FlVYWV+Pjatnc0M=
Subject key identifier:   A1:42:B3:D9:85:60:5B:A0:5F:D5:CC:6B:DD:9B:3B:4D:35:8F:D1:B2
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer:       /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial:       019C42B47F202A80B9E801595B6BF4F1ABCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number:          0E9D
Signing time:             Mon 09 Feb 2026 14:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:51 +0000
Files and hashes:         1: USwT2SeaguMlyEEPFKrGUCTjicc.roa (hash: fLXx8GADpNCNj3rL26EzgEHCDr9VafNfGAWI6je4Vrw=)
                          2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: 82E8M6wTCfKl0rTUDbuohqnvSIpki6ZolChhDyP+AZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:7f:20:2a:80:b9:e8:01:59:5b:6b:f4:f1:ab:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
        Validity
            Not Before: Feb  9 14:00:51 2026 GMT
            Not After : Feb 10 14:00:51 2026 GMT
        Subject: CN=a142b3d985605ba05fd5cc6bdd9b3b4d358fd1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a3:9e:5c:2f:05:0f:2d:08:6a:25:cf:be:3e:
                    7d:cb:df:10:3b:a4:bc:bc:66:62:4d:74:b9:75:d8:
                    48:83:6f:7d:24:83:30:e0:13:c3:c8:c9:10:1c:7c:
                    57:2a:0f:47:45:6a:04:0f:08:62:e9:d7:97:8b:9f:
                    f8:95:ef:18:95:b1:4b:dd:0a:2f:da:7f:3e:91:60:
                    9b:ca:1a:ac:5d:ad:6a:98:8c:17:46:d9:ce:20:53:
                    08:96:51:53:2c:17:6b:79:56:be:c2:a5:5e:10:3a:
                    f3:b7:91:c5:02:fd:2e:d0:e9:9a:8b:77:a4:d6:e3:
                    48:bf:91:65:e6:76:b5:ba:67:4d:e8:ff:00:c1:84:
                    e7:e6:4e:35:5a:6b:46:cc:88:4f:71:ca:f3:d7:b2:
                    1a:38:49:45:b3:02:48:f2:d7:49:21:8a:23:07:1a:
                    ed:03:29:8b:8f:be:e2:15:43:42:63:5f:ab:17:ad:
                    fa:de:76:83:54:08:30:f7:be:0a:0d:43:85:8a:56:
                    0f:0f:9a:eb:30:a2:7e:b2:4e:bc:0e:0f:c0:64:9f:
                    06:ba:4d:67:c5:0c:f8:38:14:55:02:2d:c2:e9:f3:
                    97:56:2c:a7:ef:a6:18:77:ea:65:3c:73:a8:ab:1f:
                    7c:e2:38:6c:d6:f6:24:86:38:89:ff:63:6c:f4:a0:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:42:B3:D9:85:60:5B:A0:5F:D5:CC:6B:DD:9B:3B:4D:35:8F:D1:B2
            X509v3 Authority Key Identifier:
                keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1a:31:ff:18:94:25:81:a4:60:a3:5c:2b:c3:e6:b0:e3:38:
         8d:2a:cf:92:f8:27:ea:ab:c3:70:2f:e2:36:8b:17:d6:50:f3:
         98:d6:cd:7e:9c:08:f8:a7:9c:25:36:de:fa:d9:4a:cc:98:9f:
         df:3a:36:c9:5d:3e:51:df:05:61:b8:42:aa:0a:89:3e:ea:0f:
         bc:07:48:f1:66:ef:ab:87:fc:c4:d3:4b:93:dd:80:4c:83:a9:
         0d:4c:5c:a2:64:0b:4f:74:df:e6:c2:48:c5:50:f1:fb:04:ca:
         0d:bb:75:fa:26:62:41:c7:70:a1:c1:f5:3e:0a:66:57:25:f1:
         98:e6:5d:b4:d3:7c:7e:46:be:59:6e:ed:a7:42:0c:54:de:ca:
         62:d7:31:07:cd:25:7c:cf:0e:05:07:39:cf:f1:11:d8:53:2c:
         74:ed:4c:df:69:e5:f3:1c:47:e6:5a:21:ce:f1:01:a8:3f:d7:
         0e:ac:c4:87:ac:0f:d0:7b:46:7a:5f:6c:1a:7f:3d:91:5b:4e:
         28:36:a4:c0:40:b4:79:b7:27:8e:d7:22:ad:7e:29:63:5e:c2:
         94:38:7b:fb:b5:96:dd:3c:f7:c9:fd:2b:11:9c:f3:88:59:96:
         f9:18:15:69:bb:28:5b:75:1c:6e:8c:37:64:ae:7c:64:96:e0:
         35:47:33:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtH8gKoC56AFZW2v08avOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0
NjAyMDYwHhcNMjYwMjA5MTQwMDUxWhcNMjYwMjEwMTQwMDUxWjAzMTEwLwYDVQQD
EyhhMTQyYjNkOTg1NjA1YmEwNWZkNWNjNmJkZDliM2I0ZDM1OGZkMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KOeXC8FDy0IaiXPvj59y98QO6S8
vGZiTXS5ddhIg299JIMw4BPDyMkQHHxXKg9HRWoEDwhi6deXi5/4le8YlbFL3Qov
2n8+kWCbyhqsXa1qmIwXRtnOIFMIllFTLBdreVa+wqVeEDrzt5HFAv0u0Omai3ek
1uNIv5Fl5na1umdN6P8AwYTn5k41WmtGzIhPccrz17IaOElFswJI8tdJIYojBxrt
AymLj77iFUNCY1+rF6363naDVAgw974KDUOFilYPD5rrMKJ+sk68Dg/AZJ8Guk1n
xQz4OBRVAi3C6fOXViyn76YYd+plPHOoqx984jhs1vYkhjiJ/2Ns9KBPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFCs9mFYFugX9XMa92bO001j9GyMB8GA1UdIwQY
MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt
MmQ4MGNiMjU1NzlhLzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh
LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRox/xiU
JYGkYKNcK8PmsOM4jSrPkvgn6qvDcC/iNosX1lDzmNbNfpwI+KecJTbe+tlKzJif
3zo2yV0+Ud8FYbhCqgqJPuoPvAdI8Wbvq4f8xNNLk92ATIOpDUxcomQLT3Tf5sJI
xVDx+wTKDbt1+iZiQcdwocH1PgpmVyXxmOZdtNN8fka+WW7tp0IMVN7KYtcxB80l
fM8OBQc5z/ER2FMsdO1M32nl8xxH5lohzvEBqD/XDqzEh6wP0HtGel9sGn89kVtO
KDakwEC0ebcnjtcirX4pY17ClDh7+7WW3Tz3yf0rEZzziFmW+RgVabsoW3Ucbow3
ZK58ZJbgNUczdA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:59 2026 by rpki-client