This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File:                     Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier:          sdAAD2uai6u1nk/7j606GWovJsW9ID2Ie6eDyWqjmRM=
Subject key identifier:   B6:AE:4E:D7:5E:7E:96:B2:FF:C5:DB:87:2A:8D:76:5D:1B:BC:74:81
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer:       /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial:       019BFD2F1DC27D3E2471F1154071D3FAE708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number:          17C0
Signing time:             Tue 27 Jan 2026 02:01:21 +0000
Manifest this update:     Tue 27 Jan 2026 02:01:21 +0000
Manifest next update:     Wed 28 Jan 2026 02:01:21 +0000
Files and hashes:         1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: eHQTXIMXgfj6aMftwPYvmHCT/FvwhnFCD9WNyZbTDYU=)
                          2: tDm7AUYKyf97YOJJKUiWr2Dgcg4.roa (hash: /UBoh/wJ/dh6DjZ66cH1C2Cr/EgD7L8aiIxXDUdGpis=)
                          3: yffg1-eaO6Srh9Uv7AmqsK2NudM.roa (hash: kUfLwWzqj96wDEHYb/yvv+ZIOEIAJHX7rxwFZQvwJsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:2f:1d:c2:7d:3e:24:71:f1:15:40:71:d3:fa:e7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
        Validity
            Not Before: Jan 27 02:01:21 2026 GMT
            Not After : Jan 28 02:01:21 2026 GMT
        Subject: CN=b6ae4ed75e7e96b2ffc5db872a8d765d1bbc7481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:94:19:cf:7b:1b:9d:9a:7d:d2:13:27:09:
                    8c:8c:32:bf:6e:cb:2b:54:3c:59:12:7b:73:a1:68:
                    10:c0:27:6b:83:92:1b:ac:e5:ed:6e:0e:08:29:6a:
                    22:93:ae:5f:8c:9e:44:07:44:8b:eb:16:59:02:13:
                    05:72:0f:fa:1b:9e:ef:4a:bf:c9:1b:5e:5a:a5:4f:
                    38:88:91:4c:80:af:41:7b:6e:ad:5c:e1:bc:0a:2a:
                    42:e5:54:6d:18:c5:a8:c8:fd:b8:4f:27:03:3f:a7:
                    3e:ce:83:3f:b6:7c:1c:ea:fd:6e:95:23:42:cf:1c:
                    d5:c3:0f:08:d6:8d:6f:0f:2f:87:ce:9e:a9:d1:46:
                    00:e6:db:99:08:45:26:46:39:66:3c:90:c3:a0:b9:
                    0b:ae:bd:d3:87:4e:c4:cf:7e:2e:30:30:56:0b:f4:
                    77:04:bd:0d:0f:7b:71:5b:b6:cf:f2:12:f4:0d:17:
                    9d:02:c2:8c:a0:07:3d:4b:3c:ef:6a:cf:81:30:f4:
                    c1:1d:52:e5:3e:6a:e9:7b:d7:8e:cf:8a:55:bf:19:
                    7a:c3:ee:fa:2a:29:59:33:70:10:f9:50:22:91:cd:
                    d1:fe:89:3d:a3:3b:33:4c:3c:a3:92:08:ba:e9:ea:
                    b8:6a:d2:46:fa:e6:05:52:9d:21:67:89:5e:ce:e2:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AE:4E:D7:5E:7E:96:B2:FF:C5:DB:87:2A:8D:76:5D:1B:BC:74:81
            X509v3 Authority Key Identifier:
                keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b2:34:13:7c:41:e9:8d:10:d7:e5:53:d3:4c:38:6b:60:41:
         9a:ed:8e:75:c4:ed:52:a6:d3:4e:f0:0c:4e:d9:37:c5:98:a9:
         87:93:ee:7b:05:38:f2:89:61:00:0a:b7:68:f9:8b:a9:d9:20:
         3c:35:5c:11:28:e2:ea:bb:f1:d5:b9:94:f5:a6:e8:e1:d8:a1:
         0b:46:4b:dd:f6:8a:55:95:1d:2b:53:8e:9e:59:d0:f5:71:d3:
         bc:18:11:1d:57:27:37:59:ed:7e:20:20:93:b5:c1:a3:43:a1:
         e7:2e:af:e5:a6:cb:01:68:25:53:44:3e:14:86:9e:62:3c:db:
         c2:a6:9e:13:9a:7b:69:4e:78:1f:4e:99:01:7d:04:55:73:05:
         71:40:12:40:92:04:f0:26:20:fd:e7:83:3b:b6:5e:f9:a0:af:
         c9:16:71:c4:dc:ac:0f:98:72:17:83:33:14:d4:f6:30:53:96:
         07:ec:fa:68:a9:bc:b2:f2:12:20:ee:ef:2b:d9:b9:7b:79:6d:
         16:af:5e:23:22:de:b5:b4:54:93:cc:b1:c5:10:03:89:a5:37:
         bc:5d:60:a5:2f:2a:77:92:a9:25:bd:95:2f:af:8e:2f:74:b0:
         b3:6b:64:9c:d2:41:15:16:a1:14:83:05:55:c4:c2:8d:70:b9:
         1d:f0:10:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv9Lx3CfT4kcfEVQHHT+ucIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjYwMTI3MDIwMTIxWhcNMjYwMTI4MDIwMTIxWjAzMTEwLwYDVQQD
EyhiNmFlNGVkNzVlN2U5NmIyZmZjNWRiODcyYThkNzY1ZDFiYmM3NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oGUGc97G52afdITJwmMjDK/bssr
VDxZEntzoWgQwCdrg5IbrOXtbg4IKWoik65fjJ5EB0SL6xZZAhMFcg/6G57vSr/J
G15apU84iJFMgK9Be26tXOG8CipC5VRtGMWoyP24TycDP6c+zoM/tnwc6v1ulSNC
zxzVww8I1o1vDy+Hzp6p0UYA5tuZCEUmRjlmPJDDoLkLrr3Th07Ez34uMDBWC/R3
BL0ND3txW7bP8hL0DRedAsKMoAc9Szzvas+BMPTBHVLlPmrpe9eOz4pVvxl6w+76
KilZM3AQ+VAikc3R/ok9ozszTDyjkgi66eq4atJG+uYFUp0hZ4lezuLzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLauTtdefpay/8XbhyqNdl0bvHSBMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7I0E3xB
6Y0Q1+VT00w4a2BBmu2OdcTtUqbTTvAMTtk3xZiph5PuewU48olhAAq3aPmLqdkg
PDVcESji6rvx1bmU9abo4dihC0ZL3faKVZUdK1OOnlnQ9XHTvBgRHVcnN1ntfiAg
k7XBo0Oh5y6v5abLAWglU0Q+FIaeYjzbwqaeE5p7aU54H06ZAX0EVXMFcUASQJIE
8CYg/eeDO7Ze+aCvyRZxxNysD5hyF4MzFNT2MFOWB+z6aKm8svISIO7vK9m5e3lt
Fq9eIyLetbRUk8yxxRADiaU3vF1gpS8qd5KpJb2VL6+OL3Sws2tknNJBFRahFIMF
VcTCjXC5HfAQRw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 11:51:30 2026 by rpki-client