This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
File:                     LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json)
Hash identifier:          NfsW4pwMhNLNpGLwQTylZSR8zeXF3YFhAcw+9ZfKNbk=
Subject key identifier:   7F:B2:1F:7E:B4:47:08:FB:91:80:78:16:56:96:CC:DA:7B:E0:29:32
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Certificate issuer:       /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial:       019C446BDF2C1120AA3376049EAC65AA83E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
Manifest number:          0E7C
Signing time:             Mon 09 Feb 2026 22:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:45 +0000
Files and hashes:         1: 4RZTKbN1v-K-y22tAcFXWig3lW0.roa (hash: /VQ5TaILo3ZhfCH+yi7l1JJuhoymVfNhArSLZ/BLWfc=)
                          2: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (hash: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4=)
                          3: CPRW8P-dWt3q43tk8wC_BcQDCs8.roa (hash: FS0mv+wp+q+UW726jj+JxZBQxP4OfD+roz+I1dPg1uo=)
                          4: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: UcTsSNIj+xDazwOP8H6nhjKv45+nsT2924Oj9jxjrw0=)
                          5: Rl_qinDDXLYmitpjtRByJBmFw8Q.roa (hash: FIEZwO0iYGed4rHn2e0vozi1+vIaMR5tKhvxYETa1no=)
                          6: SArRO3MQSGaWTmmk2uxpyRfjIhA.roa (hash: 2KeMVYeSLHqHO7gSfTf9qkO0W/higRj4sDuOR5LxLVE=)
                          7: SGBFgHqWXrPKqcu8kfnGkJkv920.roa (hash: 4w68C/XOmN5L2JXs1q6sk0hxyeUfPbGSQTUbmmfeGKI=)
                          8: Xx-SB8IlNsgbkMiQx4mSYmp_c3E.roa (hash: H5EmddF0UXVmW0gvQsSUA/i6ZSdl9kyVO20xUD/pd1Q=)
                          9: c0jlx2DfhOUv1wX4uYnYDf_mgec.roa (hash: Medsqu1K5XLBzaWPCRxE6D439h9wYIO/wIZhTKMOMVQ=)
                          10: n7JEFOPMbToJF6Wlw44ynHUW_nQ.roa (hash: YeLSRNCcwCED5HatZvH2oCjpqMUSo5ZkDRgue0flL4E=)
                          11: o3hc-FO3DSjODWUA0h5PqQrqrsE.roa (hash: zYC5ASRyhpDqzppyububasfvmZtPRrI+QYokr5H7A2o=)
                          12: ppD5qF2w_FZLkQjFIE6ahHI-0Vo.roa (hash: EEtkfLj3d6lQBs/XTvoe8NaYONNMjgLX1x94kWcuAKQ=)
                          13: tNW5JglowYzeXwLaOgS0Yf8zgPA.roa (hash: fs4Ze65kVG+wfhXUy+9T7N6D/TUMaczqK8frGbt5RaE=)
                          14: z-wSduJj-NlM3DwsJdstrswF4Jc.roa (hash: weGeb9i8H2JUwKvKfq49l8Oa60dqN/W4SaoC0br02/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:df:2c:11:20:aa:33:76:04:9e:ac:65:aa:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
        Validity
            Not Before: Feb  9 22:00:45 2026 GMT
            Not After : Feb 10 22:00:45 2026 GMT
        Subject: CN=7fb21f7eb44708fb918078165696ccda7be02932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:fd:92:32:f1:a0:81:88:b1:28:a4:b2:a4:
                    17:45:e1:86:30:03:87:b5:c9:0c:3e:d4:61:a0:a6:
                    f4:0e:2e:96:89:c5:81:4b:96:32:bf:84:a0:a0:bc:
                    0b:6b:3d:d9:0f:06:bd:4c:e0:d0:3d:5a:21:e9:c6:
                    bc:b1:46:12:ab:a0:9f:7e:39:51:63:53:8f:22:0f:
                    12:f5:1e:f5:a9:50:f5:03:77:9f:a2:5b:df:26:51:
                    b3:e7:b3:6e:c3:b2:3f:bc:d2:47:23:3d:a2:41:f0:
                    6d:21:d6:72:96:a6:72:20:69:8e:26:50:6d:5e:0d:
                    e4:70:e8:0b:d9:b6:3e:a0:0b:3e:f7:4a:00:2a:d8:
                    ed:02:26:42:53:73:69:26:a2:d4:50:f5:db:0f:b7:
                    8f:40:75:04:24:12:c6:ca:4c:cb:2d:d9:8b:21:08:
                    49:3b:19:a9:ef:3c:ff:34:39:42:a8:e4:c3:a6:7f:
                    1b:ae:7c:72:bf:13:be:9c:43:7d:31:24:da:d9:08:
                    9e:42:e9:1c:d6:f5:46:78:96:30:bf:b7:fd:b2:f4:
                    d1:cd:eb:ec:7a:c2:4b:d9:75:64:83:a6:e3:27:53:
                    35:25:ce:59:d5:0e:d7:74:25:ba:62:e3:31:99:a8:
                    3b:61:56:83:cb:9b:89:1d:fd:cd:3b:2e:95:d7:3c:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B2:1F:7E:B4:47:08:FB:91:80:78:16:56:96:CC:DA:7B:E0:29:32
            X509v3 Authority Key Identifier:
                keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:61:32:7a:76:90:54:53:a8:54:19:4b:bb:53:f4:5b:cd:
         87:c0:34:dc:9d:f5:c6:4f:09:b7:38:96:90:1d:51:6c:66:a8:
         2c:fb:38:1f:17:e8:cf:38:68:7c:5f:24:cc:6d:35:e6:4c:9c:
         e2:55:b2:20:a6:bd:0e:6a:93:58:72:c9:0f:26:4f:9c:48:34:
         29:ec:35:d4:d3:d5:db:04:58:3f:b8:c8:5e:57:51:28:b9:a3:
         ea:70:2a:f5:48:33:77:b5:95:07:b5:b4:d5:a7:1c:fd:fe:59:
         c7:36:72:a0:52:62:5c:4e:67:2f:8c:3c:ee:6f:69:a1:f4:44:
         41:67:98:f3:71:f7:e6:48:ce:ef:ee:b1:e9:17:0c:c5:c2:ed:
         1d:1c:a8:9d:2a:6b:48:a3:3d:99:b3:53:2d:57:db:f0:3d:31:
         3a:5a:a9:81:81:27:f8:c4:a6:e9:a0:e3:6f:c4:09:79:79:0b:
         aa:4c:ba:8c:d2:8d:37:df:85:1b:58:d5:d2:db:24:c1:35:16:
         e5:ba:3e:94:d8:f2:0f:33:46:a2:b1:a0:f6:92:49:64:3e:46:
         91:8a:48:3e:00:6b:4f:6c:70:9c:e4:fa:62:02:8a:77:d4:5c:
         00:ff:9a:23:52:82:b0:06:b2:d3:0d:1f:a5:cf:9e:31:9e:bf:
         77:2f:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:45 2026 by rpki-client