This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File:                     LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier:          FxjY7EIAhbo6lVjwyTn5SgC+rfV4nFwiCGmDOZORqi8=
Subject key identifier:   86:79:5C:52:EC:1F:79:35:EB:AC:30:4F:61:A8:5C:87:C2:2E:9D:2C
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer:       /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial:       019C42B48D913CB02072B6311B4DA6996D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 14:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:54 +0000
Files and hashes:         1: 3wuiCij5qtORMNXWWGeF1LYERZs.roa (hash: 524skBJUgutH4M3bafS4opDM/U9Zv4uQ0hTvbNYnIpA=)
                          2: 5nFIK7kRuN3JoB1eEO4H4_JNQk4.roa (hash: YqWnSp/2B+fp6RrZ2Pclvw+NGcH0NOeomRkzMXJfv2U=)
                          3: 6oUVf4YojdnKJI23FjW6Uxu5qpo.roa (hash: 6Y30jRs+1MOBeMJ5NwM5lbTcqPYPzsKJHmKP4y+KYMA=)
                          4: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (hash: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g=)
                          5: Igw79Hirn6BerFTScZqANVebbcw.roa (hash: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w=)
                          6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: K8o3fxEa/OKxQKXRuMtkpDJdyFbobrLXqFyE8D7iUM0=)
                          7: n1EKDChFOuZuWL84rj73IB-jcv8.roa (hash: Sr227BztaPfHnzMCsINngmZlpDLFQ27p1oMjIVATl88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:8d:91:3c:b0:20:72:b6:31:1b:4d:a6:99:6d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
        Validity
            Not Before: Feb  9 14:00:54 2026 GMT
            Not After : Feb 10 14:00:54 2026 GMT
        Subject: CN=86795c52ec1f7935ebac304f61a85c87c22e9d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:cc:c7:3b:ef:4a:03:fd:db:c9:cf:28:b9:
                    81:0e:ea:87:7b:3e:f8:f2:a7:b8:31:9f:8b:df:f4:
                    b2:6e:3a:69:34:e7:bc:c8:6b:c1:fb:22:33:17:96:
                    a3:07:72:ef:a0:e9:88:87:fa:c3:c5:ce:09:d2:d4:
                    ea:79:0e:1c:17:37:ac:d4:9a:4f:31:12:d6:ec:a0:
                    ea:44:f8:64:1e:63:15:ed:23:f9:e0:48:7d:2b:a2:
                    c4:ad:72:a7:98:c8:c3:07:f6:c3:82:65:b7:58:94:
                    f7:3d:58:66:0c:8f:0c:9a:4f:20:e7:d3:20:fb:ff:
                    af:23:b8:fa:72:86:94:da:07:ff:75:53:42:a5:0f:
                    6a:39:d6:87:03:0b:d8:f5:85:23:b9:d7:ba:43:33:
                    2e:41:9a:33:b4:76:a7:29:17:c0:b6:51:04:54:c3:
                    d1:f8:39:24:0d:54:98:23:2f:ba:41:c6:92:58:0b:
                    f7:b1:72:b0:ba:97:41:00:34:fa:a5:8e:17:7e:06:
                    f2:e4:f6:08:0b:36:34:83:0b:1d:22:ca:4f:62:ab:
                    1e:5b:0d:63:fe:10:d5:67:ae:eb:f5:8a:e4:62:0d:
                    16:d8:f4:fd:34:54:b1:43:dc:87:f0:ff:d1:af:2c:
                    5c:71:54:95:74:7b:8d:c4:f0:1a:8b:30:8d:c0:62:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:5C:52:EC:1F:79:35:EB:AC:30:4F:61:A8:5C:87:C2:2E:9D:2C
            X509v3 Authority Key Identifier:
                keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2e:3b:f2:61:de:36:7e:44:54:c7:fc:e1:83:bc:88:63:81:
         05:d7:06:a1:5f:b4:75:e3:59:d9:e1:03:23:ee:c7:41:8d:6b:
         fe:84:2b:fe:9b:62:4c:50:ff:7e:0c:f2:eb:6d:96:30:d5:62:
         b3:30:b7:44:70:8d:de:ce:2f:4a:69:5a:e4:c7:0a:88:20:36:
         f7:b9:93:80:10:f2:2a:27:0a:95:66:03:5f:ff:9d:14:62:a1:
         11:4e:cc:9f:b0:93:0f:e6:24:7d:84:2b:60:a4:dc:d0:00:6d:
         d5:8b:02:81:d8:2a:bc:dc:36:dd:f1:16:51:e8:c5:8b:a7:81:
         79:13:f6:b3:5a:f8:a0:86:6e:20:1b:65:6b:56:86:84:0e:89:
         1e:f9:62:38:83:be:1a:74:68:4a:b8:e2:27:da:86:cf:90:f0:
         48:c5:a8:7c:8b:74:fa:0f:5b:89:a7:97:cb:f3:53:e3:56:c4:
         b0:f7:12:75:c3:cd:b7:65:5a:13:68:e3:2e:49:95:d1:76:65:
         00:c7:14:f3:88:75:63:52:f4:9f:9b:e2:1b:e1:da:80:63:d1:
         ae:12:6a:f3:b7:66:0f:ba:15:3e:37:d9:2a:a3:e7:07:1a:8b:
         c8:04:7f:9a:4d:55:7b:60:9f:67:f1:b1:38:ce:80:e8:35:f6:
         6e:46:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:12:31 2026 by rpki-client