This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File:                     LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier:          1Z2lXMU/qBecbxRaqADEJ9qnYRqMjO/4x1tB+uR+gH8=
Subject key identifier:   C1:D0:4B:64:1C:98:ED:80:0A:52:37:84:27:B7:3A:61:78:70:BE:EF
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer:       /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial:       019C420FAE5564678AC3157BA4DC3A181D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number:          1268
Signing time:             Mon 09 Feb 2026 11:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:49 +0000
Files and hashes:         1: C38xz0J3nKWG69p6aEh_3L1eROo.roa (hash: hgv2Dm3n9xuUIJlnQhstdXeK7/AZFfz5gfOa9h0Ol2A=)
                          2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: exW7qKleuhKrETfAU33am0x2MrMOJ5uS3fsF6B3yWqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:ae:55:64:67:8a:c3:15:7b:a4:dc:3a:18:1d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
        Validity
            Not Before: Feb  9 11:00:49 2026 GMT
            Not After : Feb 10 11:00:49 2026 GMT
        Subject: CN=c1d04b641c98ed800a52378427b73a617870beef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:37:5b:ee:1b:bf:7d:65:44:a7:ce:5b:05:
                    77:67:25:8a:50:db:57:8c:c6:e7:8a:02:94:a3:4b:
                    e7:33:f9:21:22:5b:0d:ca:cd:9d:17:95:fb:58:60:
                    a1:a4:91:d1:d9:24:f5:d2:00:0c:11:31:b8:80:3c:
                    85:c0:ab:27:5f:f8:65:18:c6:7a:30:2c:f2:ca:8e:
                    bc:ac:47:1d:7a:16:d0:90:50:e3:58:70:81:8c:2d:
                    06:1d:68:26:23:93:47:a9:72:50:fb:cb:ea:7e:1f:
                    8f:d1:86:b1:18:d3:be:e8:8c:e3:cf:6c:0b:d4:da:
                    af:c6:08:e8:47:53:77:a8:06:8c:a9:2b:67:e1:81:
                    34:48:0d:1e:d3:8a:2f:30:fa:87:16:f2:16:31:ba:
                    40:04:dc:7e:d6:16:bd:bd:c6:08:83:77:fd:73:ce:
                    14:67:46:3f:a0:1c:a3:3c:d4:3a:5b:2a:bd:83:51:
                    34:4e:40:fc:c8:60:65:9f:5f:98:c2:4b:ac:a0:52:
                    c0:c4:1b:a8:2b:23:35:02:c3:3f:51:6d:19:78:7b:
                    57:37:b1:e5:9e:ce:f3:d3:61:fa:1f:6b:32:7f:39:
                    5f:d8:0e:16:c5:4f:3a:8d:db:d8:af:92:05:fa:d6:
                    d3:92:6f:84:3a:b0:ac:c3:e9:ae:00:14:de:eb:70:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:4B:64:1C:98:ED:80:0A:52:37:84:27:B7:3A:61:78:70:BE:EF
            X509v3 Authority Key Identifier:
                keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:4a:ea:2f:f2:ca:59:56:8f:af:09:22:52:04:3b:f9:ae:
         ee:ec:7f:16:df:0d:14:f9:ea:ed:ff:4c:53:93:4f:fc:8b:8d:
         3e:18:9a:01:55:4a:5c:3e:ec:a3:b5:a3:01:9b:c1:5e:6b:a1:
         49:7d:ad:d2:19:55:ae:1f:71:b0:33:8c:e6:b9:a0:4d:75:4d:
         d9:df:dd:cf:41:95:3c:81:ca:bf:6a:f3:07:98:b4:a5:7e:4c:
         c2:d0:4d:24:76:18:0a:ed:d2:dc:32:21:85:93:35:69:c1:20:
         04:57:19:5d:c4:e6:27:f4:22:f8:9a:98:45:be:b8:c2:c6:64:
         43:57:43:bd:5c:46:03:e1:ac:1f:e8:a1:bb:17:2a:29:bd:68:
         ca:5a:47:30:c9:c1:b3:a0:91:9b:c6:76:49:4e:dd:96:dd:4e:
         03:d4:64:ca:4e:f3:c2:66:8e:e6:8d:a1:27:e6:34:f2:d9:76:
         d7:de:27:51:d8:9a:90:18:af:53:b8:09:3a:bc:a9:41:9f:1b:
         ea:dc:df:bc:5f:a9:fa:e8:c1:12:90:5c:85:d7:3d:38:bc:bf:
         3e:66:d2:f6:d1:42:54:d7:a5:bc:9a:29:c6:d7:41:e0:64:47:
         53:44:07:e7:ab:fb:35:8e:34:7f:88:7c:63:ea:b6:9b:0e:c9:
         fa:1b:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:15 2026 by rpki-client