This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File:                     llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier:          n9jvLlMa0vQNeweh9OCPMQVZktAtdc52Wh4TPCXWIZg=
Subject key identifier:   02:1C:FF:9F:4E:3B:49:16:C0:DD:52:75:5C:E9:32:49:20:0E:A4:88
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer:       /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial:       019C41D8E8E0A367C0A73D43B192DE64B48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number:          1775
Signing time:             Mon 09 Feb 2026 10:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:00 +0000
Files and hashes:         1: 7Em6m0eOG2ORXVo2QzO-nLgQAwE.roa (hash: S5HUFhQEQs2JuXJGAn7o8orB6NiPPcNSTOFKC5UZEp4=)
                          2: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: iu2SA8r1Gma6Dgcw6zA4O6cdJGj51d/b1aiu5Evez+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e8:e0:a3:67:c0:a7:3d:43:b1:92:de:64:b4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
        Validity
            Not Before: Feb  9 10:01:00 2026 GMT
            Not After : Feb 10 10:01:00 2026 GMT
        Subject: CN=021cff9f4e3b4916c0dd52755ce93249200ea488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:e3:e3:ea:40:58:a3:29:89:61:78:60:15:
                    15:5d:2d:8a:e8:99:b1:e7:42:21:89:3c:c5:23:61:
                    3a:95:0c:81:78:29:66:cc:45:b6:61:b2:10:cc:57:
                    df:fe:c6:73:9b:8b:19:29:4a:d6:f4:71:1f:df:e4:
                    3c:e9:46:0c:68:9e:70:6f:36:c2:77:b9:3b:70:95:
                    cb:38:25:dc:5a:10:23:bc:f6:6a:df:b2:c7:9b:15:
                    1a:18:b3:c8:fb:0c:bc:09:19:13:5a:d9:33:70:ed:
                    5f:c3:95:9f:03:ac:1f:57:82:ab:89:fd:3e:6a:29:
                    a4:a8:98:77:9d:e3:6d:97:4d:6c:46:d1:8a:b5:a3:
                    92:5a:1f:a1:6c:31:c7:1c:4b:b5:7f:34:9f:26:b3:
                    b3:5f:fd:e7:d5:10:eb:21:c7:8e:1b:ef:91:26:f0:
                    c0:24:4e:b2:b1:62:2a:a3:19:94:84:70:ae:71:c7:
                    e5:94:f2:83:e8:92:2a:8e:a7:4b:bf:30:5f:a1:cd:
                    73:3c:f1:7a:ea:2b:15:34:eb:0d:a3:55:51:f2:f0:
                    ca:29:39:fc:2d:01:04:cc:3d:2b:1f:1d:90:7c:cc:
                    f2:7f:9d:6d:36:fa:f5:9c:65:96:00:79:c0:af:fd:
                    13:0e:18:8c:b7:1a:0f:fb:f3:ef:24:10:95:da:2f:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1C:FF:9F:4E:3B:49:16:C0:DD:52:75:5C:E9:32:49:20:0E:A4:88
            X509v3 Authority Key Identifier:
                keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:c9:bd:8f:9f:50:b0:49:fb:19:8a:9f:07:ec:b5:e4:b6:
         26:51:10:e1:d5:ce:dc:75:8e:0d:d7:90:20:c4:b8:7f:99:a3:
         4c:88:68:01:70:6b:93:61:cb:2a:d0:2f:86:b5:9b:b8:c2:0f:
         30:a5:4c:ee:49:7f:72:56:00:e1:f6:b5:90:ff:87:5b:0a:52:
         08:c7:4e:5a:55:7e:6c:3c:e1:cb:5e:d2:08:41:83:4b:57:35:
         51:fa:ca:5f:c0:dd:8a:d3:53:b3:3f:b6:76:2e:d3:0c:90:7a:
         44:d1:80:26:7e:95:6a:74:74:58:86:00:fe:b1:62:cf:c2:63:
         87:fe:90:54:86:f1:80:f7:43:a9:3e:e7:ca:b9:8c:9f:fc:09:
         bd:81:f4:98:1d:28:66:de:c7:08:c0:55:6c:f1:91:a9:11:97:
         f8:0e:41:a2:9f:53:5d:c4:cb:b7:e6:da:80:d8:8d:e6:40:dd:
         fe:04:8d:9d:02:b1:5a:e5:79:e8:f0:ac:82:0f:f3:db:2d:f5:
         15:e8:a9:69:05:37:14:5a:4c:a5:f0:b1:88:a8:8a:e7:cb:3e:
         c9:49:89:29:07:aa:e0:ae:fa:76:5b:91:5d:48:52:6c:b8:02:
         64:fe:4c:d0:a8:67:a2:06:ab:7b:6c:fc:c5:0e:06:18:21:b2:
         9b:46:2b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2Ojgo2fApz1DsZLeZLSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWM1YWI5YzA5MWFiM2M0NTA1MDY4YTkyZmZjYjAxOTg0
OWFhNzgwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD
EygwMjFjZmY5ZjRlM2I0OTE2YzBkZDUyNzU1Y2U5MzI0OTIwMGVhNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Pj4+pAWKMpiWF4YBUVXS2K6Jmx
50IhiTzFI2E6lQyBeClmzEW2YbIQzFff/sZzm4sZKUrW9HEf3+Q86UYMaJ5wbzbC
d7k7cJXLOCXcWhAjvPZq37LHmxUaGLPI+wy8CRkTWtkzcO1fw5WfA6wfV4Krif0+
aimkqJh3neNtl01sRtGKtaOSWh+hbDHHHEu1fzSfJrOzX/3n1RDrIceOG++RJvDA
JE6ysWIqoxmUhHCuccfllPKD6JIqjqdLvzBfoc1zPPF66isVNOsNo1VR8vDKKTn8
LQEEzD0rHx2QfMzyf51tNvr1nGWWAHnAr/0TDhiMtxoP+/PvJBCV2i/jRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIc/59OO0kWwN1SdVzpMkkgDqSIMB8GA1UdIwQY
MBaAFJZcWrnAkas8RQUGipL/ywGYSap4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjIt
MGFiNDc1ZjlhOWEzLzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjItMGFiNDc1ZjlhOWEz
LzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzXJvY+f
ULBJ+xmKnwfsteS2JlEQ4dXO3HWODdeQIMS4f5mjTIhoAXBrk2HLKtAvhrWbuMIP
MKVM7kl/clYA4fa1kP+HWwpSCMdOWlV+bDzhy17SCEGDS1c1UfrKX8DditNTsz+2
di7TDJB6RNGAJn6VanR0WIYA/rFiz8Jjh/6QVIbxgPdDqT7nyrmMn/wJvYH0mB0o
Zt7HCMBVbPGRqRGX+A5Bop9TXcTLt+bagNiN5kDd/gSNnQKxWuV56PCsgg/z2y31
FeipaQU3FFpMpfCxiKiK58s+yUmJKQeq4K76dluRXUhSbLgCZP5M0Khnogare2z8
xQ4GGCGym0Yr3w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:15 2026 by rpki-client