This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File:                     jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier:          nVU9GteWu/boIQAKSCCGbBFrguQsFixqklTnd1laBi0=
Subject key identifier:   07:BB:63:5E:68:78:DA:9E:6F:50:CF:E2:75:12:0A:2B:BD:81:BD:B7
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019C4246B33CB8646AC42015CFC395307143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number:          037D
Signing time:             Mon 09 Feb 2026 12:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:55 +0000
Files and hashes:         1: CL722J7xYfTmivJofsZgMUzQplk.roa (hash: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=)
                          2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: v1hdV1OGC456Ai+o5AOvJTs0uS+THwF6YrfFHCXOSUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b3:3c:b8:64:6a:c4:20:15:cf:c3:95:30:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Feb  9 12:00:55 2026 GMT
            Not After : Feb 10 12:00:55 2026 GMT
        Subject: CN=07bb635e6878da9e6f50cfe275120a2bbd81bdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:ba:8c:8f:9c:7e:0f:7b:56:fa:e0:e6:cd:
                    e8:b5:36:e2:7a:fc:0b:7c:4b:0a:43:c9:5b:d2:4d:
                    c7:97:5c:96:9f:3e:78:f8:98:79:3b:d4:83:5c:ae:
                    cf:0e:2a:6e:04:c0:5e:f6:8a:2d:35:47:76:fb:d0:
                    6f:1c:49:bd:32:8d:8d:cd:41:d4:5e:e3:fe:12:9d:
                    4f:5f:fb:14:e3:5e:fd:27:93:a9:ec:69:e1:d0:de:
                    16:7a:2a:0e:5f:53:04:b6:04:63:22:84:e9:6d:68:
                    7b:bd:94:e0:26:b3:2b:9a:db:0b:f3:cd:93:34:4a:
                    6e:b9:72:fa:3f:bc:ca:67:31:13:6f:d4:8b:57:66:
                    16:f2:93:d4:a9:ba:34:2b:ae:44:d0:b5:bc:5c:52:
                    81:8b:db:9a:05:99:06:0a:94:99:1a:20:22:91:13:
                    06:73:5c:13:6a:0c:bf:79:bb:2f:bd:95:a6:c5:b5:
                    f8:4d:bf:52:7d:c6:3b:69:df:c8:3d:0b:db:4e:6a:
                    5e:0d:5d:3b:f5:04:37:61:7c:60:0b:f0:9a:4c:90:
                    26:0e:53:de:0a:67:ac:2a:c2:f4:e5:98:25:21:f1:
                    04:df:66:28:38:51:b5:08:e4:7a:e0:e6:2d:60:c1:
                    5f:15:2f:82:45:ad:b3:ad:46:9a:3c:8c:17:b6:24:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BB:63:5E:68:78:DA:9E:6F:50:CF:E2:75:12:0A:2B:BD:81:BD:B7
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:a5:9c:3f:d5:bd:0e:16:85:fa:d4:0e:55:8e:39:98:5e:
         ef:81:46:ba:9f:3b:2d:f7:ea:2e:24:7e:90:2e:33:f9:fc:ec:
         4d:fe:2e:71:af:10:2f:44:fb:57:2d:9f:c7:7f:f9:aa:a9:57:
         af:60:77:a0:7b:94:e4:fd:51:01:c1:2e:f2:86:2d:71:e7:56:
         bd:7e:f3:07:a2:fb:01:d4:f7:22:0d:d8:91:44:83:5f:e2:e4:
         08:cb:a2:8c:dd:0e:02:58:e2:45:95:c9:02:5f:bd:4c:03:db:
         b6:b5:80:66:d5:c4:1a:e1:37:95:c2:64:d4:7c:fd:14:8b:e3:
         79:1f:77:c5:83:3a:0c:62:b5:b3:b5:e6:eb:68:74:7a:54:b5:
         d5:37:bf:00:a0:13:da:08:02:ef:ba:d8:da:7e:0e:57:32:03:
         b8:d2:ea:e9:67:cb:3c:ee:1c:c1:c9:3b:80:25:6d:a5:5c:63:
         51:60:d0:7e:23:4e:04:9d:06:ab:dd:20:12:d9:d0:9b:e6:2e:
         42:9b:79:15:d2:0c:c2:a3:da:ab:3c:4f:d1:6a:94:0d:33:40:
         76:b2:2b:d5:c6:6d:b2:eb:09:d7:41:e3:18:d2:11:76:80:f4:
         f2:b5:2f:cc:52:4e:40:90:bd:b3:3d:a8:09:94:61:31:ac:ac:
         ad:b2:ea:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrM8uGRqxCAVz8OVMHFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTM0YzBjMTgyYzQzODM3ZjJjMmJkNGVkY2IwYjhiM2Fi
ZTk2ZTkwHhcNMjYwMjA5MTIwMDU1WhcNMjYwMjEwMTIwMDU1WjAzMTEwLwYDVQQD
EygwN2JiNjM1ZTY4NzhkYTllNmY1MGNmZTI3NTEyMGEyYmJkODFiZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdC6jI+cfg97Vvrg5s3otTbievwL
fEsKQ8lb0k3Hl1yWnz54+Jh5O9SDXK7PDipuBMBe9ootNUd2+9BvHEm9Mo2NzUHU
XuP+Ep1PX/sU4179J5Op7Gnh0N4WeioOX1MEtgRjIoTpbWh7vZTgJrMrmtsL882T
NEpuuXL6P7zKZzETb9SLV2YW8pPUqbo0K65E0LW8XFKBi9uaBZkGCpSZGiAikRMG
c1wTagy/ebsvvZWmxbX4Tb9SfcY7ad/IPQvbTmpeDV079QQ3YXxgC/CaTJAmDlPe
CmesKsL05ZglIfEE32YoOFG1COR64OYtYMFfFS+CRa2zrUaaPIwXtiQs0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe7Y15oeNqeb1DP4nUSCiu9gb23MB8GA1UdIwQY
MBaAFI5TTAwYLEODfywr1O3LC4s6vpbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2It
OTg1NDc2YzU1ZTQzLzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2ItOTg1NDc2YzU1ZTQz
LzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/qlnD/V
vQ4WhfrUDlWOOZhe74FGup87LffqLiR+kC4z+fzsTf4uca8QL0T7Vy2fx3/5qqlX
r2B3oHuU5P1RAcEu8oYtcedWvX7zB6L7AdT3Ig3YkUSDX+LkCMuijN0OAljiRZXJ
Al+9TAPbtrWAZtXEGuE3lcJk1Hz9FIvjeR93xYM6DGK1s7Xm62h0elS11Te/AKAT
2ggC77rY2n4OVzIDuNLq6WfLPO4cwck7gCVtpVxjUWDQfiNOBJ0Gq90gEtnQm+Yu
Qpt5FdIMwqPaqzxP0WqUDTNAdrIr1cZtsusJ10HjGNIRdoD08rUvzFJOQJC9sz2o
CZRhMaysrbLqyQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:22 2026 by rpki-client