This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File:                     LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier:          tnuNP1btUSctXePmQoXqMS03tNOHA9Hcpz34vaBLfWI=
Subject key identifier:   AC:52:6C:8B:64:59:6A:90:55:A7:79:E4:4F:04:01:01:ED:C6:92:2B
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer:       /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial:       019C413433747A2B59BD545337DD859BE4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number:          02AE
Signing time:             Mon 09 Feb 2026 07:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:05 +0000
Files and hashes:         1: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (hash: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0=)
                          2: AH26kSMHALdMjY18ZcT8tq9G66U.roa (hash: XYLKSg2vJS9jqWZ8IveozNDr31RNvSVezeErjFL58Qo=)
                          3: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: gVdNbgXo9R340OPkD/f7ZKvdPG/K3Aq3M/bkmM/YYH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:33:74:7a:2b:59:bd:54:53:37:dd:85:9b:e4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
        Validity
            Not Before: Feb  9 07:01:05 2026 GMT
            Not After : Feb 10 07:01:05 2026 GMT
        Subject: CN=ac526c8b64596a9055a779e44f040101edc6922b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:bf:20:df:3a:63:d6:f5:19:42:7f:ad:ef:
                    60:93:ea:b1:5b:89:62:67:ca:63:f5:3f:28:29:44:
                    32:75:ca:bc:cb:22:f9:74:2b:e4:8a:5a:fa:c6:4d:
                    54:36:7f:97:6f:ab:62:33:06:9c:6c:b3:b9:df:20:
                    26:a9:e4:6e:2a:21:b3:43:7a:84:a3:0f:17:ac:11:
                    11:5b:35:1a:51:57:11:8d:24:42:32:8c:38:8f:90:
                    a1:b9:2a:b5:75:2b:21:c1:59:b1:38:53:b7:c1:ca:
                    62:7f:20:c1:96:73:84:28:cc:2e:99:06:63:09:11:
                    26:60:5f:07:5c:6d:83:45:ca:d8:e7:8e:98:60:93:
                    e0:56:f6:e4:64:fc:38:02:14:03:5d:b5:11:34:a9:
                    6f:c0:5d:9c:38:b7:64:64:24:e1:75:c9:fb:84:6f:
                    9d:8b:72:d4:7d:a3:c4:70:75:89:34:7a:17:c7:40:
                    3e:4b:56:ae:b6:16:a9:e4:7e:4f:93:b1:6f:1c:59:
                    ab:dc:cc:86:95:9f:9c:02:b2:71:9f:c2:ca:37:e9:
                    1a:21:f1:64:b5:de:33:2b:8a:f3:83:90:d4:1b:44:
                    09:ec:d1:08:41:9a:eb:72:e4:e2:99:e7:d0:b7:84:
                    c1:97:79:fc:49:8a:7e:37:d4:e6:2d:9f:b7:a8:7c:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:6C:8B:64:59:6A:90:55:A7:79:E4:4F:04:01:01:ED:C6:92:2B
            X509v3 Authority Key Identifier:
                keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:46:1f:77:f7:79:07:77:db:ee:d9:af:e9:9f:48:02:f8:
         52:42:a1:89:a2:c4:b0:a1:98:95:6f:d7:b1:e3:a0:ca:6b:e7:
         bf:5a:f9:f3:27:0b:e6:07:17:96:11:9e:50:f9:82:bb:5d:65:
         61:34:55:49:ea:cc:e6:2d:d4:e1:02:4c:94:f3:2e:f3:bd:cf:
         c6:93:2b:23:a5:9f:7b:a2:19:2d:e9:f7:17:bf:ac:c1:d1:eb:
         9c:16:bd:b6:15:ec:58:2b:8a:e8:23:ff:f3:9c:72:b0:03:a8:
         ae:0b:f8:e3:be:9d:37:61:58:14:7e:da:54:b5:74:30:3e:48:
         d3:c0:35:34:59:22:18:d8:cf:a8:68:9c:b5:97:25:aa:23:1b:
         fe:fe:cb:54:73:cf:24:09:52:58:3c:a2:89:9f:43:f4:b1:f9:
         09:4c:af:40:d3:6e:a0:b3:3e:8a:ad:77:4a:1d:db:c7:ff:ab:
         02:f9:de:39:ab:a9:51:2a:bd:5f:aa:2c:e6:1f:7c:9c:bc:15:
         ba:b0:3a:8a:7b:70:de:af:1b:fe:9a:dd:12:2d:d9:47:e9:69:
         e3:a0:58:e9:14:62:51:c0:ef:a2:49:44:b2:ac:8d:6a:c6:08:
         d2:ba:ef:79:69:90:2a:f5:51:20:6a:5b:72:d6:8e:0e:0f:a8:
         8c:9f:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:29 2026 by rpki-client