This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File:                     lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier:          AbCa4HkOIzqzkBoHOc/6CEg5FWq9GecOpSPHbCCesnY=
Subject key identifier:   74:7B:93:C3:9D:62:49:A2:88:F7:EB:15:A2:D7:16:EF:F9:BD:67:71
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer:       /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial:       019C427D2074A88661EB76FD9258E751740D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number:          1354
Signing time:             Mon 09 Feb 2026 13:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:22 +0000
Files and hashes:         1: 4cyxgKfHx73cxANXfCDuCGGKNgI.roa (hash: JTW79OnrfXB/3TRgMkZzzLj69/ILo3f756ILXg43zmg=)
                          2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: K+tYANecy7rmsOLeEe7g62f4f/ifFT1DMY6kF0CLAH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:20:74:a8:86:61:eb:76:fd:92:58:e7:51:74:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
        Validity
            Not Before: Feb  9 13:00:22 2026 GMT
            Not After : Feb 10 13:00:22 2026 GMT
        Subject: CN=747b93c39d6249a288f7eb15a2d716eff9bd6771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:29:b8:f6:1b:01:d6:cb:20:bc:90:a8:d4:
                    95:72:b5:f2:6c:9d:9e:52:2e:a8:71:d4:02:ba:63:
                    cf:d8:65:25:7c:5f:43:70:39:94:82:f0:67:35:f2:
                    7c:29:6f:d2:e4:46:04:66:6a:59:92:c8:05:ba:bf:
                    a3:c8:cc:ec:48:e8:2e:55:47:e6:85:3e:01:ea:a8:
                    a8:af:fa:e9:b7:e4:47:16:8b:32:0c:30:8b:63:02:
                    28:ff:1a:4a:2f:38:40:e8:aa:d2:35:37:cd:87:04:
                    ec:3f:e8:06:5a:3a:79:ff:b2:eb:e0:cf:69:9e:56:
                    f2:c6:c8:b2:24:79:66:05:fe:f6:20:b1:18:3e:82:
                    c9:7c:eb:26:66:31:9d:b2:a9:08:10:47:b9:53:1b:
                    81:3c:7b:f4:8a:19:75:34:3d:9b:4c:17:38:18:1d:
                    2d:b8:48:cb:3e:ca:44:87:4d:d7:3d:91:8b:49:f7:
                    f2:4d:08:c1:3f:4f:57:0d:b3:a0:8b:0a:fd:9a:ac:
                    32:30:a9:ba:1b:39:d7:fd:8d:41:f2:52:3c:0d:8d:
                    22:6c:24:c7:40:89:1b:7e:48:25:4c:c0:6d:9f:12:
                    53:3d:52:a5:6e:71:11:73:c5:aa:03:10:46:e8:ee:
                    31:55:01:f8:5c:fa:5e:9d:36:0f:1e:f8:0c:b5:a6:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7B:93:C3:9D:62:49:A2:88:F7:EB:15:A2:D7:16:EF:F9:BD:67:71
            X509v3 Authority Key Identifier:
                keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9d:a2:c5:77:55:4c:72:60:b1:21:18:0a:ea:65:05:70:08:
         b7:b6:0d:e8:d7:1e:36:27:b1:da:bd:36:8c:86:b0:13:a9:e5:
         21:f4:5a:4c:c4:cf:e6:77:d7:04:aa:af:a9:27:73:75:aa:73:
         a1:51:f3:1c:c1:de:d3:73:62:11:e3:c3:22:0b:66:8a:be:ed:
         35:0a:00:f0:a8:ab:e2:3c:26:2d:cf:34:ec:18:f5:00:c8:ff:
         54:d0:14:2c:21:62:ab:6b:f4:4f:61:c5:6b:de:ea:cb:b7:38:
         d8:1a:cd:33:29:4f:7e:54:d7:ee:b5:66:ee:86:13:25:c4:0c:
         7f:73:aa:f7:ef:6a:9b:8a:8d:32:06:85:91:e8:9e:3b:31:60:
         3a:d0:7e:cc:43:21:7f:84:be:62:2b:dc:3c:75:d5:98:ae:1f:
         bf:43:1d:07:c8:06:72:24:ec:a9:e1:c3:db:cc:f1:bf:73:8b:
         1c:40:b3:1e:40:4b:41:e6:a0:8c:50:89:67:0b:24:e1:35:6b:
         d6:d0:76:db:01:06:cf:b8:7b:29:16:dc:32:65:9a:42:d1:37:
         8b:c1:08:9b:34:f9:21:28:b4:94:2f:5b:78:2e:5e:cc:ba:dc:
         28:7f:ba:60:f3:ba:a9:78:ec:34:57:31:44:c7:2d:6d:e8:39:
         c0:c4:f2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfSB0qIZh63b9kljnUXQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz
NWI5ODQwHhcNMjYwMjA5MTMwMDIyWhcNMjYwMjEwMTMwMDIyWjAzMTEwLwYDVQQD
Eyg3NDdiOTNjMzlkNjI0OWEyODhmN2ViMTVhMmQ3MTZlZmY5YmQ2NzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukApuPYbAdbLILyQqNSVcrXybJ2e
Ui6ocdQCumPP2GUlfF9DcDmUgvBnNfJ8KW/S5EYEZmpZksgFur+jyMzsSOguVUfm
hT4B6qior/rpt+RHFosyDDCLYwIo/xpKLzhA6KrSNTfNhwTsP+gGWjp5/7Lr4M9p
nlbyxsiyJHlmBf72ILEYPoLJfOsmZjGdsqkIEEe5UxuBPHv0ihl1ND2bTBc4GB0t
uEjLPspEh03XPZGLSffyTQjBP09XDbOgiwr9mqwyMKm6GznX/Y1B8lI8DY0ibCTH
QIkbfkglTMBtnxJTPVKlbnERc8WqAxBG6O4xVQH4XPpenTYPHvgMtaa6EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR7k8OdYkmiiPfrFaLXFu/5vWdxMB8GA1UdIwQY
MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt
MjhjMjJhYmYwOGQwLzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw
LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALp2ixXdV
THJgsSEYCuplBXAIt7YN6NceNiex2r02jIawE6nlIfRaTMTP5nfXBKqvqSdzdapz
oVHzHMHe03NiEePDIgtmir7tNQoA8Kir4jwmLc807Bj1AMj/VNAULCFiq2v0T2HF
a97qy7c42BrNMylPflTX7rVm7oYTJcQMf3Oq9+9qm4qNMgaFkeieOzFgOtB+zEMh
f4S+YivcPHXVmK4fv0MdB8gGciTsqeHD28zxv3OLHECzHkBLQeagjFCJZwsk4TVr
1tB22wEGz7h7KRbcMmWaQtE3i8EImzT5ISi0lC9beC5ezLrcKH+6YPO6qXjsNFcx
RMctbeg5wMTyZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:15 2026 by rpki-client