This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File:                     LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier:          5L+26v6H8OAeWHFhLVKpJU1OzqTZp47QueHpIYCFzfI=
Subject key identifier:   23:45:AD:7D:DD:2A:F1:0D:38:B3:AB:6F:66:62:92:BF:F7:F4:09:ED
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer:       /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial:       019C4133979E70AADDD6C16EC8B283FE6341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 07:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:25 +0000
Files and hashes:         1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: N1+o+O+j0gM9oPoyruN2xEkcKSELLFwhGUp+Fyd2BDA=)
                          2: Nl65Np2NbEnihFgj_3m0_3bzCWY.roa (hash: 7UhBMBB84iPxUUXErAiMT9ZI08Sl9FFg4+ED0ZMQtcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:97:9e:70:aa:dd:d6:c1:6e:c8:b2:83:fe:63:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
        Validity
            Not Before: Feb  9 07:00:25 2026 GMT
            Not After : Feb 10 07:00:25 2026 GMT
        Subject: CN=2345ad7ddd2af10d38b3ab6f666292bff7f409ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f2:f2:c5:f3:a4:1b:1a:11:56:61:b5:13:f8:
                    e5:62:bf:e6:51:37:0b:d2:e8:dd:4b:fa:0f:71:bb:
                    2d:01:8d:a8:74:30:89:f2:81:63:46:27:ea:0c:9a:
                    b9:a4:23:c7:4c:b4:2c:d2:b5:d0:06:25:1c:35:99:
                    b9:8b:fe:e6:d4:a5:43:ba:5a:c8:64:4b:ef:77:e2:
                    f0:16:5c:35:39:1a:2a:93:f0:fb:a0:0f:92:ab:c6:
                    cc:6a:37:36:d8:91:36:92:16:98:e6:c1:84:9e:07:
                    28:e3:ed:fd:37:2b:e5:99:83:ae:0d:69:93:31:8b:
                    26:5f:5f:b4:34:af:b8:46:58:21:f4:a1:a2:4a:13:
                    b4:49:6e:ae:f0:26:16:0b:a0:87:31:b8:be:94:f1:
                    49:bd:ee:6b:a0:52:31:f6:84:9d:18:07:b4:12:ea:
                    b4:9c:83:6e:e4:6c:15:7c:c9:ee:ed:05:bb:a7:f5:
                    91:70:9b:9e:9f:51:e5:6d:37:ba:c3:26:2e:a4:5a:
                    ee:de:8b:86:0a:fb:71:1b:bc:2e:d4:f0:af:47:77:
                    a2:d4:24:de:46:c0:12:77:5d:f9:fa:b6:3e:b7:80:
                    9b:02:b5:f9:bf:7c:8c:1e:7e:37:9a:45:5a:19:07:
                    22:55:02:1a:56:0f:94:16:80:78:5c:46:0a:d4:e6:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:45:AD:7D:DD:2A:F1:0D:38:B3:AB:6F:66:62:92:BF:F7:F4:09:ED
            X509v3 Authority Key Identifier:
                keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:1b:e3:57:e2:62:b6:a0:43:66:57:ed:64:57:d4:4b:7a:
         26:28:50:4e:4d:83:d1:7b:a1:96:69:b2:79:92:ca:a1:47:bb:
         20:41:b9:49:9f:8b:61:e7:28:9d:fc:97:9d:f0:d8:69:b5:6d:
         4d:01:65:37:be:0b:49:37:36:42:07:95:6e:a5:79:21:28:3f:
         d0:88:0b:1d:a1:6d:bf:0a:d1:2c:ba:b5:ca:a0:ea:e6:b4:48:
         f9:87:1f:ce:43:09:8d:04:86:ff:05:e6:ae:39:2c:04:38:b9:
         c2:17:c6:4a:ff:70:6a:2d:b7:11:72:9d:c9:fe:ec:39:ee:43:
         8e:83:ef:ce:e7:55:2f:97:b3:24:53:db:c3:0c:68:61:28:a4:
         46:3a:3c:d5:52:eb:53:b4:ae:dc:81:ec:ba:48:f1:7c:3e:47:
         5e:69:bc:37:c1:cc:26:b6:f6:7e:78:20:31:86:da:f2:e4:a8:
         3b:fe:d4:39:d5:2d:f0:eb:48:2c:38:c0:39:a8:57:14:f9:58:
         86:95:24:0d:d2:ef:dd:16:9c:83:58:c0:b5:50:f6:e7:c3:26:
         22:81:ff:00:29:71:1a:76:b5:c7:cf:11:f3:49:a7:46:37:cc:
         bc:d5:eb:46:da:23:e6:d9:48:c2:41:38:8a:22:21:6c:aa:11:
         91:09:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:37 2026 by rpki-client