This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          QJKoBd60Mk+KhOk3czj5umSei3HRis8Az8eQTDptXGg=
Subject key identifier:   7C:FF:DA:B3:2D:19:C1:68:A9:46:44:17:1E:8A:AF:C2:C6:A1:86:97
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019C4322D0DE0F79506384A45C414E646C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          02B2
Signing time:             Mon 09 Feb 2026 16:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:21 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: 336GIlMRjXIzfT10y9HZYige1mk85A/077uBFE+iIso=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:d0:de:0f:79:50:63:84:a4:5c:41:4e:64:6c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Feb  9 16:01:21 2026 GMT
            Not After : Feb 10 16:01:21 2026 GMT
        Subject: CN=7cffdab32d19c168a94644171e8aafc2c6a18697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:80:c0:e0:f5:ed:46:c4:16:f9:ec:ec:f7:
                    02:99:9e:12:08:e8:20:ac:ba:b3:1c:7f:d9:41:97:
                    01:5b:ec:8f:95:7b:67:7b:bb:97:1e:75:20:64:48:
                    2a:45:26:34:10:6c:e5:d1:ef:c4:bc:4b:13:95:fd:
                    b5:9d:1a:ed:0e:fa:ea:de:27:8a:71:c3:09:c0:9d:
                    0d:8f:1d:3b:39:30:09:c0:18:bd:3a:eb:f2:17:df:
                    a6:35:f3:43:f1:fd:69:8f:0c:ed:bd:80:6f:62:c4:
                    24:71:b1:e4:30:96:69:4e:1e:01:c7:9e:ab:bc:4f:
                    3b:b1:2b:b4:ac:97:26:3f:39:ae:54:e6:ab:ee:12:
                    38:b9:52:18:98:e0:ab:3c:a9:1e:0f:32:2c:b7:76:
                    5c:6b:5c:62:5c:ed:da:d8:44:e0:88:bd:e4:58:1b:
                    98:ae:b6:25:9d:f4:b1:7b:74:6e:90:c4:3c:98:1f:
                    d5:67:08:5d:ad:21:20:ac:2d:ed:cd:0f:bb:1d:25:
                    b2:ca:31:09:ca:af:62:72:fd:60:d5:1c:b2:b2:55:
                    4d:c8:61:e0:cd:aa:28:30:0b:52:ae:5f:9c:24:29:
                    70:b0:26:56:a4:1b:b6:f0:5b:63:b4:48:fa:ed:f9:
                    cf:40:03:7b:07:d3:72:b4:05:27:f0:8a:e0:65:be:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FF:DA:B3:2D:19:C1:68:A9:46:44:17:1E:8A:AF:C2:C6:A1:86:97
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:00:da:8e:50:70:5d:ad:16:f9:15:57:0e:02:39:41:c5:e7:
         3a:50:3f:87:f8:46:6c:e3:82:3e:38:b3:0b:7e:fc:c9:4c:e5:
         43:f9:fc:c2:bc:8c:01:50:99:8c:c2:74:17:22:6d:0e:9a:eb:
         58:be:69:e0:c9:8a:da:67:b7:8d:22:67:14:ab:ab:49:c3:d2:
         bb:a6:34:34:5d:c6:7b:bd:66:a7:2c:33:77:ae:28:73:14:36:
         83:ff:61:31:81:87:41:11:76:de:95:12:7e:df:14:b6:7a:07:
         e6:5f:11:97:f5:20:7d:06:21:c5:7c:46:64:51:ff:48:a9:a5:
         5d:e5:7c:f4:d5:34:d0:45:3e:2a:08:d0:c2:d8:84:ba:36:fc:
         2a:68:85:71:60:12:cf:bd:55:0d:6a:5c:1a:50:dd:78:d4:be:
         4f:28:89:49:2f:40:18:91:44:a3:33:cd:08:b6:aa:18:65:28:
         ea:be:02:d2:94:98:f7:ae:f5:de:4c:43:1e:c4:a4:a5:61:9c:
         99:5f:75:81:fa:05:d2:1d:89:69:59:e1:db:7e:51:f6:27:a5:
         60:7d:2d:c3:63:93:33:59:07:80:3b:af:7a:ae:e8:cd:94:0b:
         52:93:cb:9a:3f:2d:ce:5f:0d:4a:54:17:d4:43:cd:ee:74:9e:
         ae:96:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:44 2026 by rpki-client