This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          z7A1DE0Oi5WZDkGJdNYjUsqRABAkxH+kLQGZdrC4pd4=
Subject key identifier:   F7:56:51:F3:1E:86:AC:60:96:32:64:5E:53:B8:72:DB:16:59:7B:D0
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       019C058CE7EDA4243EA32842466E1D72A2D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          1332
Signing time:             Wed 28 Jan 2026 17:00:46 +0000
Manifest this update:     Wed 28 Jan 2026 17:00:46 +0000
Manifest next update:     Thu 29 Jan 2026 17:00:46 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: W7HYiLqNKnSUphtPw5U9Oh8m3RRuBUGz1nJ0SWBm7Tw=)
                          2: tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa (hash: va1fblEnn3el5S1n83VncvFPz3toG5gDp0J8zilJ/yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:8c:e7:ed:a4:24:3e:a3:28:42:46:6e:1d:72:a2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Jan 28 17:00:46 2026 GMT
            Not After : Jan 29 17:00:46 2026 GMT
        Subject: CN=f75651f31e86ac609632645e53b872db16597bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:6d:f1:12:0d:4a:a8:a3:3d:5e:7d:40:2b:
                    9d:a9:99:12:f2:5f:e5:b5:78:cd:44:04:40:46:2b:
                    eb:cb:c5:32:82:4d:28:11:ff:d7:24:94:5d:6d:75:
                    4a:64:8d:43:2e:ed:de:64:8e:d8:76:12:32:2f:5c:
                    cf:2b:8a:3b:a7:d8:8f:16:3e:86:66:20:a2:2c:3b:
                    b6:6b:5a:36:c8:0d:7f:cf:92:9a:d9:8d:33:77:8e:
                    1b:d2:68:9e:0a:9c:02:38:f7:96:8a:c7:a7:eb:cf:
                    6e:f2:44:4a:a6:11:6e:60:cb:3d:88:91:38:14:34:
                    e4:f6:88:6b:75:2a:d7:60:43:5a:ca:2c:40:09:25:
                    a4:83:40:15:08:84:8b:14:13:5b:68:78:f9:29:83:
                    24:38:84:5a:f6:65:f2:0d:48:be:2a:af:e5:33:8f:
                    5c:e2:20:6d:c8:75:98:38:86:d4:93:07:d4:6b:e3:
                    83:1c:29:d0:1e:7d:2c:12:94:18:2d:fa:2b:f9:d1:
                    ef:d4:93:29:34:49:34:c7:0a:84:f5:3d:ce:c4:14:
                    c3:5c:54:50:27:2e:21:6f:f5:0f:12:7f:7d:82:c3:
                    7a:41:0c:6f:d5:85:65:c9:1d:c0:34:81:29:12:21:
                    5c:1e:57:77:1f:95:e8:a6:51:5c:d8:1f:6c:5f:42:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:56:51:F3:1E:86:AC:60:96:32:64:5E:53:B8:72:DB:16:59:7B:D0
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e5:5c:f3:b7:04:fb:03:7f:37:77:94:76:33:a3:2b:9a:13:
         79:b9:7b:d6:4d:f4:8d:e2:a2:ae:9d:bc:64:3d:9f:96:76:04:
         ee:df:6e:c4:25:d3:bd:c9:55:d0:1a:79:85:80:05:bb:f2:bc:
         87:bb:88:44:be:64:e3:09:93:bf:db:74:17:e7:47:6d:0c:a8:
         f8:25:85:83:22:bf:0f:2d:6a:be:91:9c:e6:b8:4b:b1:94:b7:
         1d:a7:0e:ba:3c:49:be:70:e2:dd:38:8e:f4:74:78:c9:3a:ea:
         3e:3d:83:95:de:93:31:64:dd:72:24:f4:19:75:e0:c7:cc:36:
         d9:f4:ca:06:e4:45:45:7b:3b:90:19:57:92:5f:dc:27:ea:50:
         5f:e5:e7:0c:dd:a8:6a:49:54:67:fc:14:f5:36:3e:d9:87:9e:
         3a:e4:20:04:81:20:bc:5b:dc:1f:4b:6b:6d:4d:a1:c5:cd:79:
         3e:81:cc:b0:1a:33:fd:e8:76:8a:31:03:75:a6:2b:63:f7:ee:
         c6:5e:7d:a2:7c:5d:3e:50:6b:89:00:72:cd:fe:a7:11:ce:ce:
         02:4c:15:1d:d4:ef:b7:ec:ca:93:90:5e:ab:39:9a:51:6a:41:
         ef:4a:f8:75:1e:c1:52:da:4d:d4:9b:8d:cd:93:0d:fd:c0:9f:
         87:e8:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 00:42:37 2026 by rpki-client