This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File:                     L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier:          QVMXcCyfT6luYYyp1sQIBrcQLRabCWK+EmetS2EnYc4=
Subject key identifier:   BD:50:EC:20:25:1C:93:DB:E6:3D:06:CA:49:B4:99:4A:DA:C1:04:7C
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer:       /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial:       019C42B49879E19D026DC1C61613C7E70026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:57 +0000
Files and hashes:         1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: Y4GOjLz9ntbzxPGhdISr1KkAVqT5+3Ri7VOicLcA4E8=)
                          2: UidN5UAlQ-QinMDVuU713qtde6s.roa (hash: SjCITC39fupPmxLMbA+D8zpJhx9IA929/zeseDSrizQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:98:79:e1:9d:02:6d:c1:c6:16:13:c7:e7:00:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
        Validity
            Not Before: Feb  9 14:00:57 2026 GMT
            Not After : Feb 10 14:00:57 2026 GMT
        Subject: CN=bd50ec20251c93dbe63d06ca49b4994adac1047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:be:27:78:2a:28:34:68:8d:f9:00:4f:69:
                    5f:7d:7d:22:a0:5d:60:b3:76:14:66:80:e2:8c:62:
                    ad:bd:72:79:e9:e4:82:4a:9c:6a:a6:33:40:5f:8a:
                    93:ae:a5:25:7d:f8:4c:8b:90:b2:12:6d:ca:23:d2:
                    b9:e3:f1:b9:b1:7a:9d:29:74:8e:fc:da:fc:34:34:
                    45:35:db:94:e7:6b:3f:f8:51:ea:d9:d6:84:4c:bb:
                    85:22:2d:6c:86:43:46:ec:f8:56:58:94:1d:10:0d:
                    ad:43:43:ce:4f:14:6a:5a:50:22:81:e5:29:2e:86:
                    f4:9e:e1:67:d8:af:b6:86:52:21:65:78:7d:41:e0:
                    3d:62:55:1c:43:b5:68:b4:a4:fe:28:cc:f2:e8:75:
                    50:5e:14:3a:ce:f4:eb:ea:86:55:e1:41:64:4d:ea:
                    a8:79:f0:77:70:11:6f:ea:6e:94:a0:c3:df:27:6b:
                    94:3b:bf:f8:80:49:1d:2b:98:b4:d0:d3:62:47:25:
                    44:71:9a:5a:95:64:6b:30:3c:cc:09:83:08:a5:a0:
                    6c:2f:20:11:8e:1e:2b:b7:f8:e6:3c:a2:9f:f7:71:
                    10:8e:c4:a5:b8:b4:b1:a1:8b:0a:8b:8f:bf:97:7e:
                    ea:9a:1a:96:e8:7d:80:0b:7b:d5:46:fc:89:6b:d2:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:EC:20:25:1C:93:DB:E6:3D:06:CA:49:B4:99:4A:DA:C1:04:7C
            X509v3 Authority Key Identifier:
                keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:af:2e:73:97:38:2e:98:6a:e5:e0:c9:1e:cf:a1:af:69:f2:
         bc:5c:ee:92:10:af:2f:cd:17:5f:77:f7:28:1e:22:52:8f:5a:
         de:d9:5c:52:20:30:0e:b9:c8:75:71:a6:18:67:35:45:28:0e:
         46:34:bc:4c:a8:20:72:ac:92:13:c8:42:b4:6a:70:2d:a5:bc:
         fc:82:88:f1:f4:59:3d:0f:0a:a8:21:73:aa:bd:ee:3c:70:9a:
         bb:65:c2:a3:dc:dc:ee:f2:b1:e3:eb:d6:65:8f:6a:7b:22:07:
         1c:47:bc:56:34:7d:5d:c3:8e:c7:b7:f4:66:85:5f:21:bf:98:
         33:00:81:38:44:dd:9f:bc:93:7e:ad:75:17:5f:24:e7:69:9e:
         2e:ae:03:f0:3b:78:9c:a7:b2:23:38:39:dc:aa:f9:5f:6a:1d:
         6b:83:12:7e:85:4a:15:c9:69:e9:6d:67:1f:51:f0:d1:01:63:
         a3:5b:4e:42:78:8a:66:55:0f:f9:bf:c3:cb:94:10:66:b0:5e:
         05:aa:69:af:b7:97:a0:d5:b1:b6:65:e6:f6:20:27:f8:45:a2:
         43:ed:4b:e8:85:44:f4:e9:72:a0:4e:55:26:b3:93:f2:bb:c6:
         41:3b:f1:2f:2f:62:30:b4:18:3e:5e:6f:e4:ff:40:c5:18:f8:
         ee:73:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:32 2026 by rpki-client