This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File:                     LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier:          ZnKXL8Hrfv1iVj/UCgkYOjJcAVfexm/B4SDUzQgKers=
Subject key identifier:   61:93:D1:65:7E:E5:27:2F:64:35:4A:03:C2:98:FD:AA:67:BA:77:D6
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer:       /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial:       019C427D621059CE4828E1DCE79D21D8070B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number:          0F8C
Signing time:             Mon 09 Feb 2026 13:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:39 +0000
Files and hashes:         1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: FULHEyXHD8daBK6KRjwQCOpMohNFNogqw7lmldc++bI=)
                          2: e_3edax3nVApnXX6Ql-HaBUFYsk.roa (hash: plfv9lLAOWXkEtBe+nkrBg1kl1yDXbUCwGhl2Bs8lcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:62:10:59:ce:48:28:e1:dc:e7:9d:21:d8:07:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
        Validity
            Not Before: Feb  9 13:00:39 2026 GMT
            Not After : Feb 10 13:00:39 2026 GMT
        Subject: CN=6193d1657ee5272f64354a03c298fdaa67ba77d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:39:32:13:d0:d8:b0:4a:9c:81:4f:89:73:
                    b3:d0:70:72:3e:0f:6f:44:0b:31:e0:f1:a1:b1:76:
                    3c:db:c4:2d:8f:20:93:bb:40:33:b7:02:67:dd:11:
                    0f:dd:4e:28:85:9f:2d:3b:47:be:22:83:0b:fa:fc:
                    ca:c3:e5:a1:84:1a:73:87:b5:d4:1e:e2:aa:21:fc:
                    5c:0a:14:b8:60:d2:b7:a9:8b:e1:f6:1b:49:59:a8:
                    5e:19:49:e0:b2:61:13:b5:62:3e:b2:13:0a:d5:30:
                    5d:be:db:20:8c:79:8e:87:3e:ce:f7:92:af:4c:e6:
                    69:0c:71:91:fb:e8:8a:68:27:ce:02:29:ea:26:ca:
                    ca:24:c6:f0:3c:0d:a6:d6:fe:ad:21:df:db:53:d1:
                    77:81:57:d7:64:da:f4:9c:43:4a:e4:b8:b1:5f:a5:
                    44:e2:73:f2:5b:c9:e8:86:a8:6e:85:9d:33:b2:0a:
                    b8:4e:f4:37:58:75:03:1a:63:2f:81:9e:eb:9a:94:
                    24:03:a6:c4:09:7d:28:7b:f2:b4:0b:da:64:af:d9:
                    ae:32:16:e6:03:a4:18:b5:1c:1a:bf:7c:7f:29:f2:
                    f2:b3:ae:77:d4:5d:c5:35:c3:be:c7:21:37:10:77:
                    86:65:1c:92:d7:43:2e:fc:55:2b:6a:b6:7d:dd:b4:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:D1:65:7E:E5:27:2F:64:35:4A:03:C2:98:FD:AA:67:BA:77:D6
            X509v3 Authority Key Identifier:
                keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:00:c9:72:51:81:18:48:94:07:fc:59:eb:e9:c1:15:b3:
         de:21:51:0e:0e:fe:03:57:2b:14:68:15:d5:c0:5a:5e:f0:04:
         e0:15:cc:c1:2e:e2:14:23:52:cf:56:cb:6c:02:89:28:4c:db:
         18:d0:aa:6c:e5:6c:c3:63:4b:d2:8b:db:55:a3:d1:6b:c9:a4:
         9c:ef:cd:3e:0a:aa:34:75:b4:6e:16:c1:07:12:29:64:5b:cf:
         21:ec:38:8e:45:2f:2f:0c:aa:bf:7a:e5:57:2d:fb:52:8c:90:
         ab:5f:33:25:3f:c7:75:dc:a7:92:e0:83:cb:3b:0a:5d:fe:56:
         a8:c7:c1:23:9d:65:6c:a0:97:0d:33:cb:fc:07:dc:1a:10:9f:
         bc:91:43:b5:da:25:00:0a:28:29:c2:b8:69:58:66:3b:ae:36:
         84:25:6b:04:e2:9b:95:e8:5d:f0:d7:5a:21:ec:1a:01:5c:0d:
         23:47:98:9e:dd:24:4b:b2:cd:92:bf:0b:18:70:f7:cf:28:5b:
         9f:94:1b:d3:54:5b:1a:6d:e5:fe:50:7f:81:98:e3:eb:21:d0:
         5c:a0:22:2f:8a:06:ec:f4:66:0a:74:a9:92:e0:6b:79:b5:87:
         f0:43:8d:77:f5:da:9a:1a:03:67:91:b2:e2:af:d1:d8:46:32:
         20:39:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:48 2026 by rpki-client