This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          10avSq9FSuhScpdBikH2zETiT4kTdsMAe0x+0oUlosU=
Subject key identifier:   76:53:10:56:98:55:76:21:28:95:69:B5:2A:A8:54:66:B8:EF:FE:1D
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019BFBE57DA23E2E5C42B8803AADFF6644AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          0749
Signing time:             Mon 26 Jan 2026 20:01:19 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:19 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:19 +0000
Files and hashes:         1: G76pXhUALnzYF9eO4XN4eeUAIBo.roa (hash: LQJkxCE+1RXg1nRjsBoSEUXVaKDQRcUp7pEVlIPQHNg=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: Gy6adi+dGmuv4EEuzbA+keFajN4u1G5hu7LjXswA8U0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:7d:a2:3e:2e:5c:42:b8:80:3a:ad:ff:66:44:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Jan 26 20:01:19 2026 GMT
            Not After : Jan 27 20:01:19 2026 GMT
        Subject: CN=7653105698557621289569b52aa85466b8effe1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:21:75:08:ca:b5:ce:c2:83:1d:1b:28:02:
                    0e:6c:21:47:6a:35:7e:48:c1:00:89:2e:84:77:23:
                    35:ba:8c:d7:3e:78:46:97:02:88:4d:32:8b:12:43:
                    be:7e:e8:03:2b:e8:d3:0f:0c:a5:06:45:6d:0a:d8:
                    a9:a8:a2:94:c0:0b:1d:c1:1d:38:60:f7:0d:6c:1a:
                    87:46:7a:ab:47:76:20:57:47:d1:7f:c7:50:92:1c:
                    9f:7e:bc:93:6e:71:c1:74:9e:63:22:c8:9e:08:b3:
                    f8:60:ee:b4:18:fb:ae:bd:75:93:6d:99:1e:bf:cf:
                    0b:af:9b:e3:07:43:cd:4b:60:37:0c:74:ba:8d:5b:
                    91:7e:90:1b:5a:4a:b6:d0:fc:9b:6c:cf:fe:25:77:
                    df:b7:bf:4b:23:e9:f0:bd:d8:72:20:1a:8a:80:27:
                    e6:4d:5c:01:32:e2:65:29:43:37:03:8a:f6:96:3a:
                    91:38:42:e7:3d:44:71:f6:9a:df:d7:7d:89:f1:a4:
                    05:8e:d0:8d:da:e4:ee:b2:81:17:5a:da:dd:82:7b:
                    9a:1d:19:d6:39:1c:fc:d9:3c:56:f7:a9:94:25:82:
                    91:eb:7c:45:2a:73:b4:49:2a:dd:1d:74:1e:d1:59:
                    f0:b0:d7:2a:48:dd:89:fa:74:e2:f8:10:7c:f8:ca:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:10:56:98:55:76:21:28:95:69:B5:2A:A8:54:66:B8:EF:FE:1D
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:3e:86:1e:83:d8:a5:d8:0b:5c:2f:97:14:f2:b3:5b:cd:
         5e:8a:ab:7d:21:de:5c:3d:54:55:d7:a0:01:a4:00:9e:0d:87:
         d1:38:7a:10:fc:6c:71:a8:97:3d:90:1e:14:4e:33:d5:ed:42:
         3b:a7:13:7b:98:38:b8:9b:04:64:36:a5:7a:ce:fa:91:0a:c3:
         8a:0f:79:17:0d:73:93:55:f3:a1:bc:fc:22:07:75:e5:a8:75:
         be:02:48:2f:b6:ee:cb:b6:74:46:c7:39:ac:d7:51:4f:aa:6f:
         ef:22:e9:ce:27:08:b6:5b:64:57:c8:ee:ff:f8:c3:9e:46:51:
         43:91:0f:18:9e:20:1f:b5:97:b2:ce:4c:6f:4a:7c:45:a5:8b:
         c0:de:4c:6e:50:4d:54:ff:ae:72:af:4a:24:9a:e5:2c:a3:b9:
         5a:c5:9e:13:21:be:6a:54:c5:af:71:da:8b:44:bf:4e:ee:cd:
         58:fd:a7:54:cb:a8:88:44:6e:d3:8a:48:a3:fb:1d:ec:bc:5f:
         0e:f2:91:04:44:32:b7:2c:af:6e:14:f9:53:f1:52:49:43:10:
         8d:81:0b:25:e9:da:b1:42:fc:63:04:fe:eb:ad:ec:64:9d:4d:
         d7:83:a3:42:32:3c:96:aa:5c:7b:52:04:ee:0f:5a:75:b3:fb:
         08:67:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:18:38 2026 by rpki-client