This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File:                     LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier:          fuibfHfksKPQpKvllXOijKRTG77U1orXXX37t+3BZQw=
Subject key identifier:   2C:84:C9:F5:A0:9F:62:25:FD:00:2B:A4:22:D6:59:F8:69:9B:64:29
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer:       /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial:       019C41A26357AFE3B437F19BB85A2833F1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number:          14AE
Signing time:             Mon 09 Feb 2026 09:01:27 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:27 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:27 +0000
Files and hashes:         1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: lsg+gNClCrgFLVuOXR7fbHTzIwM4MtiKt048I2yEdn0=)
                          2: ulHcF8o9upOt3omwt_sTVpJfwKA.roa (hash: cxld0IHdim93K+ke3CtdijW4abesqWwczehLq/YKea0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:63:57:af:e3:b4:37:f1:9b:b8:5a:28:33:f1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
        Validity
            Not Before: Feb  9 09:01:27 2026 GMT
            Not After : Feb 10 09:01:27 2026 GMT
        Subject: CN=2c84c9f5a09f6225fd002ba422d659f8699b6429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:0d:52:a4:40:c6:97:77:2b:ee:aa:4b:fa:
                    b6:d5:3a:f6:79:ae:4a:da:dd:f3:ea:e0:37:c5:19:
                    63:40:c6:fd:7e:7b:b8:54:64:0a:ab:d4:e3:69:9d:
                    91:43:b1:11:e7:1c:57:f1:52:fc:13:bd:41:24:24:
                    39:a3:69:86:c1:9a:19:4e:f9:aa:fc:f8:d7:dd:ba:
                    74:7c:2c:75:bb:b3:0d:d6:c7:6c:bc:b1:c6:26:39:
                    ae:a1:f1:2a:f5:43:21:36:15:b7:4f:35:f0:57:48:
                    de:4c:a5:35:9a:15:ad:f4:ce:2e:2a:94:80:b6:df:
                    a2:0c:18:ec:ca:99:3c:53:3e:70:d0:be:0b:e6:45:
                    b5:f6:c8:2f:32:73:37:92:8a:95:65:e4:76:a6:4c:
                    89:b5:1c:49:14:4a:ae:1b:79:4d:60:6c:56:be:58:
                    a1:a3:14:08:6c:eb:97:24:d6:c0:14:c4:6e:2c:a7:
                    09:1e:21:c7:76:50:a7:3c:46:35:b4:ce:a3:b4:d0:
                    48:99:9e:16:ed:37:fc:9b:c2:3a:fb:8a:70:78:87:
                    40:a7:c2:be:4f:8a:71:b6:54:21:47:e8:03:f0:49:
                    e2:4d:47:fb:d5:be:04:54:e1:34:fa:9d:46:94:dd:
                    18:44:b5:4f:06:56:7f:e5:2f:16:48:99:e9:6d:1e:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:84:C9:F5:A0:9F:62:25:FD:00:2B:A4:22:D6:59:F8:69:9B:64:29
            X509v3 Authority Key Identifier:
                keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:24:04:e2:eb:e5:aa:2d:bb:97:8e:6a:4b:b2:ad:66:57:67:
         08:69:cb:fa:59:a4:ee:1f:b4:d7:06:11:86:e0:70:89:e5:5b:
         04:4a:fb:dd:d6:c0:72:27:06:af:60:4d:ed:d6:8a:41:56:d4:
         d2:b4:04:f3:7a:35:37:54:8b:e8:23:c5:0a:9a:6c:b8:4e:43:
         12:08:a0:59:12:79:05:95:52:8f:71:38:63:37:f3:df:aa:9a:
         9a:5c:6e:6e:0f:10:e6:91:29:07:e5:d4:53:fb:b8:ee:41:c7:
         d7:2f:cf:ee:94:3e:01:e0:00:03:2c:bf:fe:89:e2:20:ca:44:
         7f:26:b9:ce:b5:f1:be:7a:f8:7b:50:d7:20:6a:fd:79:cf:b3:
         24:9a:0e:cb:cc:d3:ed:de:68:02:31:74:88:d9:8e:1a:7c:43:
         63:fb:f8:d0:b4:06:86:f3:9e:77:e5:bd:61:4c:e7:8b:20:38:
         f7:1a:87:aa:c3:21:95:4a:ec:70:fe:c9:21:04:ff:f0:15:ce:
         f6:15:83:36:cf:57:77:2a:ad:2a:d9:a3:3b:41:04:fd:1e:76:
         e2:dc:5a:8c:06:b6:dc:f2:f9:e5:ce:5a:f4:0b:86:57:64:76:
         3c:a6:84:8f:60:4c:6e:d0:85:29:b0:2b:b7:14:aa:2b:b7:d4:
         5c:7f:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:23 2026 by rpki-client