This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          UwrsCOQo3XtWyQlp+D8pXVMkRx8bQPguoXkIDOWlYys=
Subject key identifier:   EB:F7:8C:0C:95:9E:7F:F8:3E:B0:24:93:57:50:FD:21:8C:92:6E:14
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       019C1C154DD13B0CF43D9D2CD6BE7D000D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          17FA
Signing time:             Mon 02 Feb 2026 02:01:23 +0000
Manifest this update:     Mon 02 Feb 2026 02:01:23 +0000
Manifest next update:     Tue 03 Feb 2026 02:01:23 +0000
Files and hashes:         1: 6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (hash: 93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=)
                          2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
                          3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: fB7tK/xl+RalEAFLtZPId6hqiA+Fxhdb5Gp++0YZuBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:15:4d:d1:3b:0c:f4:3d:9d:2c:d6:be:7d:00:0d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Feb  2 02:01:23 2026 GMT
            Not After : Feb  3 02:01:23 2026 GMT
        Subject: CN=ebf78c0c959e7ff83eb024935750fd218c926e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:8c:02:fe:fb:69:70:53:fc:bd:26:cd:40:
                    d3:ac:7e:0d:ef:8d:91:03:9c:d0:82:f8:83:2a:b9:
                    35:8f:48:e8:41:82:bb:29:09:61:2f:3e:0d:69:59:
                    3f:d7:d4:9d:bc:cc:b3:c7:e5:9a:c6:90:54:55:c4:
                    04:c1:91:44:a6:2f:d4:aa:d1:0d:dc:ac:46:28:9a:
                    0e:78:13:90:48:54:ea:ea:9e:ff:b5:38:a3:bc:ba:
                    b6:c2:58:d4:0e:d7:19:b1:f7:9c:e2:81:c5:a5:29:
                    a9:d6:06:5e:4e:e5:4a:af:ad:55:3f:85:3a:52:1f:
                    be:81:fd:a5:65:d5:a5:a8:16:ec:50:6f:ec:b9:46:
                    63:eb:fd:df:03:d4:68:d3:19:68:85:9c:fd:4c:c8:
                    b8:40:3a:09:84:a4:52:3a:dc:3d:e5:59:97:b3:96:
                    6e:18:83:fd:bc:b8:e2:07:a6:86:7d:28:70:39:24:
                    a7:df:87:2e:e0:7a:6e:a2:b4:26:6d:1a:0b:1b:41:
                    e8:cc:3e:b7:87:8a:1f:e1:2f:7c:47:f1:c5:42:c6:
                    4e:90:8e:9b:58:10:ee:0d:fa:ae:48:d5:bc:f8:67:
                    34:0c:f0:2b:bb:bd:d5:27:80:e7:69:dc:d2:14:b4:
                    50:48:5c:2b:b6:f3:2f:af:0d:95:ee:18:ab:e7:f0:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:8C:0C:95:9E:7F:F8:3E:B0:24:93:57:50:FD:21:8C:92:6E:14
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:d1:87:02:d1:90:41:7e:28:b6:9f:f6:5f:d1:8e:2d:5e:
         87:24:3d:bb:dd:37:ef:03:07:b4:66:ea:51:0f:9b:66:aa:26:
         c7:79:b0:44:11:69:90:ab:34:f6:27:a3:13:44:69:06:74:7f:
         09:18:f8:17:c9:71:25:30:54:bf:3c:8f:32:d6:fc:4e:99:f1:
         7d:e3:b8:f6:c9:20:a1:40:b0:b1:ab:bc:11:cd:42:99:f0:16:
         52:ed:40:a0:e8:4a:f3:43:d9:bb:b6:fd:28:85:84:d7:57:12:
         71:be:05:d1:d2:69:13:e6:9d:d0:e1:4b:7b:fc:bc:3e:f0:1b:
         32:34:2f:02:66:ed:be:7c:3c:2b:a7:da:9f:78:a6:4f:8f:e4:
         b2:c4:30:50:65:b3:a6:13:bc:f8:bc:28:fe:a7:e0:03:ba:71:
         b0:58:58:bf:5b:75:39:71:9d:8b:5c:be:c4:f3:1e:e4:ae:94:
         92:74:da:15:04:f1:54:31:b2:ab:b5:db:ff:50:40:91:ee:d4:
         c8:6c:76:ab:62:07:ef:0c:65:d3:94:da:fb:1d:ac:b7:b9:dd:
         2d:f5:4a:97:d4:23:aa:bd:42:a2:c5:bf:2c:63:4c:7e:b7:4c:
         71:fa:d2:cc:3d:b3:dc:c8:79:89:70:e1:e0:79:fa:a7:ac:41:
         55:a5:56:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcFU3ROwz0PZ0s1r59AA2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjYwMjAyMDIwMTIzWhcNMjYwMjAzMDIwMTIzWjAzMTEwLwYDVQQD
EyhlYmY3OGMwYzk1OWU3ZmY4M2ViMDI0OTM1NzUwZmQyMThjOTI2ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgqMAv77aXBT/L0mzUDTrH4N742R
A5zQgviDKrk1j0joQYK7KQlhLz4NaVk/19SdvMyzx+WaxpBUVcQEwZFEpi/UqtEN
3KxGKJoOeBOQSFTq6p7/tTijvLq2wljUDtcZsfec4oHFpSmp1gZeTuVKr61VP4U6
Uh++gf2lZdWlqBbsUG/suUZj6/3fA9Ro0xlohZz9TMi4QDoJhKRSOtw95VmXs5Zu
GIP9vLjiB6aGfShwOSSn34cu4HpuorQmbRoLG0HozD63h4of4S98R/HFQsZOkI6b
WBDuDfquSNW8+Gc0DPAru73VJ4DnadzSFLRQSFwrtvMvrw2V7hir5/CFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv3jAyVnn/4PrAkk1dQ/SGMkm4UMB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkDRhwLR
kEF+KLaf9l/Rji1ehyQ9u9037wMHtGbqUQ+bZqomx3mwRBFpkKs09iejE0RpBnR/
CRj4F8lxJTBUvzyPMtb8TpnxfeO49skgoUCwsau8Ec1CmfAWUu1AoOhK80PZu7b9
KIWE11cScb4F0dJpE+ad0OFLe/y8PvAbMjQvAmbtvnw8K6fan3imT4/kssQwUGWz
phO8+Lwo/qfgA7pxsFhYv1t1OXGdi1y+xPMe5K6UknTaFQTxVDGyq7Xb/1BAke7U
yGx2q2IH7wxl05Ta+x2st7ndLfVKl9Qjqr1CosW/LGNMfrdMcfrSzD2z3Mh5iXDh
4Hn6p6xBVaVWDw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:18 2026 by rpki-client