This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File:                     lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier:          17O1rBe8GY3BLX41OUevJgB3P0IbpzUhjxXg7V9P39o=
Subject key identifier:   A2:ED:BB:A7:46:83:63:7F:DB:6E:AD:E9:74:5D:EE:78:A3:55:FD:01
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer:       /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial:       019C43FE0D6257158FB9DFFB778191D32D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 20:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:48 +0000
Files and hashes:         1: ElmE07kq9LxUDEmmTyOo1MIpVtU.roa (hash: IMhS3Hg31zsSt4C+dpnb7kVneJ7jUTvLYNSo6j8gQwI=)
                          2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: NAfyNCeXLOsgdsQecMwfwWczL0jjYtnPiE5S5SUrItY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:0d:62:57:15:8f:b9:df:fb:77:81:91:d3:2d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
        Validity
            Not Before: Feb  9 20:00:48 2026 GMT
            Not After : Feb 10 20:00:48 2026 GMT
        Subject: CN=a2edbba74683637fdb6eade9745dee78a355fd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:c2:9c:a2:c5:97:85:30:15:5b:6f:2b:2f:
                    4c:9a:09:db:56:78:a9:ea:16:2a:87:67:77:89:b0:
                    97:c5:75:37:f1:51:2d:d5:2b:7f:03:c7:59:23:30:
                    43:ab:a8:38:a6:07:20:98:42:5b:ec:d7:bc:19:cd:
                    99:6f:af:d1:0a:fa:2a:9a:f3:75:a7:e5:2b:9f:75:
                    e2:d1:82:28:5d:c0:2c:c5:c6:1e:8a:08:c5:23:1b:
                    bf:f4:01:fc:4a:70:7e:bd:53:0c:2a:3c:64:6b:ac:
                    c5:24:91:25:df:6a:ca:ca:66:4f:5d:d6:5d:8e:28:
                    72:25:90:eb:71:74:7e:4c:37:b7:a9:38:8c:d8:28:
                    d9:34:b5:43:2f:d7:76:f3:5a:96:25:51:31:e9:99:
                    4b:1a:d4:66:2e:18:b0:1e:b3:2d:36:34:58:8e:f8:
                    a7:ac:13:e9:2f:8c:57:c2:95:1c:3f:2d:fa:45:16:
                    d9:a6:8b:e4:ca:38:5c:92:9c:0d:71:91:30:9c:62:
                    7c:59:c1:9f:0e:86:ef:9b:db:2f:d0:c6:ac:a4:f6:
                    26:fc:8b:2b:f2:7e:7f:f0:99:bb:fb:a5:55:66:f9:
                    0f:0b:c1:bb:db:80:3d:bf:47:6b:c7:c8:1b:b7:8a:
                    79:3a:c2:91:fc:98:bc:1d:d6:fe:56:02:be:94:88:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:BB:A7:46:83:63:7F:DB:6E:AD:E9:74:5D:EE:78:A3:55:FD:01
            X509v3 Authority Key Identifier:
                keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:d0:1a:05:d9:0a:8d:b9:4e:55:44:2e:ad:63:10:dc:73:
         dd:72:dd:1e:9e:3a:9c:a2:db:38:1c:6d:4c:0d:17:2e:16:d9:
         51:8a:13:36:93:d7:2d:47:56:2e:5e:22:8c:19:de:6a:2c:6e:
         36:c4:66:f1:c4:ef:2a:4e:33:14:32:cf:f2:3f:21:cf:1f:f7:
         f0:f7:bf:87:e5:03:2b:97:db:f7:2e:e2:b4:7d:03:69:81:9d:
         2e:a2:85:5e:39:fa:31:7a:b5:b1:0a:1c:53:17:3a:5c:9b:1a:
         5c:c1:a8:04:ea:d5:e0:1a:a9:68:7a:fb:44:b9:95:1b:bd:5b:
         d0:c6:22:62:7a:e1:e2:80:ee:32:87:79:b8:e6:3d:7c:80:2b:
         30:22:7b:75:0d:87:f1:6a:1e:32:84:a5:11:24:bf:5e:c3:32:
         cb:00:b3:18:41:c9:79:16:e8:fd:63:40:43:00:6b:da:ab:ce:
         e5:79:f3:97:b4:dc:0a:6c:66:f7:98:fd:e0:4d:a1:52:11:55:
         08:bf:6d:19:95:a5:97:3d:be:ac:d4:0c:73:f9:c1:59:20:7e:
         de:6c:74:5f:92:e6:97:77:a3:d0:56:4c:87:0f:5d:ef:a5:d6:
         b6:a2:b8:11:f9:3d:58:d8:f1:db:59:00:5e:8b:db:a8:d2:ff:
         dd:ea:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:12:34 2026 by rpki-client