This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File:                     LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier:          /ktbZhtFbW5TjwG6X+mr1jtbvzsXQLOzVNep3kFZ+Ko=
Subject key identifier:   97:60:32:CD:70:19:3A:EB:27:5B:2B:52:B6:44:09:C7:24:02:2E:20
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer:       /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial:       019C43FE2A7C4EF251132AC8D2C0EA92093E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number:          1536
Signing time:             Mon 09 Feb 2026 20:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:56 +0000
Files and hashes:         1: JJJqBn2vrMXP7kngEan0imFBrIE.roa (hash: KnDyBCr49BTGq3A5Ah9xTrAKORQ9HlD3KaBetAPGdn4=)
                          2: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: jK+krGcb5cptoA9ikC+g00sgiDDcHtbEjik2SUflQnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:2a:7c:4e:f2:51:13:2a:c8:d2:c0:ea:92:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
        Validity
            Not Before: Feb  9 20:00:56 2026 GMT
            Not After : Feb 10 20:00:56 2026 GMT
        Subject: CN=976032cd70193aeb275b2b52b64409c724022e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:ad:a2:58:ab:28:66:ae:8d:92:f8:ae:60:
                    92:69:8e:fa:bb:66:c6:4d:be:7f:ec:7e:64:34:04:
                    a3:1e:e6:ed:2e:b9:d0:4d:d7:8e:40:8d:2a:07:25:
                    6b:4a:ef:0a:e0:8d:62:e4:85:24:e2:9f:06:0a:48:
                    09:a4:3a:e4:c8:33:2b:82:3d:27:56:9c:a2:15:b9:
                    2a:6f:50:77:b4:5e:9e:c3:0e:73:f2:b5:39:e5:51:
                    60:7c:6a:47:e6:a9:3e:58:7a:cc:55:2c:a8:ef:6d:
                    01:79:85:7d:0c:34:b0:a3:b2:c3:5f:48:b3:f7:6f:
                    3b:a7:53:c4:a3:84:5c:1a:8d:78:a5:79:7e:06:ab:
                    73:a2:dc:06:72:0e:f4:04:80:e6:7f:7a:22:c9:5b:
                    8e:7f:16:9d:10:09:3b:c8:cd:9b:1f:b0:3b:81:9c:
                    c6:1e:28:5c:0e:06:13:30:a1:52:5f:c1:f6:52:fc:
                    58:08:39:06:19:d0:98:89:6b:d5:bb:3e:34:ef:54:
                    de:ad:b1:30:94:20:c6:ca:22:89:53:38:c2:b0:b2:
                    7d:1c:1b:cc:2d:54:3a:46:59:c4:57:a2:f6:b1:6c:
                    7b:09:92:4a:2a:2f:00:43:06:22:b1:16:5e:a6:9a:
                    40:d1:98:16:20:0f:65:25:32:e9:aa:d7:9f:ac:7b:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:32:CD:70:19:3A:EB:27:5B:2B:52:B6:44:09:C7:24:02:2E:20
            X509v3 Authority Key Identifier:
                keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:83:7a:33:46:dd:9e:3d:9b:72:ac:d1:ef:fd:f1:d4:20:
         90:72:60:75:75:6a:9a:c4:2f:30:6e:fc:a8:c3:ea:30:64:81:
         a7:7f:4d:cc:46:a8:54:4c:74:1f:82:cf:83:62:df:bd:cf:b8:
         1d:5a:ed:19:31:3d:f5:97:da:5c:73:09:65:0f:75:a2:7f:41:
         0f:59:79:c2:40:f5:e7:ef:e6:7d:09:ca:9d:62:d7:19:75:f7:
         f8:8d:db:b0:20:70:83:37:d0:3d:1a:69:6c:63:c2:7c:0a:dd:
         e8:08:fe:40:df:94:47:69:67:5e:26:2a:ed:cd:47:f7:57:c9:
         70:97:e6:30:e2:a5:48:4e:b9:7c:9c:17:fd:d4:73:fd:5b:7e:
         52:1e:0f:ca:4b:ee:33:41:5d:8e:4d:99:48:44:e8:f2:5f:63:
         27:dd:69:21:de:a4:2e:bf:66:48:94:eb:92:8e:0a:97:cb:fc:
         0a:fa:4a:98:74:21:94:23:67:f6:d1:8d:e2:67:0c:4b:03:ed:
         bb:d3:b2:44:41:7f:56:ea:2c:ab:00:c2:9f:49:08:62:66:cc:
         71:7a:4f:7c:dd:11:0e:2d:44:17:e1:bd:23:cb:ab:62:7b:f0:
         4d:95:5e:28:bc:b5:fc:90:ed:fc:04:e1:ee:c5:78:7b:73:b5:
         83:43:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:24 2026 by rpki-client