This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File:                     lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier:          oAHknxFV9fRPy8gO8E0L3iTeWQTnaeyRm9uRv+pi1wA=
Subject key identifier:   50:D7:EF:CD:E7:6F:40:48:A8:D7:4F:65:3E:01:F2:D8:5E:DC:3B:BC
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer:       /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial:       019C427E2CED50DF970434D25008E447FC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number:          0F55
Signing time:             Mon 09 Feb 2026 13:01:31 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:31 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:31 +0000
Files and hashes:         1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: EDD1YGWIXSNeuGL2E36QD7g8YaofloDdkCTH+Gzxips=)
                          2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:2c:ed:50:df:97:04:34:d2:50:08:e4:47:fc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
        Validity
            Not Before: Feb  9 13:01:31 2026 GMT
            Not After : Feb 10 13:01:31 2026 GMT
        Subject: CN=50d7efcde76f4048a8d74f653e01f2d85edc3bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:0d:16:55:ad:5b:b4:11:46:56:66:6c:88:
                    6c:e1:62:cb:82:dd:9c:29:48:65:1d:34:6b:9c:69:
                    cc:27:e3:2e:35:19:66:d5:ba:37:09:4f:3b:a9:51:
                    cf:a9:61:b0:a3:39:86:46:4d:0a:75:8b:db:aa:ef:
                    73:47:1d:b7:7f:87:84:4f:44:60:cd:04:5f:7a:91:
                    7f:b1:fa:19:0b:83:c1:fd:ae:f6:b8:d5:64:92:b2:
                    9b:cb:b8:72:54:8b:aa:0f:cf:05:1c:8c:86:1a:8e:
                    64:3e:6e:d9:ee:1b:e7:6b:86:f2:eb:83:24:10:36:
                    f6:84:9b:05:89:9f:83:3f:8c:e1:82:bd:29:2c:dd:
                    4a:5c:3c:bc:9d:79:a2:76:86:ba:cb:1c:e0:3f:6a:
                    26:76:a9:08:ef:94:15:1a:81:b5:31:22:97:b4:41:
                    b8:08:86:18:b7:65:c1:6a:4f:50:f5:29:19:97:b3:
                    a6:e7:70:26:f5:81:cd:40:f9:27:4c:63:d3:b7:de:
                    54:7e:ef:7f:1e:0a:11:03:e9:29:b9:8e:5b:e9:09:
                    28:78:c3:93:10:3e:46:1a:c9:e3:ca:6f:5e:c1:ba:
                    d1:af:b2:58:da:a4:26:d8:2d:a0:a5:85:50:9b:18:
                    09:71:02:28:8d:4c:87:41:13:f3:00:8a:b5:e8:75:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:EF:CD:E7:6F:40:48:A8:D7:4F:65:3E:01:F2:D8:5E:DC:3B:BC
            X509v3 Authority Key Identifier:
                keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:1d:9b:d0:0c:a6:54:c0:d6:a8:d5:87:2d:de:5a:bf:c6:
         31:83:e1:6a:47:37:00:b0:3d:9e:dd:d5:e6:0f:4b:3a:45:ad:
         f3:ee:3a:81:3c:8f:2a:89:91:a0:af:27:ac:e8:55:ce:03:46:
         82:2d:1a:ce:cb:a2:54:e2:3f:3d:33:45:65:2b:a7:a3:8e:ec:
         c2:1d:ce:24:24:93:8b:25:1b:7a:51:d4:14:90:8d:22:ed:ff:
         b7:2b:f8:35:3b:0e:52:c1:0d:6f:42:e9:cc:5d:20:6f:e1:8e:
         22:f3:dd:31:02:a5:80:4f:28:1b:41:d0:00:5a:3f:e6:b9:13:
         d3:c2:7a:0e:35:40:84:dd:98:ac:72:9e:e2:ee:84:3e:99:84:
         a5:56:d7:78:6f:5f:24:03:7a:ac:ed:68:ef:c1:16:88:a7:5e:
         b5:35:24:0a:f9:a9:98:8d:57:12:f1:e0:d0:80:12:1e:72:af:
         66:c3:8f:c3:63:5c:9d:b2:62:ac:bf:6f:10:68:7b:7d:f4:22:
         ba:bb:75:a2:f5:ef:3d:06:ca:5b:0e:35:44:f0:40:66:55:4a:
         aa:34:65:7f:6b:c1:d6:5a:e2:b5:ae:b5:3e:2d:46:88:79:69:
         a7:41:2d:51:d0:4d:18:99:a7:1a:2b:56:f6:57:52:29:be:a9:
         eb:0a:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:18 2026 by rpki-client