This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File:                     lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier:          ehOJMSsC7ZruCeBZrTE/qVdFtLQKDt+0byRkZc495Ic=
Subject key identifier:   C6:9B:F0:11:B3:BD:86:8B:5C:9F:D7:88:99:18:DC:68:81:9C:32:28
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer:       /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial:       019C42B41ECD31F1CD55B49DF2358949CB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number:          15B5
Signing time:             Mon 09 Feb 2026 14:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:26 +0000
Files and hashes:         1: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: Mx0XdCpabhIPoUN15AdrIBkXok/xR538D0Xajwo9uY0=)
                          2: n6Tkvj9baCMXCAsK_ODmF8IM-68.roa (hash: 76lc1Uwva5TvIie1HotWiuL4PgdbtEXQtjT6zma+kj8=)
                          3: wmAHtKMaTSwK2rFVe-Xy3jrA9Ok.roa (hash: TQRqeLu5wgssaew7PdQ0R0nLLKJpvWezu9jydrgstss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:1e:cd:31:f1:cd:55:b4:9d:f2:35:89:49:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
        Validity
            Not Before: Feb  9 14:00:26 2026 GMT
            Not After : Feb 10 14:00:26 2026 GMT
        Subject: CN=c69bf011b3bd868b5c9fd7889918dc68819c3228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:f8:54:5f:71:f2:2a:14:a3:4f:23:73:eb:
                    37:16:27:8d:f9:5b:0a:f0:12:ec:56:32:29:cb:a4:
                    ca:ff:9d:80:62:1f:3e:b7:a0:ed:08:43:9e:a9:ca:
                    f0:57:6a:d8:49:e9:40:05:4a:54:c4:14:89:38:de:
                    c6:91:98:ed:2f:f2:8a:df:d8:ae:9d:14:5c:11:7f:
                    e5:6e:9e:0f:f8:c6:58:05:ea:ea:a0:4e:0a:fc:8c:
                    0a:b7:da:64:ef:7f:98:4d:8e:65:83:29:a5:32:b2:
                    9a:d5:93:c7:cb:b0:51:e8:7b:1f:92:93:78:08:a5:
                    e8:ae:1c:a1:3b:c9:bf:22:c6:23:c5:75:f8:9b:f8:
                    fe:79:88:1e:ca:ae:2c:f0:67:02:17:5f:b5:15:c5:
                    7b:86:32:59:eb:22:b6:3c:47:25:e8:fd:ea:0a:ef:
                    a6:69:a3:e0:ad:ea:47:c1:d1:b0:80:c1:86:49:2b:
                    ad:b6:b6:f3:da:52:c7:b0:58:fa:cb:8e:c3:86:46:
                    f9:f6:8b:47:8d:c9:30:b5:2f:2b:0f:58:d3:9d:4e:
                    e0:d9:ef:db:de:09:7f:c5:c9:f9:88:90:17:3d:66:
                    f6:b9:1b:6f:9e:85:f6:44:e5:dd:a5:a8:fc:2a:d7:
                    43:d4:33:e7:c4:d5:2a:eb:63:94:38:b7:10:ed:75:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:F0:11:B3:BD:86:8B:5C:9F:D7:88:99:18:DC:68:81:9C:32:28
            X509v3 Authority Key Identifier:
                keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:bd:99:92:bb:6e:e9:06:fd:fd:13:76:db:ea:2a:21:b7:
         ac:84:9b:77:42:da:72:53:1b:b7:a9:2d:9f:e3:a6:0a:1b:ab:
         7c:47:11:df:87:0c:c9:68:54:38:a0:89:da:d0:b5:bc:f5:e7:
         ea:4e:d4:ce:e2:7d:2a:b9:cb:5a:ba:8a:52:be:97:de:4d:5d:
         e8:2e:66:0a:b1:70:ca:d0:dd:5f:81:05:ee:f0:0e:81:7c:16:
         4f:67:d8:ae:ff:3a:1e:82:9d:c3:da:e3:ea:85:26:a3:59:3f:
         01:a7:15:f9:b6:56:46:25:57:38:ce:5c:29:70:92:f5:d1:17:
         f0:b6:bc:9c:6f:c3:f5:41:f2:b3:a2:8b:d9:a4:be:ee:c7:21:
         d9:a1:59:31:20:3a:20:7f:14:90:47:b3:20:50:d3:34:4f:22:
         58:4e:e5:7b:6d:67:05:d8:72:1c:7d:5f:1d:c8:9d:d0:3d:27:
         81:71:0d:7d:ca:3f:c2:39:c3:38:1d:09:0b:25:c0:c7:c0:57:
         b8:bc:72:f7:3b:ac:be:c4:d5:74:9e:13:f9:45:35:20:ed:a9:
         65:04:cb:a7:d7:3c:7e:d0:49:fc:50:e0:ff:ca:2f:26:77:cd:
         d5:e5:09:2e:34:c8:60:a3:ca:c7:d9:31:45:e5:a9:a1:f7:7b:
         37:77:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:09 2026 by rpki-client