This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File:                     lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier:          0bXVi8FhUPl3LhGDzQxD+4k6DruyY//ELOTJA5qBBIc=
Subject key identifier:   F9:29:49:8A:C5:AE:89:8E:69:AC:02:D9:9B:41:DC:77:98:DC:97:F4
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer:       /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial:       019C4390564F0E1175C99FE67AC5C7E3AFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number:          06DA
Signing time:             Mon 09 Feb 2026 18:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:58 +0000
Files and hashes:         1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: IGBnQxRYPBmUIyZV/BzOFS6iNAI+sJ501RLX87MMFF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:56:4f:0e:11:75:c9:9f:e6:7a:c5:c7:e3:af:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
        Validity
            Not Before: Feb  9 18:00:58 2026 GMT
            Not After : Feb 10 18:00:58 2026 GMT
        Subject: CN=f929498ac5ae898e69ac02d99b41dc7798dc97f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:5e:a2:f6:d2:c5:a6:1b:4b:66:0e:e0:df:
                    2d:13:a9:14:c9:96:7f:5b:16:9d:0b:26:09:ff:34:
                    1b:f3:dd:5c:fc:4b:89:a6:40:df:33:97:4e:e0:c1:
                    6c:5f:9f:83:c0:97:0a:21:a8:a1:f4:76:31:e9:c0:
                    2f:44:44:d6:f2:65:8f:53:30:41:ff:ff:57:9a:44:
                    1a:5c:c8:f9:6d:0e:f5:a0:85:9a:87:46:97:37:e4:
                    14:65:ce:9a:58:b6:1c:dd:02:0e:56:46:0a:df:77:
                    d4:f7:55:1e:1b:0e:2b:70:2c:b7:95:2f:34:92:d0:
                    64:80:ed:3d:bf:29:60:13:2d:f9:73:cc:1b:cb:eb:
                    db:4a:f1:1e:e3:e1:75:8f:07:74:2a:9b:97:12:21:
                    ea:02:51:05:c7:bb:94:a6:dc:f8:ff:d4:a4:29:87:
                    0c:41:66:d3:2d:be:3d:e5:b5:e7:a5:22:56:45:f9:
                    79:15:04:0d:11:68:4f:40:bd:bf:a5:14:56:ec:a5:
                    e4:e8:ae:a2:06:e1:0a:64:fb:12:4a:fe:fb:10:44:
                    7d:50:68:a8:3a:55:48:e0:49:83:43:1b:7f:e9:89:
                    83:d3:3a:75:3d:fb:ce:a8:ee:c8:7b:c5:54:cd:db:
                    1c:a4:99:3c:dd:4b:f1:f6:91:32:6c:73:db:90:04:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:49:8A:C5:AE:89:8E:69:AC:02:D9:9B:41:DC:77:98:DC:97:F4
            X509v3 Authority Key Identifier:
                keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:31:2f:2f:02:74:57:d3:4b:c3:6f:30:a1:7e:89:bb:9d:
         5b:5b:3d:cd:43:1b:66:21:93:f7:51:a0:bf:5f:3e:10:ec:29:
         1c:65:a5:2a:33:6b:56:9b:cd:7e:9d:97:8c:f0:71:ff:2c:82:
         e5:c6:07:b1:97:44:1e:c1:e6:08:57:fd:30:80:cd:53:61:e4:
         9b:f4:21:96:4e:f2:62:86:1c:06:fb:1f:d6:3f:0b:ce:c9:9b:
         bb:95:d2:ef:41:b1:03:03:4f:17:13:97:47:32:48:ec:51:48:
         5b:17:ac:84:27:45:17:aa:0b:00:f4:2b:3e:d0:2c:27:98:7e:
         59:61:88:7b:71:0d:69:d0:b8:6e:db:09:12:a8:e8:aa:c7:6e:
         dc:6c:0b:8a:28:3a:9b:37:b4:e5:07:51:e9:9a:f7:bb:12:13:
         59:8c:3f:51:29:3f:8e:ec:e5:dd:31:d5:a0:69:3b:02:14:31:
         8d:63:b9:63:5f:56:9f:2a:b3:4f:62:24:22:25:5b:cd:e4:29:
         4f:ee:48:79:16:fc:32:5a:b5:46:4e:ca:92:ef:01:79:3f:22:
         b6:09:7a:27:2a:14:b7:b3:47:6d:1a:ac:52:21:a4:4f:b9:4c:
         d6:24:59:45:08:9d:4b:b2:c8:b6:5f:f6:e2:47:65:b6:06:26:
         69:19:20:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkFZPDhF1yZ/mesXH46+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Zjc1MjNhN2IzMzJlYmRmMTE0YTVjMDhkYzFkNWYzMmNi
ZDczYzYwHhcNMjYwMjA5MTgwMDU4WhcNMjYwMjEwMTgwMDU4WjAzMTEwLwYDVQQD
EyhmOTI5NDk4YWM1YWU4OThlNjlhYzAyZDk5YjQxZGM3Nzk4ZGM5N2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWBeovbSxaYbS2YO4N8tE6kUyZZ/
WxadCyYJ/zQb891c/EuJpkDfM5dO4MFsX5+DwJcKIaih9HYx6cAvRETW8mWPUzBB
//9XmkQaXMj5bQ71oIWah0aXN+QUZc6aWLYc3QIOVkYK33fU91UeGw4rcCy3lS80
ktBkgO09vylgEy35c8wby+vbSvEe4+F1jwd0KpuXEiHqAlEFx7uUptz4/9SkKYcM
QWbTLb495bXnpSJWRfl5FQQNEWhPQL2/pRRW7KXk6K6iBuEKZPsSSv77EER9UGio
OlVI4EmDQxt/6YmD0zp1PfvOqO7Ie8VUzdscpJk83Uvx9pEybHPbkAQlewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkpSYrFromOaawC2ZtB3HeY3Jf0MB8GA1UdIwQY
MBaAFJb3Ujp7My698RSlwI3B1fMsvXPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUt
MzYwNTdlMzU0ODc2LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUtMzYwNTdlMzU0ODc2
LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpkxLy8C
dFfTS8NvMKF+ibudW1s9zUMbZiGT91Ggv18+EOwpHGWlKjNrVpvNfp2XjPBx/yyC
5cYHsZdEHsHmCFf9MIDNU2Hkm/Qhlk7yYoYcBvsf1j8Lzsmbu5XS70GxAwNPFxOX
RzJI7FFIWxeshCdFF6oLAPQrPtAsJ5h+WWGIe3ENadC4btsJEqjoqsdu3GwLiig6
mze05QdR6Zr3uxITWYw/USk/juzl3THVoGk7AhQxjWO5Y19WnyqzT2IkIiVbzeQp
T+5IeRb8Mlq1Rk7Kku8BeT8itgl6JyoUt7NHbRqsUiGkT7lM1iRZRQidS7LItl/2
4kdltgYmaRkgnw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:31 2026 by rpki-client