This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File:                     LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier:          bU8RJyJR9RaVBIRmRzokVZiPNmdLS6REX0fWN8u5O9k=
Subject key identifier:   66:3A:0A:5E:7B:B3:D0:F5:40:D6:2C:A6:CB:1D:9A:18:52:F8:16:66
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer:       /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial:       019C42B47DAA4777CAD5DA345813456C4F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number:          026E
Signing time:             Mon 09 Feb 2026 14:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:50 +0000
Files and hashes:         1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: sQpdszx3Qhmh8cum2bXDzcc2clQxBWgr7BPPKi+mQkE=)
                          2: RML1TmbAZYHpyU26wWj03FjR3yY.roa (hash: PPBAB3g4x0UYNx5LUtlXQ+fhrj8l5E6PaVsjyetSSNY=)
                          3: v-yW23PUKxeOnQqPJF0a9ieiqkY.roa (hash: QA7GggYLqUF36MqITz5Sp/J8Iu+lSl6lGyrVjXlucb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:7d:aa:47:77:ca:d5:da:34:58:13:45:6c:4f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
        Validity
            Not Before: Feb  9 14:00:50 2026 GMT
            Not After : Feb 10 14:00:50 2026 GMT
        Subject: CN=663a0a5e7bb3d0f540d62ca6cb1d9a1852f81666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:d9:10:8f:56:81:00:7a:66:a6:67:b7:d2:
                    06:ac:23:1d:d8:25:1e:21:bd:3c:88:02:15:5c:34:
                    f1:70:fb:11:9b:18:ab:5f:86:95:e5:65:27:73:4d:
                    50:41:fe:de:b8:3f:97:02:a4:6c:3d:d4:d2:ec:6d:
                    73:16:c4:95:f0:e5:0c:48:2c:d3:29:e1:ad:3b:b0:
                    1b:9e:3a:ef:f9:28:f1:16:a0:a2:ad:9b:c8:fe:14:
                    bf:78:04:14:30:41:eb:bb:a8:9f:b2:9d:60:92:a0:
                    c6:30:ef:fd:f0:bd:62:a0:52:75:5d:f3:14:68:37:
                    96:f1:23:dd:e8:46:cd:43:12:46:c8:16:94:93:7d:
                    60:a5:2e:d5:17:6e:e3:e3:c8:fa:c2:42:02:34:ae:
                    79:57:9b:dc:60:e6:0a:f8:4e:8d:99:85:b9:2c:41:
                    5a:65:fe:cb:8d:d4:73:ed:cb:88:73:c3:f6:6b:78:
                    8f:5a:c6:bb:9d:e1:04:39:b5:2f:c1:bc:66:3b:3e:
                    fa:6e:f5:f2:3a:3f:3d:df:e5:82:c4:30:3f:d9:5f:
                    9a:f8:90:7c:63:f4:70:78:39:a3:85:e2:92:d0:a0:
                    81:ae:bc:92:4b:a9:11:28:c6:ed:77:a8:79:a1:05:
                    31:2d:68:c7:cd:06:c6:2b:e8:8a:c8:fa:91:bb:bb:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:0A:5E:7B:B3:D0:F5:40:D6:2C:A6:CB:1D:9A:18:52:F8:16:66
            X509v3 Authority Key Identifier:
                keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:60:0e:a1:47:85:cb:9a:54:69:7b:da:1d:3e:2d:6e:60:
         f9:52:cb:42:ca:b9:31:ca:4e:69:36:e1:4e:7d:90:80:54:a1:
         75:0f:e8:4c:2b:99:b0:31:63:6c:fd:72:f9:78:26:11:04:0f:
         1d:d8:f6:0a:4b:2f:5f:c1:43:55:c1:08:16:1b:85:0e:59:28:
         1f:c8:89:4f:a5:3a:a1:08:3b:e4:ef:a1:0b:26:aa:04:dd:a4:
         6a:4c:11:a1:64:59:42:20:fb:56:d2:f8:1b:b9:e3:d6:40:32:
         9e:76:dd:98:c5:a5:b0:92:5b:02:9b:8a:29:eb:d9:9b:be:09:
         98:e6:53:d5:11:00:54:f7:2a:89:27:ac:27:08:7a:40:9f:7d:
         32:b4:64:13:83:62:15:46:2f:b9:7e:4a:81:b7:e9:4a:5a:9f:
         e9:5d:51:fd:cf:32:b4:44:94:82:3b:71:21:d3:c5:43:c9:f7:
         af:1d:30:12:dd:dc:0b:c2:27:41:2d:5c:67:bd:03:20:95:26:
         1d:fc:2f:36:f8:f5:20:20:9e:a8:36:cc:e8:58:21:a6:20:c9:
         7d:28:d7:68:84:08:d6:8a:a3:b8:ab:bc:34:9c:b9:86:ae:bc:
         53:a3:ff:42:a2:74:44:13:a7:75:dd:a7:c4:68:d9:e0:b0:cd:
         63:3d:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:39 2026 by rpki-client