This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File:                     lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier:          klaaz4v7XUq7Ou6AsJZrA7y7Z7WvPedqLlag0eTHBw0=
Subject key identifier:   EC:30:A7:D2:AD:49:BE:C7:B2:D2:80:DE:3A:7D:30:5D:70:46:4C:BA
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer:       /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial:       019C424693A08A8AF5891639AD4C28CD54C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number:          1791
Signing time:             Mon 09 Feb 2026 12:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:47 +0000
Files and hashes:         1: Ym03Um_5UobxPOr6olPKeapW7cU.roa (hash: D9DmLZwMQ1tx/ZxbrikY71GnEw+e659ZH43TIYC63lo=)
                          2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: Uo0cFkvMwP4rh09GE750EUirpxFubkQsqOMPi7cHYGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:93:a0:8a:8a:f5:89:16:39:ad:4c:28:cd:54:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
        Validity
            Not Before: Feb  9 12:00:47 2026 GMT
            Not After : Feb 10 12:00:47 2026 GMT
        Subject: CN=ec30a7d2ad49bec7b2d280de3a7d305d70464cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:df:b6:43:09:21:f0:89:a3:fd:78:4f:4e:
                    3c:17:91:1f:db:2b:db:15:52:b2:f2:a7:31:e3:8d:
                    c1:da:19:34:50:6f:49:e0:8e:42:66:56:c7:e4:1e:
                    fe:97:e7:3b:5c:3b:12:f8:18:3f:5c:18:be:81:cf:
                    8d:ae:0d:57:a1:4b:28:36:f5:3b:b6:ab:99:5a:48:
                    1d:9b:ce:70:20:a2:47:8c:55:69:79:fb:72:90:bc:
                    f5:72:52:63:e0:d7:f1:94:18:23:ed:5e:11:aa:dc:
                    5e:49:a8:58:32:20:d7:50:4a:be:dd:ff:0b:68:91:
                    bc:5c:12:3b:46:e2:e9:25:e6:65:3d:2c:7b:58:60:
                    4f:31:4b:eb:5e:3b:e8:5c:f3:df:3d:16:8c:57:bd:
                    5e:ba:2d:51:38:73:d4:a1:8e:c6:e8:5e:2c:82:fe:
                    c0:50:93:20:e1:41:00:48:8e:58:3e:16:d1:05:72:
                    0e:c5:af:f1:db:e3:10:81:7e:c4:14:e4:b0:b5:d4:
                    60:5d:60:60:7f:1a:f6:67:91:b8:42:72:8a:fa:66:
                    ca:d3:3b:c4:c0:da:f3:b1:ae:4e:f6:0c:72:59:15:
                    44:0a:7d:30:de:c2:2c:a3:da:1e:15:85:53:9a:e8:
                    3e:72:48:a0:f7:47:e3:d8:6f:6f:c4:6d:73:eb:52:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:A7:D2:AD:49:BE:C7:B2:D2:80:DE:3A:7D:30:5D:70:46:4C:BA
            X509v3 Authority Key Identifier:
                keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:47:8d:01:c2:9e:f6:31:18:8e:bf:31:c2:bd:97:ef:dc:
         8d:23:e9:05:47:71:eb:d4:28:75:3b:24:cb:7a:59:62:ac:d2:
         33:b0:f3:73:a1:dc:e1:07:0e:0e:9a:f3:5b:83:f4:3f:bb:98:
         74:01:d6:4c:86:9d:4f:2e:6d:ea:c7:d6:f4:81:04:fa:4e:23:
         f1:67:f0:96:3e:12:00:60:0c:30:cd:13:3f:82:51:b9:20:88:
         ed:70:96:b2:a9:2b:c9:ff:c8:0d:c4:e8:88:2d:2b:e7:6a:4c:
         a3:8d:41:49:5a:65:66:3b:b3:e1:13:d9:50:c1:f1:71:b4:3f:
         16:b0:2c:23:59:b1:fb:d7:2e:80:37:2c:af:51:6d:02:c9:35:
         14:50:db:44:5d:f4:dd:65:7f:9e:e8:50:b0:57:a0:a8:f9:0d:
         10:55:c3:49:f0:33:3d:d9:34:ca:cb:b8:71:c4:ff:12:da:00:
         b2:6c:aa:c2:2b:2a:a1:57:4a:c0:ae:18:8e:fd:34:c8:d1:1c:
         84:19:08:34:79:47:d4:71:67:03:e0:52:6b:42:08:59:50:c8:
         68:ca:34:21:06:dd:f9:c3:59:ec:2a:44:9f:82:3d:33:ab:5f:
         ce:a2:1c:c7:90:74:76:1a:11:3b:d8:d7:69:7e:e8:82:6d:93:
         2b:8d:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:26 2026 by rpki-client