This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File:                     lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier:          b29b/Ly/I2Rx5KC9tLqfjOPrAg1DwCN2YJOfQGPU+bE=
Subject key identifier:   79:12:2D:F5:71:C6:03:6C:34:80:10:EF:F8:12:1A:A3:4C:E6:5D:FB
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer:       /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial:       019C446C43A60562DDEDAAFA50B6C08769A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number:          0D42
Signing time:             Mon 09 Feb 2026 22:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:11 +0000
Files and hashes:         1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: wyRI+FgTs4LQc8AgeHkVKgTXTDGqzQ2fUU2e0UjLeXM=)
                          2: mzlwiMISCrNPZJgA3TH1rHI1DI8.roa (hash: Tkog9XF6e0kV/tgQ349vjWkM/evyuOUpmxS3ntIwqts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:43:a6:05:62:dd:ed:aa:fa:50:b6:c0:87:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
        Validity
            Not Before: Feb  9 22:01:11 2026 GMT
            Not After : Feb 10 22:01:11 2026 GMT
        Subject: CN=79122df571c6036c348010eff8121aa34ce65dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:ae:e9:27:e4:36:26:32:11:c9:e0:01:54:
                    c6:fe:68:06:d5:b8:5b:13:a4:aa:43:ef:a8:50:ca:
                    bf:8d:65:55:ad:fb:79:c3:4c:19:09:53:72:93:27:
                    09:91:9b:dc:94:04:74:e2:60:0d:d7:e0:95:34:73:
                    7b:65:90:5e:95:10:40:84:d2:c4:a4:86:a4:50:bf:
                    56:76:7b:d9:57:21:c5:17:b6:23:4e:83:f1:d8:3d:
                    bf:53:02:8e:fa:e5:64:9e:03:c8:01:bb:b4:ee:bb:
                    ce:8f:7c:e7:d8:61:e3:d0:ce:fd:2e:bb:51:a7:ed:
                    fb:60:a2:e1:9e:5d:a1:77:20:02:5f:30:04:05:77:
                    87:e7:75:f8:bc:1a:6c:22:73:fb:c9:5e:9b:69:c6:
                    7c:ce:8f:ff:ee:57:ab:58:ca:6d:7a:eb:7d:32:51:
                    44:39:9b:8d:46:17:d0:80:8c:ef:08:04:6d:78:c4:
                    5d:38:7f:e7:dd:73:00:48:1d:1f:a7:d0:4f:fc:90:
                    d0:d3:8f:2a:55:44:6a:75:2f:59:10:59:e1:66:ff:
                    a0:f1:bd:ab:16:44:e6:e5:42:39:57:f1:11:28:59:
                    b0:4e:6f:fe:7e:19:9e:93:18:17:82:28:1d:bf:3b:
                    bc:05:ea:f8:73:48:90:ba:bc:17:03:11:c3:0e:51:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:2D:F5:71:C6:03:6C:34:80:10:EF:F8:12:1A:A3:4C:E6:5D:FB
            X509v3 Authority Key Identifier:
                keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:59:98:94:9f:a9:34:cf:6e:1a:79:e0:75:66:d6:50:93:66:
         6b:e5:eb:f0:8f:2b:0f:6f:ae:ed:3d:cd:9c:2c:a6:b8:f8:0a:
         c9:dd:86:80:72:93:4f:41:17:dc:f2:79:80:a3:d2:aa:61:87:
         ca:a8:2b:c8:6f:f5:35:fe:92:f7:54:0e:5e:56:b7:05:b5:75:
         75:96:2e:44:ac:c7:36:6e:c2:f2:3d:52:75:3c:cd:04:83:8e:
         f2:4b:d9:29:ba:be:f7:eb:c9:9a:1c:ca:ef:51:49:6c:2f:c5:
         8e:b6:d9:df:06:bd:da:44:ff:e0:a3:9a:c8:42:2f:98:a6:ba:
         81:2c:8b:9c:e8:47:76:1e:6d:e2:51:b5:57:0f:08:6b:5a:7c:
         31:56:a7:ab:d0:77:be:8a:cd:3f:dc:5a:5d:20:99:49:25:33:
         78:b5:25:bd:80:ec:7b:cd:17:b5:1f:e7:06:9d:4f:eb:3d:00:
         7c:e7:c5:a8:91:4a:d6:d1:14:a5:5f:99:56:fb:42:db:a9:12:
         b5:ff:b9:e6:32:e1:02:36:21:3a:ae:19:83:7e:b9:75:1a:6b:
         bc:0e:25:e0:5d:d0:78:33:c2:36:6d:be:89:ff:13:b7:93:95:
         6b:f8:1f:cf:8c:76:b9:e8:81:e9:0a:f6:67:7c:58:38:70:05:
         93:c1:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:27 2026 by rpki-client