This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File:                     lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier:          DPcLjlBMy5t+y+ZYKa7eVc4PUXrqZFyNyn+R2DXY3Bs=
Subject key identifier:   52:FC:DD:22:BC:33:CF:A1:AD:DC:CB:8B:5C:5D:FD:E2:C1:47:A2:2D
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer:       /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial:       019C43220BAA700171DD8C9CB429D8F61E95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 16:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:30 +0000
Files and hashes:         1: 5Oaq_9l3ZmhaBOhjzGbGvS7HRKc.roa (hash: cXhkDcDKqif8H6682mKwtEo2AE55St9SA93gZ7arpO0=)
                          2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: iClpQJp0QCGonI9aXCUlt4SucJABc6V82KUaP4M0oQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:0b:aa:70:01:71:dd:8c:9c:b4:29:d8:f6:1e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
        Validity
            Not Before: Feb  9 16:00:30 2026 GMT
            Not After : Feb 10 16:00:30 2026 GMT
        Subject: CN=52fcdd22bc33cfa1addccb8b5c5dfde2c147a22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:fb:f0:b0:1c:a7:6e:fe:e4:f6:f0:98:e6:
                    cc:c9:25:fe:64:dc:34:ab:01:b4:a4:e3:88:9d:70:
                    2a:62:e6:fc:9b:22:04:d9:b2:82:61:8b:3a:ba:c3:
                    27:62:ba:1b:49:c6:7a:d0:34:86:2f:80:b9:79:37:
                    69:c5:b7:98:92:04:26:d9:9e:c5:24:e0:85:43:66:
                    25:cc:6e:b6:9b:f6:8d:32:43:07:d4:29:8a:70:e2:
                    c5:06:89:93:bf:50:39:6f:ed:70:f9:19:bd:01:9b:
                    72:20:29:6a:5d:0d:f7:e9:81:18:eb:54:a9:b2:4f:
                    45:78:88:2b:e1:f4:f7:8e:15:a3:6d:13:8c:7b:66:
                    12:42:06:2a:c9:c5:c4:fb:14:ca:a0:4e:fe:b3:e9:
                    0e:8d:45:78:bf:15:fb:df:8a:e1:90:04:3b:8b:d3:
                    ad:ff:1d:2a:d6:8d:47:80:e3:29:59:ae:b9:d1:1d:
                    80:9d:4e:c8:b0:25:93:f0:05:85:e5:ea:0f:2b:1d:
                    8b:ba:a1:7c:96:1c:8c:51:95:e2:58:ab:fc:d2:95:
                    ca:e9:80:7e:3c:43:26:84:81:d6:9e:ec:2b:a0:5f:
                    90:28:03:17:d1:f0:06:45:52:5e:98:2a:7e:40:60:
                    53:0e:16:3d:2f:9c:f5:8b:1f:a4:e9:3e:62:e5:ca:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FC:DD:22:BC:33:CF:A1:AD:DC:CB:8B:5C:5D:FD:E2:C1:47:A2:2D
            X509v3 Authority Key Identifier:
                keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:ff:67:eb:ca:2d:28:13:26:e7:38:cb:8e:08:bc:23:a5:
         f9:35:c4:7b:dd:7c:0e:f6:3e:d7:60:ed:7c:79:cd:15:eb:e2:
         03:8c:f0:de:05:6d:4b:95:ca:07:f7:f6:26:01:ce:76:1d:fd:
         f5:8e:12:22:37:ed:00:5d:22:25:80:ca:2c:38:67:4b:4d:6d:
         ed:9a:95:b2:49:51:4a:45:ec:69:8b:40:67:37:07:f9:94:5e:
         02:fb:1c:ed:c7:a8:0a:be:bf:9e:88:af:57:32:17:9a:00:b2:
         e2:9b:5d:85:62:df:b0:9a:14:fe:6e:89:2e:63:ab:04:0d:a5:
         cd:1b:d4:df:9e:ea:fb:44:52:d1:a8:a6:bf:f0:83:cb:3a:ec:
         fa:a0:70:3a:ad:3d:97:e4:3c:4d:6d:44:a6:fd:b5:f2:47:e5:
         46:a9:b8:50:2b:9b:41:8a:91:52:3a:4d:1b:28:60:13:9d:e3:
         92:fe:14:3b:0d:c7:da:86:9f:6a:0b:ee:73:db:42:19:8d:6f:
         0a:22:58:9f:b4:b1:50:a5:ab:cc:75:2f:0b:c9:ae:dc:74:b8:
         04:7b:42:7a:96:bf:e4:14:28:6d:e4:5c:1e:96:ff:4d:37:f3:
         03:af:66:f0:26:3b:20:c8:64:88:2c:5a:46:77:16:99:40:4b:
         60:09:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:34 2026 by rpki-client