This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File:                     LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier:          q/0RF7lZIjR9LtCfY0M/7aF2ah/9c97DcV51U4Wk8UA=
Subject key identifier:   FF:81:65:72:A8:82:50:BC:F0:C9:6C:1B:DD:3C:A3:58:74:A2:5E:85
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer:       /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial:       019C4390022098D224B56D738884CF320968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number:          1823
Signing time:             Mon 09 Feb 2026 18:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:36 +0000
Files and hashes:         1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: TJ9HXwmUeakGnZ11HlWZcFP/Yf87NCNRIKA+n01FHjk=)
                          2: XiSpk1i5DugMLOQC8LxlXZ3OXzg.roa (hash: wXcCGl7A0eNH0SjdToQ3CeO3hMfYdUgUl2ywslHJLk8=)
                          3: cAVdSGytSyux4FQsZuWB3TVoUN8.roa (hash: RAtVEud/Ywx68w73bvy2E2uTPg4lltVhihmdYUF5drI=)
                          4: grtZ88A4ab4V_GiK5bfawAFeBik.roa (hash: Gok5HzoG6ye09AxYK0QJqUuAYdVlePP8eXldni6wygU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:02:20:98:d2:24:b5:6d:73:88:84:cf:32:09:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
        Validity
            Not Before: Feb  9 18:00:36 2026 GMT
            Not After : Feb 10 18:00:36 2026 GMT
        Subject: CN=ff816572a88250bcf0c96c1bdd3ca35874a25e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:e8:35:1a:4d:65:47:7d:cb:c7:d7:a1:07:
                    63:44:2d:95:b7:14:53:bb:45:40:8d:80:13:af:ca:
                    d6:66:29:24:dc:ad:09:33:bb:96:0a:95:37:3c:3f:
                    c7:e1:0e:a9:53:1f:56:68:99:f0:5e:37:58:4d:21:
                    be:b6:7d:65:24:45:af:77:a5:c4:7a:6a:f3:c3:ef:
                    c8:b4:a5:ae:df:f1:c3:e7:d4:07:88:34:b3:92:4d:
                    63:ba:91:a2:e8:44:b7:d8:5d:21:73:85:75:a5:27:
                    32:09:3c:72:36:ae:d1:fd:e5:30:41:18:40:bb:17:
                    be:06:df:85:77:33:4a:e1:92:91:e0:69:be:22:91:
                    53:de:a9:cd:95:59:ad:08:bc:94:b8:f2:81:f0:31:
                    ec:59:72:2f:d9:cb:81:e5:61:ca:a6:7d:c9:05:33:
                    6c:ec:a1:1f:1a:51:a2:a9:de:7c:5c:b6:f9:29:8c:
                    e1:69:d8:5f:93:df:af:dc:96:23:5f:8a:42:9f:10:
                    09:7c:33:d7:d3:20:d3:9b:d6:81:d3:92:87:fc:4a:
                    83:34:44:8d:50:9f:79:f5:ad:9e:5a:ee:b9:e7:ca:
                    4c:2c:23:88:08:59:ee:f2:06:ca:64:96:07:1f:d0:
                    29:2e:c3:8a:8e:33:bf:07:8a:c5:0f:9d:63:39:3b:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:65:72:A8:82:50:BC:F0:C9:6C:1B:DD:3C:A3:58:74:A2:5E:85
            X509v3 Authority Key Identifier:
                keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:d8:16:bb:4e:ca:b0:85:8c:50:e8:ad:09:46:ee:8b:f2:
         52:d6:2b:c4:23:b4:62:35:49:64:b2:9d:8e:ef:a2:ae:bf:c6:
         0e:56:08:57:f3:28:6a:3f:2e:ed:48:25:6a:b9:d6:32:64:9f:
         25:15:35:92:e9:e9:92:a2:2b:76:2f:33:a9:fd:be:7c:e7:59:
         f6:42:a7:e7:56:1d:22:64:0c:fc:b1:f3:13:c9:4a:bb:c4:5e:
         31:68:ea:95:42:8a:8c:b9:34:18:4a:fb:b6:f3:ef:d3:1d:1c:
         c7:13:f5:44:ef:48:be:65:49:c2:4a:34:2f:9a:1d:cd:ff:65:
         b6:f0:43:16:6d:87:fb:20:6a:9e:f8:71:c2:64:8f:ee:f6:87:
         eb:a1:75:47:6a:99:87:bb:68:5a:74:cf:67:49:ae:13:c3:61:
         e2:01:fe:db:0a:e0:30:83:0a:c1:8d:01:d9:fb:01:ef:56:c9:
         3a:b4:96:1e:44:d8:ce:e9:f5:49:69:a9:83:ab:7d:70:6a:54:
         ea:db:b3:01:87:9f:ab:6e:58:0f:f5:3c:b5:ed:34:e8:5e:10:
         3c:02:43:8d:a3:84:59:cb:df:9c:f4:76:5d:9c:dd:fb:96:15:
         9f:36:36:ed:67:62:3a:5e:27:a6:e0:c8:09:54:16:b4:4d:89:
         8c:5f:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:10 2026 by rpki-client