This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File:                     LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier:          SnRIy5lwXIT/E9+EZ5ZwW1UDdu2FmMerq6iVimhtWVU=
Subject key identifier:   DE:E7:00:D3:C5:E0:3F:96:33:7E:65:CD:67:98:3B:C1:F3:9A:DE:9D
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer:       /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial:       019C4359650C151D765DD71259F5F4DD8068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number:          17A6
Signing time:             Mon 09 Feb 2026 17:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:57 +0000
Files and hashes:         1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: iCGHewQjNqloz4vCpq+FImwnSAJHITejMzTF+MF52yo=)
                          2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:65:0c:15:1d:76:5d:d7:12:59:f5:f4:dd:80:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
        Validity
            Not Before: Feb  9 17:00:57 2026 GMT
            Not After : Feb 10 17:00:57 2026 GMT
        Subject: CN=dee700d3c5e03f96337e65cd67983bc1f39ade9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:1a:f4:04:6c:34:d0:8c:2c:8a:3b:9a:49:
                    2f:68:85:75:ce:ee:50:93:16:79:d6:f3:8f:50:19:
                    c4:a9:a8:79:f4:70:c2:f4:15:41:2a:2d:19:19:13:
                    05:09:0d:1f:30:46:ad:16:82:a0:bd:ec:15:b7:1b:
                    40:c2:18:fa:b1:31:3f:0d:a3:9f:e2:f5:b3:c4:4a:
                    12:89:12:0c:11:35:6f:40:f2:b5:67:09:91:5a:70:
                    ff:10:4b:81:92:85:9f:b2:b3:3c:8a:a5:de:0e:4c:
                    96:8e:54:a4:17:ca:a1:61:5c:41:e8:2a:7e:01:42:
                    45:c7:21:f5:0b:12:07:3c:9d:59:39:ba:de:a3:f3:
                    fa:cd:60:d7:8b:ff:93:1c:1b:7d:39:5d:62:98:27:
                    2b:27:66:20:40:5f:4f:df:98:b4:62:36:cd:f7:fa:
                    50:b4:37:ee:a6:09:2a:09:84:58:0e:f1:21:aa:b3:
                    24:73:91:e6:d2:5b:8e:ca:0b:d4:14:95:5f:ef:ca:
                    dc:e2:df:02:7a:0f:f9:cb:67:d4:4f:98:6f:26:18:
                    c2:e4:08:39:f3:0e:d8:72:e4:f8:de:12:98:3e:c3:
                    d7:b0:b3:ac:c1:20:62:f2:3d:e8:95:ef:07:ba:78:
                    45:17:a7:b7:22:72:94:04:62:ae:e7:6d:45:b7:d9:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E7:00:D3:C5:E0:3F:96:33:7E:65:CD:67:98:3B:C1:F3:9A:DE:9D
            X509v3 Authority Key Identifier:
                keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:c1:cc:78:c4:76:6e:cd:8e:56:33:48:60:d4:e9:d4:78:
         80:63:41:b4:bf:60:9c:eb:7c:4d:45:ad:67:43:da:a4:ca:22:
         db:d8:1e:6f:d0:89:48:31:80:84:3f:0b:28:56:ef:e4:b0:ce:
         92:4d:e9:5d:ff:e8:e3:6b:86:8b:f4:3d:79:25:75:ac:d2:fd:
         d5:0d:88:c3:f3:3c:cc:82:01:21:69:96:6e:a6:77:6e:6c:b7:
         b4:a0:a0:88:ad:8e:84:dd:da:a3:7e:fe:2d:bb:9e:4c:21:28:
         35:5c:ea:99:43:71:ce:c0:49:e9:70:f2:6e:a6:96:fb:71:26:
         c6:71:8d:a8:3c:d5:61:f8:fe:7d:2e:b8:15:04:bf:9d:09:2a:
         60:a5:69:cf:50:4e:a2:30:a5:41:c6:86:17:f4:1e:21:c3:95:
         3d:ea:4f:37:5f:09:f8:32:01:8a:fd:cf:35:0b:72:4f:b6:76:
         5a:45:7b:c0:62:81:b3:12:f3:59:7d:ab:d7:dd:be:fb:12:fd:
         fb:8b:4e:ba:e5:ee:10:0f:02:22:86:ad:93:38:94:3a:63:bc:
         3d:3a:60:ea:15:dc:5e:9d:21:37:26:84:3e:8e:d6:41:70:9f:
         82:24:7a:f3:dd:12:dd:93:dc:bb:54:ac:da:22:90:0f:30:2d:
         d9:f0:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:25 2026 by rpki-client