This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File:                     LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier:          vmYDHKyIOsOJVtMPdal+Xtj2kkibYTvSh7txl/eCGwM=
Subject key identifier:   7D:DF:34:AE:99:6E:18:51:C2:50:C8:17:A7:38:67:31:B5:9D:C1:3F
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer:       /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial:       019C42EB04D6C82384977E2839669107C35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:24 +0000
Files and hashes:         1: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: D1/yzLUKj9xDu2i4sNg+I9PQywxra8oykoEd6qPiJiM=)
                          2: xJrl572dGNTyomn-v8TCuFg7I1A.roa (hash: 2x5cy4pJUQbMIYLAtAfVd42ocgzotDRP+XX1VY3Dv3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:04:d6:c8:23:84:97:7e:28:39:66:91:07:c3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
        Validity
            Not Before: Feb  9 15:00:24 2026 GMT
            Not After : Feb 10 15:00:24 2026 GMT
        Subject: CN=7ddf34ae996e1851c250c817a7386731b59dc13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:7f:90:16:f1:79:45:8a:39:49:b5:93:c0:
                    4e:68:8f:62:7b:13:a1:cc:c4:c4:d8:f0:5f:6f:d4:
                    42:b5:76:77:a3:f2:f1:27:ef:73:74:2f:bd:12:79:
                    aa:09:ae:a9:e7:1d:30:b7:c9:49:6a:31:84:4b:94:
                    26:5b:7f:00:f0:44:10:3b:42:56:64:ab:f2:b5:89:
                    78:3e:dc:04:4f:a8:5a:27:f5:78:1a:27:05:a6:82:
                    79:74:c4:9c:8c:f4:fb:17:63:7d:b3:7a:7d:a9:ad:
                    e5:3b:33:b6:3e:94:bb:b5:60:e0:6c:bb:95:df:66:
                    74:69:16:b1:3c:78:ad:31:16:0a:c7:0f:d8:dc:15:
                    aa:e2:b4:15:5e:83:fa:46:d4:4a:33:ae:a9:d9:c0:
                    4a:44:70:24:5c:f5:04:4f:96:56:06:a7:62:1a:91:
                    51:de:2d:90:37:28:51:db:79:93:42:37:14:0a:1f:
                    c3:9d:b6:43:f8:03:58:84:0f:26:97:49:56:1a:10:
                    21:86:63:6e:2e:b7:05:e3:ea:19:8b:f7:22:5c:b9:
                    57:f1:7c:db:11:00:52:42:9a:ce:2e:c3:c7:41:97:
                    a2:2b:f1:cb:e8:19:9c:57:95:b3:2b:71:3b:70:53:
                    f4:49:f3:5f:1a:e5:72:e6:67:6e:d1:fd:ad:75:a9:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DF:34:AE:99:6E:18:51:C2:50:C8:17:A7:38:67:31:B5:9D:C1:3F
            X509v3 Authority Key Identifier:
                keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:42:e5:e9:d9:af:3a:9e:64:31:97:cc:8a:fb:c7:6d:1b:a3:
         e8:98:00:aa:83:fd:3e:dc:62:0a:aa:bd:3c:a5:a8:08:b1:a3:
         61:41:13:63:82:39:15:13:a0:14:fe:9c:ea:1e:2b:c6:cd:0a:
         fc:9f:c7:c7:20:3a:59:bb:3e:d5:b0:76:8d:4c:8d:0f:38:5e:
         38:06:c8:00:7f:8e:3d:db:43:06:b6:08:10:79:fc:db:90:ec:
         2e:8b:b1:a7:5b:45:62:72:9f:73:38:4c:03:4d:6e:6e:30:56:
         6e:9a:f9:5c:ff:02:1f:ad:a6:c9:21:f0:60:5a:8b:81:0b:77:
         bc:b7:f3:0a:dc:d7:4d:d5:1a:92:c8:78:e6:5d:98:ca:0e:69:
         ca:17:f7:49:52:ba:30:92:e6:80:71:f1:88:a7:66:c6:55:23:
         95:81:95:14:25:fb:37:59:38:5e:2f:2c:72:7c:0b:d1:c6:41:
         99:10:09:39:5c:4f:4b:78:f7:19:df:6f:52:20:23:d6:20:1f:
         6d:df:a4:19:40:8d:77:69:5b:d8:fb:74:9e:f9:a8:6f:1e:18:
         49:78:eb:37:96:98:d9:4c:12:3f:04:1c:b2:73:27:23:87:5a:
         9d:9f:23:07:5b:21:ad:64:c4:87:3e:e5:76:57:61:a4:bf:90:
         bf:36:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:50:59 2026 by rpki-client