This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File:                     LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier:          hrncSZlL3s13CFoiNPgITQjg8cf9A9uYcQeg27fe9sk=
Subject key identifier:   72:99:CE:8E:63:BE:8A:F3:8D:29:5C:20:C7:86:42:02:C7:70:CD:5B
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer:       /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial:       019C42EAE6E517A3F62C4CAB3AFB703B62D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number:          090A
Signing time:             Mon 09 Feb 2026 15:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:16 +0000
Files and hashes:         1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
                          2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: lrM58tSLk7B+vCNHPSy1lb8YXCLP9W1RzKyJToc4Ux0=)
                          3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:e6:e5:17:a3:f6:2c:4c:ab:3a:fb:70:3b:62:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
        Validity
            Not Before: Feb  9 15:00:16 2026 GMT
            Not After : Feb 10 15:00:16 2026 GMT
        Subject: CN=7299ce8e63be8af38d295c20c7864202c770cd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:9a:fd:e5:81:36:d9:7b:3c:fd:0a:f1:97:
                    70:97:37:1e:6b:2b:b7:01:25:2c:45:56:99:6f:df:
                    54:5b:ec:7b:45:5a:29:37:cd:a9:06:86:2d:84:72:
                    c6:b5:9c:a9:34:dc:26:67:79:5a:3d:23:d8:43:a6:
                    7a:d2:5d:90:14:b3:92:8c:a4:1b:68:e0:3f:f0:0b:
                    9a:70:45:d0:5a:97:b7:d6:b0:19:91:17:0d:b9:ea:
                    90:ed:40:80:d2:b0:22:e7:61:4c:24:81:68:31:c1:
                    1d:d9:aa:59:e2:8a:d8:a7:2c:ac:52:d9:cb:cd:e9:
                    a6:ba:28:48:12:d4:68:b6:9c:87:11:ed:dc:11:95:
                    86:dd:be:03:18:15:9e:ee:06:ac:93:8e:63:fa:77:
                    c8:48:2f:61:8a:6b:c3:04:a7:79:e6:f6:56:2f:16:
                    f3:c1:bb:3e:0d:58:a1:11:64:02:50:f5:60:48:46:
                    ea:56:0d:61:9b:07:eb:81:f7:9f:a4:63:45:2b:1c:
                    f3:c7:8b:50:ab:6e:19:95:64:cf:77:41:5c:f0:bc:
                    04:15:40:22:3e:3e:43:7d:94:ec:b8:b9:a0:28:5a:
                    21:fb:0e:65:b9:b8:7b:57:d8:bc:da:2f:b5:0c:bd:
                    26:1b:33:62:c3:2a:71:c9:fb:2b:e6:b4:2b:a9:a3:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:99:CE:8E:63:BE:8A:F3:8D:29:5C:20:C7:86:42:02:C7:70:CD:5B
            X509v3 Authority Key Identifier:
                keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:78:76:16:c9:6a:ad:c2:8e:8c:4a:2d:b4:87:b9:6b:23:dd:
         7d:62:ae:5d:a0:78:7d:ec:09:9a:97:11:ca:01:02:63:14:69:
         8b:5c:1b:a7:cc:e9:aa:99:13:c2:19:74:68:88:80:b4:07:1c:
         5e:2b:69:ae:6d:06:e5:22:b6:f0:73:1b:72:fa:06:a9:34:f0:
         09:34:39:83:7e:4e:27:7d:05:02:d1:ab:d0:a3:3a:48:c9:8d:
         c1:53:9c:af:fe:60:f5:97:98:89:03:4b:ff:cd:1c:cb:49:06:
         61:b2:84:c5:5d:3c:f4:3d:d3:c0:87:82:f7:10:61:52:37:2d:
         6c:0c:34:cf:02:af:74:f6:b9:d4:6d:65:0b:b8:1e:5a:05:27:
         43:fe:8c:20:02:9a:13:9a:44:89:1e:51:a2:04:c6:11:52:1f:
         49:1e:94:72:10:98:05:04:6f:3a:d3:05:18:c1:fa:4d:7a:f5:
         ef:a2:da:9b:5b:da:82:7f:18:12:31:69:e4:fb:41:a7:d0:93:
         50:c9:a4:55:7c:31:51:d1:13:f9:16:2d:f9:75:cd:f3:82:d3:
         b4:3a:27:7a:4b:2b:d5:c7:67:d5:52:57:ce:26:c7:dc:37:ac:
         7a:15:7e:e2:25:ca:df:c5:54:72:f2:74:d0:22:05:0a:58:fe:
         9a:e3:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:10 2026 by rpki-client