This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File:                     ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier:          25gMmuA59B3Oq6c1ofUvhTETCikaeCYfY6at4vFK1M0=
Subject key identifier:   07:7F:B6:45:8D:90:D3:C6:58:5A:83:6F:F7:B0:AB:A5:5A:FD:F3:AD
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       019C1CF100294FF10B5EE5195D9CE67E16E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number:          0ADC
Signing time:             Mon 02 Feb 2026 06:01:22 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:22 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:22 +0000
Files and hashes:         1: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: B8jKyDbJGc30ISoqObkVQDEWcfxn9Wlv2pwtsN8zUU0=)
                          2: tMCBLo17Jcu9nYj5dm70vUGR7Kw.asa (hash: 6ybtRyvqW2iRo23vB9EOMEnUyiFtXyklB8ljlHnEAdI=)
                          3: u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa (hash: RjVOex1KtOTitdhI4w1UNBYIq1OmgpAnHu9XT16yu5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:00:29:4f:f1:0b:5e:e5:19:5d:9c:e6:7e:16:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Feb  2 06:01:22 2026 GMT
            Not After : Feb  3 06:01:22 2026 GMT
        Subject: CN=077fb6458d90d3c6585a836ff7b0aba55afdf3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:22:0c:39:78:e2:6a:d4:e3:1c:7e:6a:55:
                    03:b5:d4:04:20:2a:fb:12:d8:f3:ad:fc:1a:ed:4a:
                    9a:bc:e3:f2:7e:42:c9:2a:b4:0d:f8:14:68:34:5c:
                    09:d1:dd:e3:f2:5c:f9:a8:cb:31:79:34:22:af:bd:
                    92:99:eb:32:fb:0b:a9:43:a7:41:7d:63:f4:16:46:
                    2b:4e:c9:32:f1:0f:02:27:fb:2b:3b:1a:18:83:4c:
                    37:6b:97:2c:e4:3d:a7:53:be:11:83:a3:df:90:00:
                    6f:ff:ab:9d:f0:56:7b:42:9a:7f:5a:6a:c8:16:81:
                    5d:c8:d8:d7:af:8e:31:60:8a:be:7c:f2:15:18:18:
                    ef:14:1e:0e:64:0b:df:d2:fd:9f:ab:f8:70:9a:3a:
                    96:58:2f:ee:3e:c4:72:79:c8:03:4a:fe:36:0c:66:
                    1e:f5:a4:38:51:94:63:88:3b:bb:37:8c:ae:21:bb:
                    c3:27:1e:ec:51:73:8b:3e:24:7e:8a:21:c3:aa:08:
                    5f:ac:36:61:e2:64:31:2f:43:3d:76:2f:8c:9a:4a:
                    d8:88:4e:71:7c:4b:56:91:cb:80:24:97:91:f8:dd:
                    60:df:71:f4:13:87:10:f7:e5:33:c1:58:ae:0a:4a:
                    ff:5b:33:7a:6c:59:0c:10:42:90:2a:e2:e5:95:0c:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:B6:45:8D:90:D3:C6:58:5A:83:6F:F7:B0:AB:A5:5A:FD:F3:AD
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:6d:36:9a:10:e7:31:e1:a1:60:44:4a:ea:3c:5b:2c:e8:
         41:9d:1d:f7:aa:3b:f0:2f:6a:11:d6:fa:92:a5:6b:fc:4d:d9:
         d0:86:51:02:a7:7b:f4:7f:ba:d3:02:93:61:8d:ee:b1:49:50:
         bf:b9:bd:2c:eb:01:43:df:dc:b6:4a:d9:83:06:ad:20:33:bd:
         a9:af:94:68:4c:76:7d:12:4b:59:83:b6:80:7c:da:ae:53:0a:
         b1:b5:7a:aa:97:4b:49:a7:3d:0a:4e:e0:fd:52:74:c8:95:e0:
         ed:61:3b:87:2d:55:68:dc:7a:84:cc:d5:20:98:a9:0b:ed:ff:
         13:89:f2:0e:c6:2b:75:4f:7f:b3:2c:0f:9f:18:30:b7:e0:55:
         b0:82:ff:88:28:24:9f:20:3d:6d:42:2e:7d:de:a0:c8:68:e5:
         60:d3:40:43:1e:17:ad:3b:e5:f5:84:84:c5:45:aa:96:2d:92:
         58:51:8e:c7:87:e4:c9:1b:98:02:c3:d1:d4:75:d7:82:aa:f8:
         8d:55:f0:2f:7e:7d:1e:a1:61:28:0c:5d:93:81:a7:44:b7:de:
         10:40:6e:5e:e0:81:ba:0d:c9:02:09:8d:be:29:00:71:57:13:
         ec:be:b6:29:37:31:d8:6c:f4:df:c6:d0:cd:5a:93:46:19:10:
         6c:48:16:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwc8QApT/ELXuUZXZzmfhbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDcwYmY4MGEwN2M5ZmZjYmVmMGNkODQ2NWI0NThkNjEz
ZGNjODUwHhcNMjYwMjAyMDYwMTIyWhcNMjYwMjAzMDYwMTIyWjAzMTEwLwYDVQQD
EygwNzdmYjY0NThkOTBkM2M2NTg1YTgzNmZmN2IwYWJhNTVhZmRmM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn8iDDl44mrU4xx+alUDtdQEICr7
Etjzrfwa7UqavOPyfkLJKrQN+BRoNFwJ0d3j8lz5qMsxeTQir72Smesy+wupQ6dB
fWP0FkYrTsky8Q8CJ/srOxoYg0w3a5cs5D2nU74Rg6PfkABv/6ud8FZ7Qpp/WmrI
FoFdyNjXr44xYIq+fPIVGBjvFB4OZAvf0v2fq/hwmjqWWC/uPsRyecgDSv42DGYe
9aQ4UZRjiDu7N4yuIbvDJx7sUXOLPiR+iiHDqghfrDZh4mQxL0M9di+MmkrYiE5x
fEtWkcuAJJeR+N1g33H0E4cQ9+UzwViuCkr/WzN6bFkMEEKQKuLllQwhEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAd/tkWNkNPGWFqDb/ewq6Va/fOtMB8GA1UdIwQY
MBaAFJXXC/gKB8n/y+8M2EZbRY1hPcyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEt
NjY3OGViODFiOGIwLzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEtNjY3OGViODFiOGIw
LzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVxtNpoQ
5zHhoWBESuo8WyzoQZ0d96o78C9qEdb6kqVr/E3Z0IZRAqd79H+60wKTYY3usUlQ
v7m9LOsBQ9/ctkrZgwatIDO9qa+UaEx2fRJLWYO2gHzarlMKsbV6qpdLSac9Ck7g
/VJ0yJXg7WE7hy1VaNx6hMzVIJipC+3/E4nyDsYrdU9/sywPnxgwt+BVsIL/iCgk
nyA9bUIufd6gyGjlYNNAQx4XrTvl9YSExUWqli2SWFGOx4fkyRuYAsPR1HXXgqr4
jVXwL359HqFhKAxdk4GnRLfeEEBuXuCBug3JAgmNvikAcVcT7L62KTcx2Gz038bQ
zVqTRhkQbEgWjA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:59:16 2026 by rpki-client