This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File:                     LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier:          R9JUHBrcE7qcgs0PNquyeehY1k7oXBb7s3RrfcoQfEo=
Subject key identifier:   93:D5:63:A0:0A:32:36:63:38:1B:FA:0F:A5:4A:88:F4:D7:34:96:7B
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer:       /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial:       019C420F8B2A85A71C90A4952935FEA3E16B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 11:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:40 +0000
Files and hashes:         1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: i7iWsiM02wNoaEptpifA9UGfPDo3GpyIrBlmix0Vsec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:8b:2a:85:a7:1c:90:a4:95:29:35:fe:a3:e1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
        Validity
            Not Before: Feb  9 11:00:40 2026 GMT
            Not After : Feb 10 11:00:40 2026 GMT
        Subject: CN=93d563a00a323663381bfa0fa54a88f4d734967b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:17:3e:15:df:a3:dc:5a:9a:a4:ca:31:38:
                    2c:f1:74:37:56:d9:87:81:08:36:bd:f9:fc:65:00:
                    12:f9:dd:b7:e6:0b:8d:09:d6:71:18:40:97:2c:13:
                    7a:67:b4:ab:6b:07:a7:c4:17:f4:47:c2:e1:93:db:
                    20:b7:ee:6a:18:0d:37:1b:fb:0b:2a:1f:2d:b5:66:
                    fc:98:36:b0:18:bc:f0:47:2f:d9:f7:f9:8a:90:4a:
                    17:90:2e:fe:e9:51:8d:71:a3:c1:3b:54:8c:ef:bd:
                    39:d8:16:21:ef:89:9b:af:75:3c:79:18:a6:dc:75:
                    0e:6b:cf:1c:33:46:75:1f:07:fe:83:b0:11:d1:5d:
                    a0:78:1c:4f:d1:ec:37:8e:d1:25:51:3f:da:db:12:
                    e0:0a:39:1c:95:13:d0:b0:4c:ef:8a:53:d6:0a:4c:
                    bb:72:75:7b:dc:ea:82:31:4d:1a:1e:df:76:ed:ae:
                    b0:43:f4:29:28:25:88:95:e3:4b:61:65:c9:83:c1:
                    0a:e4:57:9c:4d:4f:f9:c2:0b:93:1e:5a:22:0e:b9:
                    1d:09:3e:49:68:37:49:a9:31:8b:1e:d8:0e:02:37:
                    3b:b3:1f:6b:a2:04:40:b0:a5:99:d9:54:1a:7a:0c:
                    c7:d2:11:52:11:79:4a:03:2c:41:a1:d0:6a:08:1b:
                    3e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D5:63:A0:0A:32:36:63:38:1B:FA:0F:A5:4A:88:F4:D7:34:96:7B
            X509v3 Authority Key Identifier:
                keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:51:c0:1d:66:2b:2d:58:91:61:2f:81:ba:76:a6:be:5c:bf:
         41:92:38:6c:24:a8:71:12:ec:20:bc:4f:48:21:45:4f:15:6d:
         0e:d5:b2:41:fe:1d:93:19:4b:8b:96:56:48:f0:3b:36:e8:ad:
         2a:f0:4b:ca:02:e2:c1:c3:bc:19:76:04:49:7c:fb:7a:aa:94:
         08:2b:84:8d:07:e7:41:79:e8:c9:3c:ad:89:61:9c:4e:a6:a8:
         7c:90:4b:07:de:d3:6e:16:88:16:08:71:7e:fb:2d:5c:22:f5:
         c8:62:16:55:b1:c4:54:00:93:e9:1c:73:a1:b0:e7:64:ac:75:
         f1:05:f4:49:37:38:e6:07:26:85:e3:42:42:de:e7:9e:31:32:
         c7:26:4f:6f:b1:62:89:08:62:8c:dd:c8:15:21:29:6a:2e:2d:
         b6:1c:13:2c:44:48:12:67:47:10:3d:91:fe:2a:17:55:93:f0:
         d9:ea:ef:31:65:83:a2:16:05:21:85:48:d3:03:97:04:68:01:
         aa:6d:ee:5a:74:c0:63:5b:4b:7a:f9:ec:e2:53:06:94:96:73:
         bd:46:bb:2e:03:df:79:d5:b0:92:68:e8:28:cf:20:b5:ef:05:
         9a:2a:48:d1:dd:e4:7b:20:0f:71:23:78:4f:d7:f6:3a:8b:a4:
         a9:48:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:58 2026 by rpki-client