This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File:                     lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier:          08zZ3gYDHI4huwiCnDhe0qmlXlwLp3tjfMWk3uetYs0=
Subject key identifier:   04:C9:85:68:AF:BB:1B:3D:64:43:03:3C:F7:F1:49:F9:A1:DB:43:21
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer:       /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial:       019BA5A2A649C84CE36EFD0CF021BFFA0C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number:          10D9
Signing time:             Sat 10 Jan 2026 02:00:58 +0000
Manifest this update:     Sat 10 Jan 2026 02:00:58 +0000
Manifest next update:     Sun 11 Jan 2026 02:00:58 +0000
Files and hashes:         1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
                          2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
                          3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
                          4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: aByf+cUkIkIjq3J5OIq+hUU8G5B044tXBeAYozFNAh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a5:a2:a6:49:c8:4c:e3:6e:fd:0c:f0:21:bf:fa:0c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
        Validity
            Not Before: Jan 10 02:00:58 2026 GMT
            Not After : Jan 11 02:00:58 2026 GMT
        Subject: CN=04c98568afbb1b3d6443033cf7f149f9a1db4321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:9c:8d:08:67:01:03:32:30:2b:19:d3:ad:
                    87:4e:8b:68:a6:f4:57:ef:2b:a0:87:dd:de:cd:8c:
                    04:b4:5b:99:5a:bc:cb:04:50:30:4e:51:dd:a0:b5:
                    4f:eb:36:ce:73:1c:7c:4c:6e:a8:36:c7:9e:8f:55:
                    bd:42:63:56:b6:8c:22:37:c3:11:60:c6:00:e1:24:
                    8f:1f:6f:b4:8f:e6:51:de:6a:ff:8a:9a:fa:75:3a:
                    23:f8:5f:4c:5d:1c:11:67:1c:1a:42:18:6c:2a:63:
                    8a:12:38:10:ff:be:cb:fa:92:24:65:f1:40:d3:19:
                    7b:41:6a:8c:63:69:8f:4c:94:3f:27:c4:ce:85:81:
                    14:bb:ab:ee:cd:b7:dd:8c:c7:e8:dd:2b:37:aa:48:
                    18:41:5b:14:97:1f:5a:2f:a2:0a:30:d3:f2:5a:48:
                    76:99:8c:eb:69:dc:e3:60:ab:5b:9d:bc:5f:68:96:
                    99:16:f7:93:83:06:a8:86:8a:2b:e9:5a:55:eb:13:
                    c8:9f:82:a0:91:7b:a6:76:02:8e:11:48:bf:6c:04:
                    76:89:45:7c:00:66:a9:8a:b5:05:0f:5f:e2:26:8e:
                    00:35:ee:40:a9:66:57:b0:10:97:d3:ba:23:aa:c4:
                    01:50:88:5a:31:4d:c5:33:54:ee:9f:83:b7:71:63:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:85:68:AF:BB:1B:3D:64:43:03:3C:F7:F1:49:F9:A1:DB:43:21
            X509v3 Authority Key Identifier:
                keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:fb:18:0e:8a:34:04:25:6b:9d:3e:19:00:55:fb:93:69:
         99:0d:ec:5f:d2:63:94:c6:8f:d8:6d:47:c3:b1:88:3a:29:df:
         10:d6:bd:da:b0:a1:ed:94:55:62:f5:3e:d0:c4:12:e1:13:78:
         12:d7:99:3f:de:63:de:e5:3d:c3:ca:ca:ac:22:fe:9a:8b:de:
         5e:5e:14:57:ea:2b:33:9d:93:15:f5:5d:a8:16:d2:ab:55:1c:
         59:9d:99:eb:b0:e7:63:9d:29:2e:66:0d:d4:13:1b:a0:af:29:
         35:d8:c4:90:eb:b4:26:7a:03:34:10:69:67:e5:e3:7f:15:50:
         0d:69:8c:3e:84:6b:37:ac:e9:10:87:6d:4b:89:c5:9b:6d:29:
         80:39:04:3f:df:5a:c0:7f:e6:1f:e5:fa:1c:7a:6c:85:38:14:
         64:a9:0e:f8:14:9c:cb:07:5e:d5:aa:2a:33:fb:98:8a:da:bf:
         b3:34:eb:a1:94:3e:ca:4b:16:15:a7:fd:53:ca:e4:40:cd:08:
         c7:f3:9e:5f:3e:9b:c1:af:64:28:8f:80:ff:a4:92:f1:ef:27:
         da:1d:c8:b6:07:3b:ea:da:81:6c:6b:0c:49:41:f8:51:eb:d6:
         56:34:a1:c7:d5:23:d3:94:20:da:74:22:0c:54:c8:26:be:92:
         40:39:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:56:17 2026 by rpki-client