This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File:                     LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier:          0gXAVThrYcic6/M2nVV8UMssAGLYtRj59mg3pkBCITQ=
Subject key identifier:   39:4C:0A:7E:50:0D:EC:EA:46:DE:3A:5E:2F:15:B6:02:CC:66:A7:79
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer:       /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial:       019BD7A191BAE8D627C6BA6740216A92F8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number:          07B2
Signing time:             Mon 19 Jan 2026 19:00:48 +0000
Manifest this update:     Mon 19 Jan 2026 19:00:48 +0000
Manifest next update:     Tue 20 Jan 2026 19:00:48 +0000
Files and hashes:         1: 2WFOqZZA2yIUnQ_6eth3jx2NPnU.roa (hash: z8D6G5qAyZtOctuyLt0W9PyzjKIioqDo4g6gtUqBJsA=)
                          2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: 9SJjJkMNo2TvR06COTPhLbRK3BEqNLGUqLGikS10zew=)
                          3: ibmc9wsJZvcLnKLI-HoZNttO1zA.roa (hash: xpCzDqZRfT8zeb7gy3XI7XFp4/7LKgH6afs/PfJpe7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:a1:91:ba:e8:d6:27:c6:ba:67:40:21:6a:92:f8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
        Validity
            Not Before: Jan 19 19:00:48 2026 GMT
            Not After : Jan 20 19:00:48 2026 GMT
        Subject: CN=394c0a7e500decea46de3a5e2f15b602cc66a779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:9d:45:63:59:a8:96:cb:73:79:01:f3:05:
                    9e:52:d6:7a:e6:1a:a6:d1:63:69:2e:6c:78:0a:98:
                    ca:1f:45:7b:34:68:69:ca:4f:10:cc:5f:d9:d9:8f:
                    d0:0d:91:60:38:09:f8:15:a4:0a:eb:34:00:7f:8b:
                    96:e3:e6:20:a6:51:dc:74:95:c9:4e:6d:e7:f4:3c:
                    f6:29:1c:8c:47:29:44:c7:1d:84:7f:8d:a1:0d:58:
                    04:b4:0e:b4:af:d9:50:6f:c1:97:63:6e:50:a8:c7:
                    f5:0d:48:b0:38:fd:2d:70:bb:17:77:58:71:35:1a:
                    9d:1f:8b:5e:f2:c8:8b:af:75:f5:26:20:9d:1b:92:
                    87:d7:cc:e4:8f:5f:7e:a0:d4:76:bc:c8:1c:56:a2:
                    e5:04:5a:b3:a7:af:19:78:ac:ac:b2:0b:9c:d7:ce:
                    d5:3e:70:19:fa:8b:18:ae:0d:b7:d6:18:65:7c:15:
                    f2:57:0a:94:71:e6:4b:c1:22:07:12:02:f9:1e:cd:
                    23:7f:44:2a:20:bf:77:8b:d6:79:26:97:93:0b:19:
                    9d:39:95:14:1c:c9:c6:86:be:f1:4c:67:6a:52:f1:
                    2d:11:d8:2e:b0:8b:99:37:75:3f:26:27:a4:db:ad:
                    1c:ea:ed:c2:b9:3e:25:81:93:6f:b0:ce:3d:33:4d:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4C:0A:7E:50:0D:EC:EA:46:DE:3A:5E:2F:15:B6:02:CC:66:A7:79
            X509v3 Authority Key Identifier:
                keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:28:6f:4b:1f:de:83:79:d5:7f:f2:05:2d:93:d3:c3:70:
         94:82:d8:64:c8:d8:4c:1f:5c:70:ca:da:0b:ed:0f:e7:58:8d:
         50:f0:8b:77:c3:2f:ae:fa:69:35:d7:e3:98:6d:7c:b8:04:cb:
         19:82:48:13:6e:9f:68:3b:c6:ec:24:a4:68:97:ac:d5:85:64:
         44:53:ef:ef:ce:52:70:1e:22:e0:b7:1a:97:f5:a4:43:03:38:
         0e:2c:d5:50:3c:df:83:22:ae:8b:5e:d2:6c:00:99:be:b9:9c:
         91:3b:48:4d:0b:03:9c:f1:3c:86:39:92:b0:aa:4b:c9:81:62:
         89:42:54:19:16:57:cf:55:41:3f:29:5d:77:1d:cf:ab:9f:c0:
         55:63:07:c4:42:b8:71:60:66:7b:51:59:62:9c:bc:d5:8e:6b:
         03:b0:26:d1:ad:ba:92:c0:3a:4b:21:11:de:23:98:05:54:52:
         04:11:0b:7c:2f:c3:2e:4d:22:d1:58:bf:6e:56:3f:52:c9:cb:
         4e:58:de:a4:d9:dd:bc:3c:08:e9:0b:bc:9b:11:ca:0a:a8:6f:
         93:27:74:26:25:3d:d8:6f:f1:b5:9f:f6:ae:28:e2:8d:53:f0:
         b6:4b:4f:39:93:da:50:e6:ed:64:be:5b:eb:d8:7e:17:3c:fa:
         76:d0:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:46 2026 by rpki-client