This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          djN/D2L0V19tuxyWViM5sCO6eIVZcmEieNOjpGnS4GM=
Subject key identifier:   FD:B8:33:66:B4:AA:76:85:1E:DA:47:86:D4:96:F5:86:55:EC:0E:CA
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       019BF83FDD8633363F412A195D30B3E25366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1828
Signing time:             Mon 26 Jan 2026 03:01:33 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:33 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:33 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: RV5fJLKa8QhH1Sn2fda7Hkxt532gs/ZltutOQlM2KDs=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:dd:86:33:36:3f:41:2a:19:5d:30:b3:e2:53:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Jan 26 03:01:33 2026 GMT
            Not After : Jan 27 03:01:33 2026 GMT
        Subject: CN=fdb83366b4aa76851eda4786d496f58655ec0eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:33:ba:e0:3e:71:3c:ea:30:30:8e:25:b0:
                    86:49:ab:3b:77:d7:dd:e4:3e:4d:71:73:fc:12:32:
                    98:aa:83:79:5a:ee:eb:b1:2b:e0:92:62:fa:4e:ff:
                    a1:0b:d7:eb:fe:22:ee:71:11:c2:18:88:8c:43:9c:
                    86:c8:02:4b:dc:6f:9c:41:4a:20:32:30:eb:cc:e4:
                    97:4a:97:50:67:54:31:89:bf:a7:53:dd:db:c9:b7:
                    e3:cc:a8:20:f6:88:53:f9:55:0a:a3:f9:5d:41:20:
                    57:23:d2:89:06:c5:32:40:a5:50:7b:27:00:cb:99:
                    a2:41:f7:cf:85:c5:02:c4:17:4a:80:ed:ad:c9:db:
                    db:67:30:08:c6:18:db:1e:7b:e7:a1:3a:7d:01:6a:
                    65:b8:44:bf:d2:a1:80:12:ef:cc:30:b2:ea:39:b6:
                    74:7b:b5:f3:4e:47:92:bf:17:0b:e8:8a:4e:ab:4e:
                    a1:77:c9:a4:b0:44:5b:18:cd:7e:5c:7d:8b:ae:2b:
                    46:65:37:6f:32:bb:0c:4b:b2:e4:ce:fa:f5:7c:05:
                    74:ee:90:7b:8d:f4:96:3a:14:78:ba:e2:37:c6:7b:
                    5b:df:ee:69:71:e4:50:a9:e0:d9:54:b0:cc:c2:67:
                    d5:e8:9d:a3:ca:eb:97:8c:d5:cb:b1:f7:74:1c:b4:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:33:66:B4:AA:76:85:1E:DA:47:86:D4:96:F5:86:55:EC:0E:CA
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:32:d7:da:d8:39:57:5a:71:9e:af:d0:99:1b:51:12:a9:
         79:4e:ba:81:c3:bf:72:fd:2e:c1:57:26:56:0f:59:2e:dc:55:
         b0:02:16:6e:d7:12:6f:6f:b1:b6:5f:47:a4:6e:3f:25:6c:b2:
         d6:6d:20:8d:af:af:11:e3:45:0f:01:76:0b:bd:9f:e2:b5:f7:
         a5:22:17:f5:a6:f9:6a:5e:75:32:e4:7b:d0:21:65:23:b2:c9:
         99:6b:e6:bf:38:1f:31:a7:79:79:18:12:63:b5:ae:7d:a6:31:
         24:a7:c2:7a:b9:13:ab:3c:bb:61:0b:71:cc:55:98:d8:6d:39:
         95:d0:17:96:4d:d7:d8:34:52:27:08:31:18:37:4b:60:2a:37:
         fc:30:bc:59:41:14:55:a0:08:7b:b6:44:41:5e:bf:45:08:c5:
         b7:39:5b:df:74:98:da:f1:e3:db:b1:31:dd:12:49:ab:2b:b9:
         70:4e:4a:92:42:d5:1b:73:15:71:8e:2c:dd:a0:b2:48:8a:1e:
         64:67:df:2b:57:f8:d1:33:2c:5b:57:2e:1c:0e:09:45:1b:39:
         79:bb:40:45:f4:a1:2b:94:40:78:32:74:79:5e:9d:03:86:fb:
         39:68:04:1c:cb:89:9f:fa:ad:e2:e0:e9:77:17:0e:30:bf:12:
         53:58:b0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4P92GMzY/QSoZXTCz4lNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjYwMTI2MDMwMTMzWhcNMjYwMTI3MDMwMTMzWjAzMTEwLwYDVQQD
EyhmZGI4MzM2NmI0YWE3Njg1MWVkYTQ3ODZkNDk2ZjU4NjU1ZWMwZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X4zuuA+cTzqMDCOJbCGSas7d9fd
5D5NcXP8EjKYqoN5Wu7rsSvgkmL6Tv+hC9fr/iLucRHCGIiMQ5yGyAJL3G+cQUog
MjDrzOSXSpdQZ1Qxib+nU93bybfjzKgg9ohT+VUKo/ldQSBXI9KJBsUyQKVQeycA
y5miQffPhcUCxBdKgO2tydvbZzAIxhjbHnvnoTp9AWpluES/0qGAEu/MMLLqObZ0
e7XzTkeSvxcL6IpOq06hd8mksERbGM1+XH2LritGZTdvMrsMS7Lkzvr1fAV07pB7
jfSWOhR4uuI3xntb3+5pceRQqeDZVLDMwmfV6J2jyuuXjNXLsfd0HLRezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP24M2a0qnaFHtpHhtSW9YZV7A7KMB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnEy19rY
OVdacZ6v0JkbURKpeU66gcO/cv0uwVcmVg9ZLtxVsAIWbtcSb2+xtl9HpG4/JWyy
1m0gja+vEeNFDwF2C72f4rX3pSIX9ab5al51MuR70CFlI7LJmWvmvzgfMad5eRgS
Y7WufaYxJKfCerkTqzy7YQtxzFWY2G05ldAXlk3X2DRSJwgxGDdLYCo3/DC8WUEU
VaAIe7ZEQV6/RQjFtzlb33SY2vHj27Ex3RJJqyu5cE5KkkLVG3MVcY4s3aCySIoe
ZGffK1f40TMsW1cuHA4JRRs5ebtARfShK5RAeDJ0eV6dA4b7OWgEHMuJn/qt4uDp
dxcOML8SU1iwlQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:09:32 2026 by rpki-client