This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
File:                     lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft (raw, json)
Hash identifier:          7OheSwc7eBGfxW7FgG9noDUMjHyNmg0DKywj1uHaaNU=
Subject key identifier:   2F:4F:C9:3F:B1:31:2F:BE:93:F0:52:1A:0F:62:D2:1C:A2:85:6D:2A
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Certificate issuer:       /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial:       019BF72DB739F77B3EC95A2CBBD3E932579D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
Manifest number:          0274
Signing time:             Sun 25 Jan 2026 22:02:06 +0000
Manifest this update:     Sun 25 Jan 2026 22:02:06 +0000
Manifest next update:     Mon 26 Jan 2026 22:02:06 +0000
Files and hashes:         1: P3bBBi_YBaE4cV_VtfNF8i696oo.roa (hash: y1a/3A3vOIwmjOY1TgiM92LxR/aRkfoi3hKdkrKBG6Q=)
                          2: ZXdyEyK3SaId4Xur9UCKxGCjI8c.roa (hash: zQ+cgbxBxeFyJgysTpnSUkOVuSjMGCgEsR1NJ1pLGCk=)
                          3: lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl (hash: fMH7TkQmxLD6vFIwczuDUTdrl2Na4ivy+U9fbvd8n2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:b7:39:f7:7b:3e:c9:5a:2c:bb:d3:e9:32:57:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
        Validity
            Not Before: Jan 25 22:02:06 2026 GMT
            Not After : Jan 26 22:02:06 2026 GMT
        Subject: CN=2f4fc93fb1312fbe93f0521a0f62d21ca2856d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:a4:28:94:ad:6e:c2:e0:0e:8f:77:82:00:
                    12:38:e2:4f:ef:67:b6:c8:e6:05:87:2b:5b:65:21:
                    68:f8:fd:fb:d8:08:b6:c5:10:db:e4:ba:ae:40:57:
                    44:ed:05:30:12:1a:a7:99:58:1e:3f:78:51:30:f3:
                    ce:ac:0e:5a:0f:63:6a:bb:5f:88:fd:82:9a:a0:b7:
                    b8:7c:c2:89:9c:3d:d0:33:60:c2:0c:0d:22:82:2d:
                    62:3e:bf:f5:27:66:0c:8c:fe:4b:d7:d0:61:08:b3:
                    b7:30:17:34:15:a0:1a:11:01:85:88:9e:a0:25:9c:
                    1b:36:fc:1a:4e:2a:65:d5:7f:c3:eb:36:c9:91:48:
                    6d:81:16:c0:61:2e:39:84:ab:4d:81:88:47:7a:0e:
                    b9:3b:60:43:3b:df:29:b4:3a:7a:f1:1c:18:e1:0e:
                    18:27:6d:4b:0c:e9:66:85:d9:fa:8f:3d:17:07:ea:
                    e6:a3:13:72:eb:50:45:ac:4a:f4:24:22:9c:85:66:
                    14:69:2e:3e:8a:dd:10:92:88:3e:0d:00:82:51:5c:
                    c9:79:cd:72:62:61:4c:41:ed:2f:e8:e9:fc:90:20:
                    19:66:98:bf:54:69:df:32:32:1a:f8:16:28:36:10:
                    02:27:75:26:75:e1:81:65:7a:cc:3c:2e:b5:01:25:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4F:C9:3F:B1:31:2F:BE:93:F0:52:1A:0F:62:D2:1C:A2:85:6D:2A
            X509v3 Authority Key Identifier:
                keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:f6:05:24:b5:85:97:8e:2a:cc:6d:8a:80:e6:23:71:ab:
         67:1f:63:66:5b:35:4d:d5:1a:9e:42:91:ef:1e:14:da:9c:10:
         1d:ad:21:d2:1f:cc:fa:4c:50:fb:9e:30:58:cc:de:37:b8:54:
         48:4a:5c:4d:59:7a:83:11:c1:b9:29:ae:2a:10:e7:ff:4d:16:
         a3:bf:07:c8:ae:85:df:64:c1:9f:94:8d:35:0d:64:b2:a3:1f:
         06:be:58:02:5e:db:e5:60:27:6b:30:09:64:a6:e0:c7:93:3d:
         25:40:1e:a5:de:d8:88:a4:50:5c:53:e4:d7:9f:64:be:f8:bd:
         ad:a2:fe:ba:a3:08:bf:98:c0:e8:de:a9:ba:be:ab:ef:41:e2:
         b5:46:b8:c8:9d:2f:ad:81:b6:2d:18:4b:97:89:c2:d9:b8:99:
         5e:71:11:ec:87:52:62:59:a1:f8:f8:52:db:89:54:79:cd:d6:
         87:94:fd:08:24:1f:9f:2b:fa:db:2d:5b:1a:c8:49:7d:27:cd:
         cf:8d:f6:7b:7c:73:78:7f:18:3d:68:15:41:33:53:cb:27:13:
         ff:1b:6c:ba:bc:cb:2b:30:8b:38:4a:c3:c1:33:ea:d4:39:f4:
         0b:8c:ba:52:c7:74:ef:90:72:96:a9:99:06:99:79:45:44:e5:
         1e:d9:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:51 2026 by rpki-client