This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File:                     LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier:          JPRvBr4Sxy82f81EL4PF5GGxzltoRaeiOGAAVyETaao=
Subject key identifier:   19:4E:CF:43:89:DE:F5:16:64:14:4A:E1:75:8F:0C:DF:42:CB:D3:E9
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer:       /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial:       019BF34FDE2634B88760C5BA5B0142C00434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number:          05B9
Signing time:             Sun 25 Jan 2026 04:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:56 +0000
Files and hashes:         1: 6WiXlh5QhCuw_MVwaut0x2jiEEs.roa (hash: qUA6n5/TXrCPUvcsaToKEYv6wtNRYISXJDQml29JrEs=)
                          2: 94_6VQI2I2lo1u38qt6hn9A7wgw.roa (hash: NobqK3i7W7bFpKNzurxj01gS8em3bf9sK5Lxekb+0hU=)
                          3: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: w0Hml1j1Cp3/kqUfAPXb954dJVoxomqT+NbxaV159YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:de:26:34:b8:87:60:c5:ba:5b:01:42:c0:04:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
        Validity
            Not Before: Jan 25 04:00:56 2026 GMT
            Not After : Jan 26 04:00:56 2026 GMT
        Subject: CN=194ecf4389def51664144ae1758f0cdf42cbd3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:b0:87:33:92:38:10:0c:c3:77:cb:98:0e:
                    fb:56:10:04:b9:46:91:e5:ac:07:86:fd:5b:63:0c:
                    17:84:6e:e5:32:78:dc:04:a1:2e:20:f2:26:9c:04:
                    95:fc:eb:df:99:ca:5d:4b:a7:75:be:31:b4:ab:fb:
                    13:fb:3b:5b:9b:e0:3d:b7:e8:93:57:2d:20:ca:53:
                    7e:d7:7d:00:9b:32:90:b8:f8:9f:33:97:32:96:38:
                    16:7f:31:37:45:6e:c5:35:4a:45:05:8f:92:9b:76:
                    45:87:a2:1b:bf:09:85:61:ca:a2:23:ce:d7:f0:86:
                    8e:50:45:39:79:59:6a:16:07:2b:fa:ce:54:a9:be:
                    20:cf:1f:a5:07:5c:ed:08:97:8d:52:42:5d:e6:67:
                    18:8e:53:b0:8c:cd:df:cc:87:2b:1e:7d:87:93:be:
                    3b:c6:eb:46:9c:b7:48:06:c3:12:4a:b8:11:05:7b:
                    5b:48:7f:37:32:62:26:34:cd:8c:18:c5:33:14:7d:
                    b0:c0:f1:3e:35:be:06:7d:83:fe:15:4e:3d:2f:06:
                    66:76:c9:f0:e6:68:aa:27:5f:85:07:37:49:25:a4:
                    1b:e9:2c:b4:3a:3b:9d:ef:1b:95:b3:55:76:36:ce:
                    e7:8d:0d:87:5c:f5:cb:94:c1:6f:ed:fc:fe:4f:cb:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4E:CF:43:89:DE:F5:16:64:14:4A:E1:75:8F:0C:DF:42:CB:D3:E9
            X509v3 Authority Key Identifier:
                keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:3b:c0:e6:f7:72:59:00:38:b4:4e:92:3b:7e:3a:4f:53:
         d7:34:08:8d:48:53:86:c0:b3:83:49:7c:a1:24:96:ab:0f:a0:
         da:5d:50:fb:64:6b:e7:aa:26:04:de:80:8b:10:b8:da:30:8f:
         77:ff:80:2f:17:f4:e3:68:10:0d:ce:8a:ab:20:17:2e:8d:72:
         e2:9d:56:f1:52:aa:2d:12:55:5c:f5:69:83:ce:24:a1:3b:8e:
         15:f5:52:c3:fc:e1:53:af:ac:7b:ed:01:39:5b:95:69:ea:a8:
         d6:5f:4b:eb:e5:30:5c:45:03:91:11:9c:19:bf:d6:4b:3e:09:
         ee:78:22:b0:33:a6:0d:75:6a:0b:dd:97:53:30:61:8a:d8:91:
         32:b9:19:48:67:9e:74:4a:d4:2f:42:1b:71:c1:ef:60:90:c5:
         5f:78:1e:56:3d:32:ab:3e:37:21:1a:fc:24:4f:78:2a:df:ec:
         2a:ea:8c:54:74:08:7c:c7:a8:83:6e:cd:dc:f9:bd:ee:8e:d8:
         d0:36:17:e6:67:b4:21:c2:ae:1a:39:07:b4:c6:cd:3c:f2:bc:
         7a:3c:68:46:ce:65:4e:91:24:e8:da:79:ba:fc:74:09:46:f6:
         68:af:85:d9:bb:12:9d:3a:4c:da:5c:41:cd:89:65:11:95:bc:
         61:e2:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:14 2026 by rpki-client