This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File:                     LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier:          I0NtTahDgc5UgDrcmdfdRXC1MDxpso3j47HbpNfINSc=
Subject key identifier:   95:96:BE:0B:30:1F:4B:C2:CE:BD:A9:EB:1E:16:78:8B:65:6D:FB:FC
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer:       /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial:       019BF6F5AE381B55CFAF0EAAD84D9F8E3CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 21:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:54 +0000
Files and hashes:         1: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: 0p2v8F71lsCSEuPtUoQ2dAuMn8BSuq+jJWI7HXLssmw=)
                          2: cbu2nsq0_E-KnigNEJpP4D0mZdA.roa (hash: atZeFfSMWx6yJCaBl0p4VHQ5do/K238XneHi5TYWvrI=)
                          3: kAVnp8aXF-jNnIEpkFtrGOjA71Q.roa (hash: ZozqlRSOeS+zKJOBns48YstVdkSISYcGeUrQVUA0HJM=)
                          4: nUrWqoPlEcK0XKJOG-oMfsZtnp8.roa (hash: ybZD4RQkjzxlQtQy6MswWNgOU2zvBWHPKmFz1vKMzKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:ae:38:1b:55:cf:af:0e:aa:d8:4d:9f:8e:3c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
        Validity
            Not Before: Jan 25 21:00:54 2026 GMT
            Not After : Jan 26 21:00:54 2026 GMT
        Subject: CN=9596be0b301f4bc2cebda9eb1e16788b656dfbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:9e:73:20:20:97:6f:3d:67:5d:79:9a:4c:
                    0f:89:63:24:88:50:40:a2:0d:90:34:b8:58:22:2a:
                    26:71:04:7d:14:2f:f0:fd:36:f4:cf:b7:5e:7b:b8:
                    65:0c:09:df:76:8f:b2:8f:e4:92:18:41:04:5a:d2:
                    cb:75:1a:06:ec:c5:9e:6f:19:23:87:78:7b:c7:cc:
                    16:71:2a:90:f5:77:45:d0:4c:c9:9f:fa:f4:f0:b2:
                    d6:cf:b2:80:c5:3e:d3:53:d8:13:23:78:48:c5:f8:
                    ad:70:7e:d3:4f:e9:31:42:06:2d:1e:81:e9:b9:25:
                    e9:69:14:2e:4f:44:61:8f:17:d6:09:f1:12:63:2f:
                    5f:29:cc:70:08:5a:7d:5c:10:63:bd:b3:5b:59:67:
                    7f:b2:4b:aa:36:80:2a:ea:54:0f:7a:c7:39:86:b1:
                    a0:a2:a6:a7:e4:94:b9:64:1f:11:bb:7b:4f:ff:77:
                    8e:e7:54:4a:61:d8:bf:7c:44:cf:ac:e0:cd:7c:f7:
                    e7:7c:57:ea:33:06:20:ba:d2:be:c6:7a:75:69:19:
                    1d:52:71:4a:55:f0:81:c2:96:cf:36:22:22:9f:8d:
                    6c:db:5a:09:55:72:fd:0a:96:e7:b3:6b:95:94:3a:
                    2d:ef:5b:b4:0e:40:65:83:9b:17:34:72:ee:e9:86:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:BE:0B:30:1F:4B:C2:CE:BD:A9:EB:1E:16:78:8B:65:6D:FB:FC
            X509v3 Authority Key Identifier:
                keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:bc:08:16:b3:47:27:eb:ef:70:5f:7f:cc:87:d7:08:db:
         3a:3d:2a:f8:09:7a:65:4c:6b:2d:61:2e:5f:22:1b:ec:f4:5f:
         9b:c4:31:f6:79:86:ec:2c:1b:df:3d:95:4b:8a:ef:70:ea:de:
         f1:ca:dc:35:f7:ce:39:87:c9:dc:ba:5b:38:4a:a5:97:ee:29:
         93:3c:1f:72:7b:88:9c:84:14:86:f4:46:3e:c5:60:61:5d:94:
         05:82:86:46:31:5e:3b:a0:81:18:97:05:9e:52:ce:92:64:65:
         f5:60:4f:84:b9:46:6f:71:4c:43:ab:62:1a:d2:58:f7:fb:22:
         c2:d9:f0:c1:8c:e0:74:91:e4:0a:af:4c:0d:9a:cc:b5:51:d8:
         e9:98:cd:d2:99:af:d1:a5:f2:cb:bf:5e:4c:e2:0c:b6:92:64:
         95:15:f5:fa:9d:d0:a1:05:fd:24:4d:b9:5b:dc:fd:9c:f3:e7:
         10:31:a0:00:0a:18:f1:19:3d:08:9e:1d:e3:e9:ba:18:2d:28:
         7a:51:cb:37:0c:55:a4:2b:7e:a4:65:ea:e0:97:76:81:fb:c4:
         5c:38:04:f0:6b:0a:72:ff:1c:e9:11:af:51:b7:03:79:0e:d6:
         7d:7e:b5:06:9e:8b:4a:7d:56:3f:f9:f6:cc:c8:06:e3:b1:55:
         98:82:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:32 2026 by rpki-client