This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          57o3o3KufSODQ4F6YLtgqYA1hGGWc8TYEoy1gsF5X0Q=
Subject key identifier:   A9:14:8F:E0:62:23:D4:57:EC:B0:A1:04:0E:C9:33:1C:BC:93:EB:39
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019BF4996F38FDDD529FC227769027FD4AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          181A
Signing time:             Sun 25 Jan 2026 10:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:54 +0000
Files and hashes:         1: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          2: 4hH57FydlHdc4V1rY5LVn5D_lUA.roa (hash: bQ1e0/IxpkasqU8EsI7sNLsUave4BUbp6/mKopiE7ps=)
                          3: E4k_GLB1jh7MPVs-gyp-YH9i1VA.roa (hash: 7uI1YsgPEgxKnbIzjDUu68rwsx6hVD90WAbaTfQ1PeQ=)
                          4: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          5: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          6: MQQzsxU40W_xEpXzt8cvUT-bq9E.roa (hash: d2EdB5G5EgArFhc3OWiFNquY+C0ERTnVWLmjHj1Wbbo=)
                          7: NyBz14MOmkpBtlhZ7WM1bi3cKHE.roa (hash: Et/9ehhdVf0NmhMuGdiZdz+LErbH+Fl/Psv/5/v/xGQ=)
                          8: OxhwppLGol158lCsq2yWJNLf_NE.roa (hash: MmzmN0W/m1dLKAb2mybZa7hE2FPBvGD3tTttqagSblg=)
                          9: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (hash: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8=)
                          10: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          11: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          12: cFB_Qjuns6l6KcuIKXsZqJK6Vg4.roa (hash: V4Rw2W70jgdIniROkJ3lKSSQgcdifJcau/v/LfXynbA=)
                          13: esKqO8BYhBEBTmMBHqFeLfnifk0.roa (hash: vP9Ymiwt9PD54e5jiYQZJmQ5Ilcp3al9yl8UXkwBN+8=)
                          14: gkoYWKhPVWJSzZKZ2UhHAj9zfS4.roa (hash: 2xLLVXq/Jt50epuLgX+yGtG0U3JwB6BPWJQju9wVWPo=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: WCK66CsB/FD+a0jwqahDy7iu9zUusLfyPb2m1alk0lI=)
                          16: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          17: tBM0BH84k4nIGXqIG37qLS0XebI.roa (hash: TQyYsWASmngbIW8Lh2ErsWEikXlEbvLYLPYi3fMojKA=)
                          18: tEZKD388wfIDI8SQ6X1kfbzjo_E.roa (hash: 6Al032wawyD0hBtB0AfHL41lnybj15pPaY89dRyaIg8=)
                          19: ttBmnLsLGk0QiBDZZrhpXLeq2Ro.roa (hash: aVi6Xk9A2f5Su9Y+yYYHIztt83ZG9tqYXEgyisye2K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:6f:38:fd:dd:52:9f:c2:27:76:90:27:fd:4a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Jan 25 10:00:54 2026 GMT
            Not After : Jan 26 10:00:54 2026 GMT
        Subject: CN=a9148fe06223d457ecb0a1040ec9331cbc93eb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:39:5c:15:36:46:89:24:62:1b:a9:68:66:
                    44:99:81:c7:4e:b4:01:02:68:0d:d1:f2:88:16:df:
                    e4:96:ed:8d:ed:92:16:93:a4:5d:36:cd:0b:25:30:
                    b5:45:2e:7b:a5:00:72:98:f4:b0:f4:2e:c5:29:2c:
                    8e:b4:b0:7f:10:ff:9c:ef:8a:3a:be:f0:5e:ba:48:
                    ec:f9:d5:d0:ea:cc:f3:88:e6:3f:49:3d:ec:af:f9:
                    66:4b:51:3a:f7:4e:87:c2:e6:35:77:7b:16:eb:6d:
                    f8:86:9a:c4:82:bd:81:b5:1e:40:16:55:b9:8f:0e:
                    d3:2d:6f:2a:54:e6:fa:e6:67:5b:90:85:02:3a:00:
                    de:9a:d0:f6:db:b6:b8:2e:a7:0f:e9:2a:94:89:fd:
                    59:be:fc:0c:24:d6:71:9d:96:36:08:8c:a9:51:87:
                    23:b4:9a:3b:ce:fb:02:09:bf:2f:2d:e4:6e:71:ec:
                    51:bc:0c:60:9a:b7:fa:7f:c8:f5:c1:f6:ca:2b:1b:
                    83:13:b0:0b:42:2a:2a:ae:ab:71:06:7f:ae:19:d3:
                    54:fb:96:65:32:68:7e:e3:3b:19:1e:26:e0:c7:f6:
                    4c:2d:04:16:82:91:63:d2:d5:a8:03:a2:a0:2a:5c:
                    c4:bc:11:bb:3e:ed:c6:b1:bf:77:07:26:d7:fe:e8:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:8F:E0:62:23:D4:57:EC:B0:A1:04:0E:C9:33:1C:BC:93:EB:39
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:43:07:42:8a:0c:f8:c8:f4:86:8d:b7:db:55:36:62:f2:
         c0:95:7b:6c:e8:91:ae:06:07:34:e0:71:aa:be:ae:06:98:86:
         4b:94:cd:6f:3f:7d:4e:65:83:e7:22:6c:0d:bd:e0:40:19:78:
         ab:a9:4c:6e:4c:4d:67:23:45:64:60:b7:41:ae:22:1a:7a:13:
         bb:c8:97:52:0b:2d:bd:74:5a:da:52:cb:26:2e:3b:44:3e:60:
         19:5c:39:ee:79:89:f8:20:4f:4a:85:35:fe:56:44:cb:f3:7c:
         15:ed:fa:bc:85:df:48:d5:eb:13:1a:58:ef:5e:27:a8:f8:ea:
         d2:d9:12:be:72:44:d3:1e:e9:fd:9a:95:6a:2e:1d:a9:49:96:
         d3:09:a1:ca:c5:cc:aa:0c:a8:a9:fa:bc:5f:08:d2:86:72:76:
         19:f3:ac:f0:a5:ae:8a:4c:de:41:3d:99:dd:43:f9:60:22:1a:
         45:03:c6:29:b6:d6:d0:06:7a:63:4b:fa:9b:2d:55:20:33:f6:
         c8:6a:09:a6:19:5e:a9:e9:7b:a7:39:0c:bc:57:66:d2:e4:6d:
         42:db:d5:cf:0b:69:ce:1d:a2:9a:d1:01:7b:55:7f:c2:bd:7e:
         7c:01:cd:03:79:19:0a:8f:a8:3a:ec:27:53:2c:f7:43:dd:c5:
         1f:a9:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:15 2026 by rpki-client