This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File:                     lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier:          utcTVCMtC9ps6noVdjErCr1V5KRFsHccOxLCxN6NmLE=
Subject key identifier:   4D:5E:64:3B:89:8E:1A:84:52:40:8E:55:CF:16:55:8C:17:FE:4C:41
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer:       /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial:       019BF3F4DDC4D716E255A705176066D92140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number:          14C2
Signing time:             Sun 25 Jan 2026 07:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:09 +0000
Files and hashes:         1: 1-lKoU1yOKxnwsDuF3-ruK96PVNo.roa (hash: IOjO4sGW5jpY5sMRaf3CjBzP7+xSqwcjH//jisz2/A8=)
                          2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
                          3: Ht4mv8kp4i3crO6SB184ED4eteI.roa (hash: UhjKCPcDd1ersETNcFLEp5rKk3sifo5x89dtS1h38rA=)
                          4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
                          5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: aJCKCOsf1saAhd+Aoo0gea2FAMWTTGYqBqENS+oJAHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:dd:c4:d7:16:e2:55:a7:05:17:60:66:d9:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
        Validity
            Not Before: Jan 25 07:01:09 2026 GMT
            Not After : Jan 26 07:01:09 2026 GMT
        Subject: CN=4d5e643b898e1a8452408e55cf16558c17fe4c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:55:5c:ba:f6:5d:5f:61:65:88:ea:53:d3:
                    83:f7:1f:6b:8d:c5:bc:c7:a8:5e:68:93:6c:6c:ed:
                    e9:6c:c2:17:99:9a:30:3c:b0:46:15:9c:ea:18:32:
                    f2:90:cb:5d:ae:5e:58:f5:61:57:fb:6b:87:7e:f4:
                    3a:55:0e:53:88:5d:14:26:53:40:ba:7f:b9:23:7e:
                    e2:b6:01:b8:f3:f3:5c:cc:4f:2d:6c:70:c5:70:fd:
                    34:19:f5:a1:dd:70:ce:a3:2d:63:ec:6f:63:d2:4d:
                    b2:ac:04:1c:65:52:3e:22:06:4c:db:3f:56:3a:e5:
                    53:6c:c2:5f:57:63:71:d5:64:a5:25:6f:2c:47:3f:
                    06:e7:79:b2:c7:54:e3:73:9b:ed:76:20:ea:7a:a6:
                    76:ad:b1:d5:8b:05:d8:16:15:66:38:e0:05:9c:18:
                    34:e9:af:e6:a6:24:91:ae:9d:d1:aa:34:72:45:ea:
                    78:dd:4c:fb:de:95:bf:bc:b9:b3:12:ef:af:d7:ae:
                    ca:f0:cc:2d:7c:c5:d6:16:23:ab:44:a7:7b:e1:28:
                    51:6e:ec:bc:5a:b1:96:16:c5:0b:ed:3c:32:9c:cd:
                    e7:88:d6:64:ae:1c:14:62:00:86:ab:13:0e:a7:cb:
                    a1:21:02:cd:74:76:4f:b5:12:1a:54:b6:7a:be:ea:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5E:64:3B:89:8E:1A:84:52:40:8E:55:CF:16:55:8C:17:FE:4C:41
            X509v3 Authority Key Identifier:
                keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:63:c6:1a:de:9b:6a:a6:7d:41:b8:98:d8:b5:38:8b:9c:
         c9:0c:10:bf:89:12:1c:ba:f7:ff:70:f0:42:0b:b3:a3:e2:f2:
         e4:d0:3c:87:41:ee:6b:9b:00:9a:2c:91:76:1b:4d:96:4d:f1:
         28:39:bc:7c:9e:af:ee:30:47:6c:50:5e:34:b8:f9:22:48:3d:
         db:00:69:7b:9f:fa:50:74:4a:f5:10:a1:86:3f:e1:b9:78:09:
         0d:f8:6f:a5:57:da:e9:26:ac:7f:7d:5d:58:b7:6a:69:8f:65:
         ff:c4:79:7c:0e:8b:15:04:e6:25:24:c7:93:8a:bc:7b:4b:fb:
         46:5e:32:45:42:19:ca:03:8a:e4:42:73:63:cc:d9:5c:70:88:
         64:5a:0a:31:ad:ef:dd:39:ae:01:58:bd:4f:8f:3c:8e:9c:a8:
         76:e6:26:f1:38:a6:8e:c5:91:0d:40:6d:2d:de:b7:12:c8:86:
         da:db:92:6a:c6:a0:f9:c7:7a:4e:8b:a4:f6:cb:90:0f:d2:8d:
         8f:58:c4:3e:00:49:be:83:52:c7:ea:4c:c1:15:bf:a6:01:f0:
         3c:65:7e:58:90:03:1d:5c:72:25:93:d8:70:b5:63:83:cc:68:
         1d:0e:db:80:11:81:dd:3f:aa:27:98:de:49:03:bf:ea:a6:85:
         f5:4c:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:41 2026 by rpki-client