This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
File:                     LLF4_DNd8BVDco4pt46VKO8fX24.mft (raw, json)
Hash identifier:          obHElhWqTxcFTuYIjNxiRvRflkIpZ7QJ4D82SuTJZHo=
Subject key identifier:   02:8D:47:DB:D6:5A:71:A2:13:74:88:EF:A3:2C:D5:D7:6B:D4:4B:DE
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       019BF6BEC2857A87B2BCAE50D9C478249623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
Manifest number:          6F
Signing time:             Sun 25 Jan 2026 20:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:55 +0000
Files and hashes:         1: 2-Q8-2uMpkm8p3MOPZw_W72AvNs.roa (hash: tg0h05nrXxXnWjaxkqGRSl6Be7xJrTxFL2QzNub3pSk=)
                          2: LLF4_DNd8BVDco4pt46VKO8fX24.crl (hash: ICF/N3Pm38bBiR2IB746E8EpeIz2xC/5q5CQa2lhVho=)
                          3: P_7nMxZMM7y4KXX_mCBDZ7js_QI.roa (hash: iGjx0O2mQCwsWD5wHQrIoNmlbRTh0061OVc3dbeJuto=)
                          4: xUUNrHApt_tz2XjQJ5l7t1ZbC7o.roa (hash: KUBsi55PM0TDdS1qnpTlBLIS83SZ6OgFiXRyqYklnSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:c2:85:7a:87:b2:bc:ae:50:d9:c4:78:24:96:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Jan 25 20:00:55 2026 GMT
            Not After : Jan 26 20:00:55 2026 GMT
        Subject: CN=028d47dbd65a71a2137488efa32cd5d76bd44bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:b6:9a:10:84:60:21:3a:43:1c:aa:d1:94:
                    e2:5b:bd:bf:12:bb:59:be:d5:d4:99:a0:95:89:44:
                    2a:2d:3f:db:3e:85:d7:d3:4c:db:b6:09:46:36:37:
                    89:54:c7:56:ae:58:1c:6e:07:56:c4:e1:71:67:0d:
                    1e:a3:8a:07:ef:e5:7a:45:83:e4:59:9c:33:b4:fe:
                    17:94:2f:50:df:20:d3:89:70:bd:aa:7f:90:2c:4a:
                    a5:17:9e:72:cb:a0:30:5f:ef:4c:26:fe:fa:c8:c5:
                    91:8b:0a:52:e4:bb:c0:50:16:7a:d0:35:cb:82:9c:
                    f7:7b:cc:15:bf:f9:14:3b:0b:fd:df:96:5c:ef:09:
                    d6:c7:43:98:45:6b:58:56:3e:fc:be:74:c7:75:ff:
                    ec:13:2e:2c:6c:59:71:df:81:dc:fb:00:48:cc:b6:
                    3e:3a:2c:fe:da:10:53:b4:ab:86:17:ef:e2:ec:a0:
                    ed:1b:5c:8c:93:7a:64:21:1c:f9:07:25:52:43:f2:
                    6e:65:28:8a:2b:29:7d:40:f8:e5:85:de:5f:e1:ef:
                    1c:66:e3:84:2a:54:e1:67:5c:29:3e:6a:b1:90:8a:
                    fc:c0:b7:15:bf:1b:f4:9f:ff:b3:d0:a5:7f:d4:eb:
                    98:9c:5c:48:66:9b:45:9a:1b:15:c8:ba:cc:3f:a9:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8D:47:DB:D6:5A:71:A2:13:74:88:EF:A3:2C:D5:D7:6B:D4:4B:DE
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c6:13:d9:8c:d7:5d:94:1d:36:bb:29:5b:94:43:02:85:ac:
         7b:43:ef:79:ed:18:52:50:01:f5:bd:5b:0b:c2:1a:62:7a:29:
         b9:76:01:a8:c1:cf:67:90:30:7f:f3:2c:43:6f:66:4c:6b:ec:
         f0:0f:a7:4c:b9:ba:bf:74:91:51:a2:b4:c0:9f:1b:d8:91:85:
         c2:3c:36:1c:91:f4:45:99:8e:61:43:7d:86:fa:43:18:2a:08:
         87:7a:14:c6:89:c7:48:19:5c:10:03:82:97:0b:c0:3f:1e:8d:
         96:e2:20:68:01:fe:10:e5:02:61:50:a4:c2:10:01:01:a8:8a:
         2c:b5:6b:64:fb:a5:93:1d:75:40:df:68:22:1a:06:45:a1:c8:
         c0:0b:44:64:00:60:e4:87:cd:c0:8a:29:45:38:6e:fb:69:50:
         6d:cb:94:45:a7:7a:15:9c:04:25:4d:49:c9:ed:a5:a1:4b:ac:
         50:7f:68:a7:f2:4f:3a:75:8a:8d:f0:3c:57:a3:60:18:6d:e1:
         53:f8:32:98:dd:f6:8b:20:ac:fd:4e:34:1c:a3:bf:b0:72:61:
         a4:8f:be:64:ca:7f:bd:ed:a7:1f:6a:ec:70:6c:1d:e1:a8:a2:
         b9:cb:88:8b:f4:48:93:1a:61:e1:7c:ae:4f:56:24:01:d5:11:
         9c:6f:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:24 2026 by rpki-client