This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          3y7+wmJJt0Fhn/ROCuUo5ES44nzJMnJWqc3iQZxad7g=
Subject key identifier:   53:70:A0:E4:15:B5:B8:45:9C:11:C6:F6:5F:3D:83:E1:96:2D:3B:06
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       019BF8762243AFF427E8EC690CBEEDF41B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          1699
Signing time:             Mon 26 Jan 2026 04:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:50 +0000
Files and hashes:         1: ET_38wfdzhJ7U1tL6nGbfTENNIQ.roa (hash: SCP22drV5yjMaMO6Qyzik8RwzK7qK47hYUDCwnDNJ2I=)
                          2: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: sSyzQJJH7EU7ze/oqlIOORyVGBggYEnVPbE7OMW49jw=)
                          3: XHs1m3SRKcYSslJybhJTMzxM9-c.roa (hash: A0erFAS1Db0vVamA672kEgwbEmWDzDENo+wHPI/ufmU=)
                          4: g2QaSslIEgo7FZj53UBiSTtFk-4.roa (hash: 6A+YhHwe2IJ834GJkC/1/7bS6gTkAl2WRDOeCCEHr98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:22:43:af:f4:27:e8:ec:69:0c:be:ed:f4:1b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Jan 26 04:00:50 2026 GMT
            Not After : Jan 27 04:00:50 2026 GMT
        Subject: CN=5370a0e415b5b8459c11c6f65f3d83e1962d3b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:b1:1b:f0:d0:01:68:e8:2d:02:c8:bf:0f:
                    c0:92:1a:06:83:3d:e4:8a:5a:38:96:54:44:c6:2a:
                    9a:c2:ce:c8:bf:05:8b:4e:22:84:62:75:20:99:2f:
                    f9:cd:98:c2:34:e0:6a:86:69:5d:89:a3:c0:d0:de:
                    91:99:7f:a6:86:59:66:4c:d7:93:38:4f:d0:0e:3b:
                    db:e1:8d:d7:c8:9d:d6:d6:a0:16:bd:d9:d9:d7:06:
                    5f:21:27:ff:6a:d1:8f:16:c1:a5:3c:a2:b6:76:62:
                    84:7a:d5:6c:01:37:01:12:55:c0:87:70:7f:2a:c9:
                    cf:4c:bf:97:49:40:59:20:b1:9d:c2:12:92:42:29:
                    27:dd:ed:e3:95:fb:c0:d4:2a:c1:7a:77:a1:24:9b:
                    7f:40:22:75:1f:6d:75:40:32:6c:1a:5f:b6:8a:65:
                    73:1f:2e:97:0a:02:90:29:29:14:34:af:06:ed:3d:
                    0a:6f:1b:02:c2:2c:11:d7:8d:66:5c:63:52:4f:b6:
                    96:6a:5b:c8:fd:5a:e2:b1:26:fe:03:b5:b3:b2:b5:
                    0a:bf:73:b3:78:ae:60:78:e5:5e:94:4c:4e:e7:ec:
                    0c:1f:1c:e0:c2:d0:ea:46:b6:95:69:5e:02:11:2d:
                    e3:b2:6d:75:53:2a:6d:52:fb:e2:44:fe:77:e3:c4:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:A0:E4:15:B5:B8:45:9C:11:C6:F6:5F:3D:83:E1:96:2D:3B:06
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a7:3e:04:61:d5:96:98:99:72:4f:62:40:f2:e0:73:b1:ca:
         17:42:c4:60:21:4c:0d:62:f0:75:d9:a0:f6:c4:8d:50:3b:b6:
         e4:1a:a6:bd:0d:4b:aa:9e:03:74:c3:b3:75:f4:e4:7d:fb:94:
         d9:e3:ec:8a:72:d0:3e:07:d9:54:85:7b:b5:f2:a7:a5:09:18:
         8c:b6:04:d0:cf:86:d1:26:a5:b7:e2:44:76:2c:0d:92:13:3c:
         0a:da:36:b0:ed:50:7a:7e:01:27:f7:e6:75:88:90:fe:80:11:
         88:58:33:ef:be:29:17:88:a5:5d:fe:f1:0a:97:9a:52:49:e2:
         9d:60:b9:73:e4:ad:c1:64:3e:0f:7f:fa:3c:4e:dd:aa:01:f4:
         53:ca:45:d5:3c:90:47:8a:0a:11:56:cb:bc:a9:9d:a1:38:38:
         f8:95:7f:d2:59:d1:75:7e:80:27:f7:97:c0:b7:0e:e0:dd:8f:
         2d:46:b8:ed:a5:92:85:cf:ad:a7:65:93:a0:32:12:e8:26:f7:
         8a:ce:1b:88:11:78:31:80:f8:7c:9f:50:88:82:55:c2:e7:b9:
         93:e4:8a:ca:98:eb:d6:0c:e7:90:a8:f3:2d:ee:02:1e:20:be:
         bb:c5:27:78:b2:b3:a0:02:9b:c0:0f:33:0f:d6:5f:7e:c5:d9:
         29:7d:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:05:32 2026 by rpki-client