This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File:                     l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier:          Y1z47rCVUVcCnzpWc3VCnlZoVNnJJp5KaFGDXhbm2W4=
Subject key identifier:   85:71:91:CD:7B:BB:C5:00:27:3E:0C:95:7F:2E:0F:F9:56:3F:71:EB
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       019BF763CA3A59262693B76C8BA67D4F00DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number:          0D43
Signing time:             Sun 25 Jan 2026 23:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 23:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 23:01:10 +0000
Files and hashes:         1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
                          2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
                          3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
                          4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: qzVF0nISVZ/t19+7a2fU75sDzGLWKl6kzfcOY/Y7Xwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:ca:3a:59:26:26:93:b7:6c:8b:a6:7d:4f:00:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: Jan 25 23:01:10 2026 GMT
            Not After : Jan 26 23:01:10 2026 GMT
        Subject: CN=857191cd7bbbc500273e0c957f2e0ff9563f71eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:67:25:6b:d4:d5:77:28:13:71:a1:09:58:
                    76:fc:4f:a4:c2:0a:b2:56:3a:05:a2:bc:e4:e5:0f:
                    76:a5:33:43:0f:2f:57:94:43:3f:0f:23:5a:51:a0:
                    28:ca:03:bf:47:bb:1e:71:eb:99:5f:64:a5:b4:6e:
                    16:85:db:88:6c:c4:c0:55:18:ac:c1:54:b6:40:06:
                    49:19:42:cc:21:9b:f3:cc:e4:61:53:51:78:89:10:
                    db:b9:1a:c1:88:84:4f:7f:39:c6:67:34:27:4e:7f:
                    dd:1a:33:20:cb:de:bb:94:12:50:86:3c:58:7e:aa:
                    5d:67:28:82:21:8d:14:67:02:5d:f0:61:64:d2:4f:
                    ab:e3:34:4d:39:d8:05:9b:2b:fe:c6:1a:02:32:ab:
                    6c:6d:a6:fb:e8:37:15:00:6f:9a:56:60:b9:6b:03:
                    20:b1:f7:0c:08:03:99:17:14:e1:98:d5:69:9a:3d:
                    d1:08:63:67:3a:8a:36:fc:2e:2a:ee:a2:c5:e7:66:
                    4b:49:ea:d0:31:55:b4:26:db:1c:62:a4:d0:34:ba:
                    4b:69:a2:82:f0:35:d1:67:03:9c:b7:39:ef:8d:85:
                    7f:ea:a7:56:e9:bf:f1:7a:d0:75:77:a4:fb:f5:24:
                    0e:54:f3:38:a8:70:7c:d3:93:3b:70:f8:4f:de:93:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:91:CD:7B:BB:C5:00:27:3E:0C:95:7F:2E:0F:F9:56:3F:71:EB
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:45:90:21:6b:aa:c6:01:20:a3:56:96:7f:9c:c9:c7:3c:48:
         57:f3:59:c4:c2:96:d2:1c:30:2b:77:a2:ed:1d:f5:2c:7c:e2:
         86:e2:9e:7d:47:28:48:22:ba:7a:e6:c4:c0:68:8a:98:69:6e:
         07:e1:bd:b3:5d:e8:9f:eb:11:59:0b:bd:a7:28:90:cf:56:33:
         73:40:94:76:ac:ed:27:9b:4f:de:e7:09:69:ef:b3:2c:c4:97:
         4e:bb:66:05:88:14:8b:ff:de:92:6b:92:3b:e1:71:87:a3:ad:
         8e:4e:5a:d2:a5:34:a3:d9:35:49:02:46:2e:d1:77:f8:e3:2c:
         95:2e:2d:bf:fa:c3:2d:87:88:3b:b7:72:a3:62:36:c9:1a:2a:
         c0:8c:cf:3d:ec:26:25:02:3d:64:60:2f:63:b5:bc:d5:79:7a:
         74:d4:36:48:de:20:88:3d:7c:c9:0b:fe:79:17:55:52:2c:31:
         fc:12:a7:50:e0:dd:17:54:45:c5:18:a7:a1:1c:8a:3d:7d:18:
         32:76:03:a6:03:9c:ad:c9:58:41:0a:26:d4:b5:d8:5d:b5:f7:
         6a:9c:89:91:34:5a:be:be:02:24:d5:55:8a:b1:9a:a6:fa:ac:
         34:06:8b:67:d8:8b:b3:f3:61:ed:75:70:39:54:25:8f:d8:83:
         d8:c8:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:35 2026 by rpki-client