This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          KBQBTXNDbsz5jxUL/t+AeGI5Qvw7CaIF7n5iTDpUsSE=
Subject key identifier:   BD:6B:BD:AE:57:92:D5:DB:7D:F3:B8:A0:97:D8:1E:99:DF:26:72:F9
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019BF7D237E831CDADBB6AA00CA88B668E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          028B
Signing time:             Mon 26 Jan 2026 01:01:47 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:47 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:47 +0000
Files and hashes:         1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
                          2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
                          3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
                          4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: i4sLnjz0UK1B9IPXL9YsUhiHCvVvDFhMC39W4nwj4Ks=)
                          5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:37:e8:31:cd:ad:bb:6a:a0:0c:a8:8b:66:8e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Jan 26 01:01:47 2026 GMT
            Not After : Jan 27 01:01:47 2026 GMT
        Subject: CN=bd6bbdae5792d5db7df3b8a097d81e99df2672f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:fb:13:e5:fa:9d:16:13:25:7c:be:4c:08:
                    6f:17:01:54:84:3f:b0:14:ca:d7:e9:d9:cf:c4:cd:
                    cf:3a:f2:35:00:4b:1a:50:26:c2:5b:9b:8c:9e:f7:
                    13:7a:29:ad:3d:20:1e:f6:77:59:1d:9d:f7:e2:42:
                    f4:cb:e1:34:a5:85:48:ce:c0:0f:40:f6:7f:93:3a:
                    77:da:f1:92:b7:f5:ab:86:d3:88:e6:02:c6:88:d5:
                    9f:e7:17:0c:35:71:4a:9b:06:24:81:25:ff:c2:35:
                    97:19:3a:e4:46:4a:47:32:62:4e:ef:7e:14:fc:61:
                    20:f3:d5:3e:6f:11:fd:98:a2:3d:c0:59:66:53:28:
                    16:d6:8e:7b:64:08:c8:ea:fb:27:b3:10:ac:89:2c:
                    d9:c3:8b:cb:dd:3f:f6:84:d8:37:6f:3b:a7:cc:93:
                    76:af:c9:f1:dd:d7:68:97:b8:3a:f9:a8:c8:ab:0a:
                    77:54:27:39:2a:48:cf:ca:dc:76:03:c8:00:a3:60:
                    7f:29:6e:89:2b:ca:ef:ff:11:e1:ad:f3:a6:ef:0e:
                    7a:53:8d:ca:ba:5b:fc:fe:35:33:82:87:b6:b9:2c:
                    b1:52:1c:1a:4a:40:21:b7:9b:6b:2e:fc:26:5d:62:
                    cd:02:38:c8:c5:8e:45:04:6c:16:f1:27:7b:da:ef:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6B:BD:AE:57:92:D5:DB:7D:F3:B8:A0:97:D8:1E:99:DF:26:72:F9
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:88:b7:1e:21:20:fa:49:03:71:fc:73:5d:42:e0:db:80:
         6a:a6:e3:ef:90:50:83:e4:bd:07:6a:0a:93:2b:a4:df:36:5d:
         53:83:eb:00:67:3f:b3:a8:ab:27:87:6d:b2:0b:df:1a:12:02:
         57:02:11:bc:05:a3:40:1b:ce:92:e6:b3:10:a5:97:78:b2:e2:
         30:72:52:87:07:65:90:bf:af:d7:65:06:92:08:87:10:a1:84:
         7d:cc:1e:03:c4:79:df:07:65:91:ab:76:8e:54:c9:ea:b9:8a:
         02:e8:67:85:2e:b5:bb:ac:52:46:ce:b7:93:7e:55:c0:c2:59:
         b3:97:06:b1:d9:f0:38:1d:74:05:00:39:ec:93:75:6f:a4:33:
         44:83:ad:57:5d:33:8a:60:e9:56:9a:f2:b3:63:f9:66:c5:a7:
         9f:4d:84:4e:eb:23:8d:6d:03:31:44:dd:35:a9:29:8f:38:63:
         b2:a3:18:16:b9:cf:27:91:36:51:c5:e6:40:f5:81:fa:00:7c:
         2a:f5:99:99:f3:9a:82:a2:a8:56:0a:79:e2:d3:62:38:18:be:
         0f:6c:f4:5a:bc:81:fa:ed:d9:47:e3:12:50:87:6c:88:d5:b0:
         f9:01:45:e3:80:05:cd:5c:a4:fb:da:28:2b:aa:ef:b8:df:1b:
         98:72:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:52:29 2026 by rpki-client