This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
File:                     LudClvzo0gvvoYeZ2ubseDHWHFo.mft (raw, json)
Hash identifier:          5L/LFAs0lfXac54SGF3ejqrjcyGePtHo/OwlOvk0Li8=
Subject key identifier:   AD:D6:6D:AA:55:AB:50:2F:36:0E:AD:62:9C:4C:2A:D0:20:C5:DC:E1
Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A
Certificate issuer:       /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
Certificate serial:       019BF80875C73AC747B63250FBF13D087BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
Manifest number:          132B
Signing time:             Mon 26 Jan 2026 02:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:02 +0000
Files and hashes:         1: LudClvzo0gvvoYeZ2ubseDHWHFo.crl (hash: mXG19otedupBRYkZ+Vv+mp+sU5s4yF3e+3Y/2mjhqBI=)
                          2: tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa (hash: va1fblEnn3el5S1n83VncvFPz3toG5gDp0J8zilJ/yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:75:c7:3a:c7:47:b6:32:50:fb:f1:3d:08:7b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a
        Validity
            Not Before: Jan 26 02:01:02 2026 GMT
            Not After : Jan 27 02:01:02 2026 GMT
        Subject: CN=add66daa55ab502f360ead629c4c2ad020c5dce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:67:c6:6a:80:7f:a3:96:22:78:28:cf:2e:
                    a9:48:03:b6:2b:86:3c:89:5c:68:59:67:e1:15:0a:
                    86:00:4a:f2:d5:a8:00:bf:b5:d0:5e:8b:1e:e9:14:
                    5a:32:52:d3:f5:9b:e2:66:59:02:e2:b4:51:6b:75:
                    ea:e2:c4:aa:ee:4b:a7:21:4e:b3:39:74:0c:eb:7e:
                    1c:7a:3d:f4:9e:98:33:50:71:2d:03:8f:d1:49:c2:
                    8b:e6:15:8e:fb:4e:a2:3e:2a:e9:e0:48:e3:9e:41:
                    21:f6:89:c9:54:60:95:e0:b5:17:49:d2:10:24:c3:
                    61:52:b3:72:92:23:6f:93:4f:4f:32:40:3d:9e:e8:
                    de:8b:7e:6f:15:b9:7a:eb:cb:fe:34:82:45:f1:95:
                    a5:2e:84:62:c3:1e:3b:fd:b9:dd:7d:51:21:82:c6:
                    87:0d:08:09:b3:4d:8f:49:5e:b2:21:1b:79:9d:a7:
                    47:fe:44:1e:be:9f:3c:62:86:e7:99:1c:0b:89:50:
                    fa:eb:de:16:d2:54:58:f2:be:57:12:fe:07:2a:ce:
                    10:36:dc:ba:80:3c:57:be:6d:07:8e:78:74:20:00:
                    24:38:f8:4e:2c:01:7a:79:8f:16:c1:8f:77:68:21:
                    6a:5a:62:5e:9d:99:cd:b9:7f:f2:a5:0a:99:14:f4:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:6D:AA:55:AB:50:2F:36:0E:AD:62:9C:4C:2A:D0:20:C5:DC:E1
            X509v3 Authority Key Identifier:
                keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:71:87:16:0f:d7:1f:b9:d6:03:50:f0:29:35:22:ad:cb:
         85:84:7b:d8:4f:05:0e:0d:da:0e:bb:3c:65:82:57:87:36:cb:
         0d:0c:a1:4e:f9:c3:44:62:b3:e0:37:7f:5f:4b:72:89:06:b8:
         53:26:a0:39:42:bf:85:88:a9:05:3d:4f:b2:3d:36:b8:ff:e6:
         28:13:c8:f8:71:ae:19:fa:87:a0:97:d9:62:1d:b8:71:e7:5f:
         01:31:82:00:a4:08:7c:d6:93:48:5e:04:3f:5a:05:b3:f9:e1:
         19:19:e9:5a:29:87:ac:20:23:fb:03:ef:30:c7:4d:fb:d5:45:
         d0:89:e3:82:71:da:41:9b:f2:f5:91:18:3a:06:43:de:d7:31:
         e6:1e:46:4a:5a:03:09:7a:65:15:05:7a:59:1b:cd:74:b8:5c:
         82:61:0e:b8:e4:d4:39:99:6c:f4:06:b8:d6:fa:8e:7e:61:9c:
         9c:f0:b8:55:38:1d:ef:68:73:56:96:09:99:c0:4a:f1:07:ff:
         6c:d8:14:32:98:a0:37:ca:6d:f2:e4:bb:5d:fa:51:26:2a:53:
         73:d6:da:67:aa:59:f4:2b:c1:a9:6e:2f:79:89:ca:74:fb:ef:
         55:67:93:4a:41:8c:b0:c0:43:e0:10:3e:84:fc:d2:e1:4e:5a:
         da:08:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:57:27 2026 by rpki-client