This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
File:                     LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json)
Hash identifier:          ErPpVSMtZPv8Vgi/0DxJMXIjtevkBuRoigqWrc5EgYY=
Subject key identifier:   FF:F9:DF:68:B2:26:0B:FD:04:76:1D:16:38:81:93:F7:D0:D5:77:CE
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Certificate issuer:       /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial:       019BF3BDACA31D18EDA3A6F3C5454F8A67E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
Manifest number:          1073
Signing time:             Sun 25 Jan 2026 06:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:52 +0000
Files and hashes:         1: 0T1AgadQnTT1ndiweRyvS_vkm-A.roa (hash: /3Ju2hidnDzh8I33GDIaLYQdRHbtjqqOqVBYvQZmXDw=)
                          2: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=)
                          3: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=)
                          4: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=)
                          5: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=)
                          6: J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa (hash: PrA2PJs5TSn3H+asdA2g/RA7lWRRSyMMok+HJEOvi0U=)
                          7: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: zkBoxrtRVEX4iglZphrP0V9XTBj4ONlpbWXzcFP0//E=)
                          8: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=)
                          9: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=)
                          10: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=)
                          11: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=)
                          12: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=)
                          13: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=)
                          14: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (hash: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c=)
                          15: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=)
                          16: gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa (hash: 0rFeNQFoSCuvCIBm913ksBYysYgLDykpUQhP0c/QksE=)
                          17: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=)
                          18: ybGOVfya0JJH14IWQC-d-Y3nVIw.roa (hash: t0pVqgHknRDwOdfYkcVxATIE3U9MoB5xTK9HaX4a6b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:ac:a3:1d:18:ed:a3:a6:f3:c5:45:4f:8a:67:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
        Validity
            Not Before: Jan 25 06:00:52 2026 GMT
            Not After : Jan 26 06:00:52 2026 GMT
        Subject: CN=fff9df68b2260bfd04761d16388193f7d0d577ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:a5:a7:9c:ca:d3:7e:f8:ce:e0:af:d0:42:
                    f6:48:d0:20:44:bb:3e:d6:e3:a5:1a:9f:b5:fd:b3:
                    5d:fa:46:8b:91:f4:ce:ac:3e:49:a5:69:4d:17:61:
                    d5:c4:06:e8:cd:18:57:f7:f7:09:9c:c0:b8:7f:d6:
                    5a:76:ce:9e:a9:f4:1a:58:f7:8b:d2:9c:ca:01:4d:
                    4c:af:c8:1a:23:8d:c7:db:d7:82:65:6c:87:4b:11:
                    e7:21:b5:14:24:62:c8:4b:f3:3f:58:51:bc:80:8f:
                    fa:58:d0:91:53:0e:63:68:80:3d:d1:fd:71:ca:6b:
                    8e:8a:40:e7:a0:aa:8c:e4:48:6f:b5:95:01:0e:7e:
                    41:48:b3:8d:02:28:ef:bf:f2:cf:f6:2e:12:cc:95:
                    b8:8e:49:94:be:7e:dd:bd:99:b2:68:df:79:6c:85:
                    23:3e:09:f8:a6:a0:10:c9:dd:cd:df:47:ac:20:53:
                    ca:ed:86:21:87:8b:b7:c2:db:58:b4:42:02:f2:b8:
                    5c:63:32:26:b0:8b:d2:da:e5:51:06:8d:51:bf:28:
                    49:a8:b4:7f:ac:9f:f5:ff:8b:ec:e5:b5:84:94:d9:
                    6e:fb:a1:22:2d:c0:af:f3:73:1e:6b:13:2f:a9:86:
                    92:fb:1d:ba:55:45:e3:2e:83:3b:29:8b:71:67:70:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F9:DF:68:B2:26:0B:FD:04:76:1D:16:38:81:93:F7:D0:D5:77:CE
            X509v3 Authority Key Identifier:
                keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:84:8a:5b:fb:c6:15:1e:5b:4c:dc:3a:4f:b9:d5:fd:b3:
         eb:e1:96:41:2e:08:af:0c:b8:38:69:fe:a1:50:af:97:a4:c8:
         75:37:b1:8a:a4:97:89:0c:70:c4:2e:99:5c:af:ce:35:ad:f1:
         33:04:49:62:75:21:3a:d6:88:a6:b2:37:32:2a:66:4d:2b:b1:
         eb:ba:67:f7:f9:f1:5b:45:4e:4b:a3:4d:71:ce:11:d7:fd:01:
         83:42:b4:c8:15:36:e1:6a:bb:95:37:24:73:4b:6f:03:35:f5:
         47:b0:ea:f9:19:e8:3f:53:91:52:6f:ce:8a:4f:e0:f4:17:97:
         97:16:71:bb:19:a1:eb:5e:ec:e7:de:ad:7b:1b:38:a2:6d:3a:
         97:b8:c6:ee:c3:3a:09:a4:bc:ab:b0:04:9a:f4:5f:62:f8:e1:
         c4:fb:9e:a4:5f:46:18:75:36:fe:27:3f:46:d6:34:f0:bc:86:
         3d:d6:d6:7f:39:41:25:ca:b4:82:3d:56:d8:bf:b4:db:9d:e4:
         c1:54:16:b6:6a:3a:8b:99:18:36:89:ff:c7:9b:19:6e:18:6e:
         e5:cb:98:0c:3b:25:76:9e:cc:c3:07:c2:1f:65:ba:95:b3:01:
         f4:f6:a3:83:57:80:21:40:4b:98:00:75:b2:22:91:b0:71:64:
         b4:44:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:44 2026 by rpki-client