This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          UthB4cibeeqmGJACcI8SIk4OgR7tzUTjNG9VCPev8RM=
Subject key identifier:   38:CE:87:0E:34:F4:82:3F:4C:9D:66:BB:0E:1D:40:6B:BE:4C:CC:C8
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       019BF91B8B6B4F1DED51ECCCB567083B9839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          04EC
Signing time:             Mon 26 Jan 2026 07:01:30 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:30 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:30 +0000
Files and hashes:         1: LUonv2RCWvu1zL14QrHsu9P2rS4.roa (hash: sYEwbsM2ctHv6cNHrCxgkHRsQW+if3GIsRAYyp3V97Y=)
                          2: S8keSl8NDHVc6KPmbXVZh56DkMo.roa (hash: gehjFU9x+RbJrI179PzTfPP1zreMHK8V8b0riuey5sI=)
                          3: dXBxqg2WRY0bNZSrjzenz8d7Y10.roa (hash: bonkDkqWKImRRfgE/vT3fEawIKDM/g7JC3uJ3coEEKE=)
                          4: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: rn0f//wmRsnlPdtnwe1W/tLHVSPOLmX7wRvP5UuwjpE=)
                          5: rNttweQh2PLctodsZ8mGF8Xdou4.roa (hash: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:8b:6b:4f:1d:ed:51:ec:cc:b5:67:08:3b:98:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Jan 26 07:01:30 2026 GMT
            Not After : Jan 27 07:01:30 2026 GMT
        Subject: CN=38ce870e34f4823f4c9d66bb0e1d406bbe4cccc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:0f:8c:38:00:28:df:d5:05:b0:8f:46:b4:
                    8f:4d:f2:ec:0b:fc:fe:e6:9a:49:09:d1:89:ed:16:
                    ed:51:dc:75:e2:01:8c:03:96:0e:5a:79:d0:de:66:
                    b3:9f:9a:1e:a9:93:6b:c3:a5:1b:52:36:15:79:af:
                    1e:dd:bd:0f:5e:13:85:3e:b0:4b:9c:cb:12:2b:5d:
                    16:2d:44:9e:20:50:0e:d0:dd:90:e3:f5:fd:88:74:
                    54:f0:19:aa:62:df:b2:90:c3:67:75:85:24:b7:44:
                    74:be:23:cc:d5:82:77:30:2f:bd:08:86:ef:63:58:
                    2d:48:f2:90:8e:aa:c2:0b:73:fe:61:9c:4a:56:b2:
                    6b:89:3f:bb:a8:87:a9:f0:c2:39:eb:79:d1:44:a1:
                    b3:99:80:ff:83:2b:f9:b9:c8:4c:3f:70:b6:82:d4:
                    d7:7a:91:3a:59:09:43:2c:b7:85:c7:0f:b2:cc:c8:
                    ae:db:99:0a:ba:d8:4d:a4:8f:2b:16:af:e1:c5:eb:
                    d1:04:00:40:ed:c3:97:f1:9b:a9:73:f0:9a:f6:bd:
                    ef:44:de:35:5e:ff:12:8a:79:dd:b1:12:1b:47:4e:
                    fd:8c:e4:b0:e3:31:e2:2f:d3:47:96:49:23:34:97:
                    5c:b2:97:fb:b9:26:3c:b3:d5:98:e5:00:1c:3e:c5:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:87:0E:34:F4:82:3F:4C:9D:66:BB:0E:1D:40:6B:BE:4C:CC:C8
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:64:54:17:a3:c9:87:12:74:01:b9:70:b1:3d:10:2d:8b:
         2a:0a:bd:6b:ac:09:2e:81:82:68:76:24:4a:a8:8f:f8:6c:61:
         3a:97:29:c6:44:5a:8c:17:7c:c6:e0:d8:7a:a3:e6:cd:0f:47:
         10:e7:c2:8b:88:59:45:cd:47:8e:cf:e0:39:89:a0:86:b2:69:
         14:09:f9:e3:f0:f2:e8:3f:19:19:ed:64:22:a0:2f:c8:5c:c4:
         5c:77:40:4a:bf:3d:b9:18:49:95:8d:de:c2:17:a7:20:ac:98:
         52:46:49:5b:b2:f2:47:24:f9:18:d0:a8:4f:d5:6c:1f:d5:ca:
         cc:b4:19:46:2b:9c:a0:0c:22:d5:a9:77:55:d4:ed:61:20:58:
         8a:9f:ae:e1:30:f6:9a:e4:43:85:3d:3d:ba:5b:28:ef:0f:ea:
         cf:67:a1:64:63:cd:4d:08:8c:d4:ea:86:9d:c4:e8:39:ff:a5:
         55:f5:47:49:57:d6:81:74:f5:82:d3:e8:6b:7f:11:e7:80:d8:
         55:21:4e:89:5b:cf:f9:c1:ca:03:5f:de:c9:de:66:2b:c5:5d:
         1b:7a:7c:22:1d:a7:48:6b:41:df:82:d8:22:0e:54:81:a4:12:
         15:9d:bc:02:d1:f1:48:65:20:37:12:9f:a4:ca:15:5c:db:db:
         f2:24:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:48:51 2026 by rpki-client