This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File:                     LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier:          RjFEusB58HMS4UvoQaKDZqLEV3S7en05ogRYvp1GGtI=
Subject key identifier:   95:8C:0F:0F:3E:A1:22:D7:63:A3:8A:CD:C1:7B:B1:69:27:54:63:00
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       019BF808775B579735429F83FA22E81BBEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number:          1497
Signing time:             Mon 26 Jan 2026 02:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:02 +0000
Files and hashes:         1: 4C8f5FARcG-ZhuB-vuYks_uFiSM.asa (hash: W61wROGokL5bWdXjsmKXsKb3BR0ZpNI0VLQdgkpNYOY=)
                          2: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: P3OCM+NRRXT3jX7r96+aBHVUyRGt23vxIxPOACbU1xE=)
                          3: _Cfy9cb-oQbNsdjFWpTXAp0vykM.roa (hash: hIou1rSmsH9WYXgyvdfhrYuo3Ds/LLT4qC/64LFji2o=)
                          4: ddfQyL5mhD7mpFJJqGaZ3w97HDk.roa (hash: MOdMZ39n6c+DnqvSWvmRktnMqoezzAOZSZFQGziSyik=)
                          5: upplO1vsJUxfE9a6L-gXM6q4wxw.roa (hash: YDn3jYv0iMQlWNcNP2DzaLyq8GD8cqRsMXLAgOSsLHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:77:5b:57:97:35:42:9f:83:fa:22:e8:1b:be:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Jan 26 02:01:02 2026 GMT
            Not After : Jan 27 02:01:02 2026 GMT
        Subject: CN=958c0f0f3ea122d763a38acdc17bb16927546300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:a1:3d:c5:53:f6:b3:8e:62:b7:46:35:19:
                    e5:ec:49:3d:85:65:dc:07:be:72:e1:d2:2a:d7:6f:
                    1c:5e:4d:c0:bd:d1:5b:9e:ad:59:e2:a4:ca:5b:c8:
                    94:65:47:b1:cd:74:fb:66:b0:fb:16:7f:3f:93:fe:
                    06:0d:20:ce:50:e2:52:93:ec:33:05:e2:6a:39:56:
                    15:be:13:52:df:c3:8c:25:1c:08:81:66:d4:2a:89:
                    08:31:7b:fc:1a:aa:64:5f:7e:b0:b0:a7:e2:b6:a0:
                    4a:bb:ee:0c:a2:71:ba:17:a8:07:ea:5b:76:fa:65:
                    0a:af:53:68:ca:00:9f:b2:c4:5e:bd:50:5e:8f:28:
                    4f:59:4e:3b:5b:52:79:13:de:d7:62:ad:9a:5b:33:
                    f4:6d:a1:91:0e:4a:33:4b:66:32:c1:10:a6:79:05:
                    81:14:a9:18:55:e7:45:6e:43:83:2e:14:a2:55:43:
                    e1:c6:4a:b9:62:aa:c2:fa:fb:c7:08:8e:cf:81:93:
                    30:25:81:65:6e:40:c7:1c:83:6d:cd:7c:1c:67:e1:
                    84:ad:53:92:91:6c:de:48:d2:e1:2f:c8:fa:c2:ff:
                    39:e2:37:1f:74:9e:9b:c8:1d:6c:2a:1b:7a:82:56:
                    14:c6:c6:cb:36:1c:73:c7:60:39:10:47:6d:08:39:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:0F:0F:3E:A1:22:D7:63:A3:8A:CD:C1:7B:B1:69:27:54:63:00
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:36:42:22:ea:3f:b8:bc:20:1a:27:60:45:a6:7b:f7:6d:
         e5:6f:5f:8a:27:a1:e9:f3:15:43:7a:41:8b:02:47:33:22:c3:
         80:97:8b:e2:da:1f:d7:26:df:46:0d:47:67:ff:0e:a6:26:58:
         14:70:d3:ca:b7:e2:ca:34:46:4c:2f:00:77:b2:e6:ac:64:d7:
         01:93:de:aa:3a:df:13:61:02:05:b8:bb:1d:ab:80:0f:01:bb:
         11:6c:85:97:75:8a:40:0b:8d:9d:8a:cc:f7:b6:23:70:a6:38:
         c2:9e:50:7a:e4:ae:d3:10:df:7e:38:3f:fe:09:b4:31:fd:93:
         d7:23:2c:8a:b7:b8:4f:57:e9:49:11:e7:71:47:23:02:53:41:
         a1:63:08:41:2b:84:52:6f:e1:65:b8:dc:b7:ae:b2:af:09:bc:
         bf:ff:3f:d0:2d:6b:c9:18:45:8d:cb:48:29:73:b1:46:b5:cb:
         c2:94:2a:58:63:72:f5:65:09:a5:87:32:bd:f5:3e:21:39:85:
         18:1d:8b:88:ec:1d:33:8a:98:cd:2c:75:54:9a:87:53:ee:e1:
         a3:71:09:74:cd:38:de:15:d5:25:38:ce:35:cf:a4:fc:19:ea:
         3d:05:65:e4:73:07:49:16:10:83:e5:ff:70:54:4e:94:bc:c5:
         4e:d4:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:52:31 2026 by rpki-client