This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          8NWbJkgWE0tFTJE2iBMye+QhlfsfY7CpTT0AKdyreio=
Subject key identifier:   1E:CD:43:09:9E:25:7E:05:96:CE:14:27:45:0E:37:43:88:52:77:63
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       019BF6517EDBA86DEA8C20D16DD1A4B701B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          09E7
Signing time:             Sun 25 Jan 2026 18:01:34 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:34 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:34 +0000
Files and hashes:         1: CVFC2AZT4zU7rxI78osYUeetX2c.roa (hash: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs=)
                          2: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: grF2vtFd1nUZAhPlh0obm3fNWyEbLLVt9ZczfB2UYAg=)
                          3: PHM1V2LiLUnh_dtpW6HSuR0CqtM.roa (hash: WaAP7/tUSsIc2V6rPX2u2qrSpkI6CsWvnNzs+Vmc/68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:7e:db:a8:6d:ea:8c:20:d1:6d:d1:a4:b7:01:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Jan 25 18:01:34 2026 GMT
            Not After : Jan 26 18:01:34 2026 GMT
        Subject: CN=1ecd43099e257e0596ce1427450e374388527763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:48:7f:e5:ce:9a:16:98:1b:1e:aa:05:09:
                    bd:f9:9d:b6:af:49:90:92:33:11:c0:06:f3:06:74:
                    b0:ab:28:02:91:6d:91:de:6e:a5:0a:ec:c9:8f:75:
                    6c:51:d9:d7:50:4a:64:bf:da:9c:f9:06:2b:f7:57:
                    08:b7:78:25:54:a1:f0:c5:5d:2f:88:59:a1:d4:1c:
                    bc:54:6f:0c:0e:1a:3b:82:dd:45:58:d7:69:e4:31:
                    cb:b5:a9:af:40:c5:dc:ad:96:4e:f2:d0:8d:72:52:
                    c5:89:f9:00:36:24:c3:e5:c5:f0:3b:e8:0c:5f:f0:
                    7c:dc:f9:2d:54:c1:ee:2a:21:12:ce:e8:18:62:f2:
                    fc:21:f9:9d:a3:4c:3f:60:2a:44:62:60:29:f6:b2:
                    1d:ac:b0:29:5a:44:21:39:a6:66:a7:04:7b:24:58:
                    d1:23:9a:5c:ee:3e:98:cd:36:9c:f5:b2:15:ca:a6:
                    ee:84:69:fe:47:15:e8:30:28:39:1d:f2:f7:24:cb:
                    fe:32:40:1e:f2:0b:46:ae:2e:3f:6e:ed:76:7b:e0:
                    f6:ae:39:83:f1:d1:96:d6:16:f1:d6:5f:dc:55:c3:
                    a6:42:c3:d2:e2:47:c4:85:17:25:52:80:44:e4:84:
                    75:76:aa:de:3b:35:ba:35:08:27:41:17:3b:3d:f9:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CD:43:09:9E:25:7E:05:96:CE:14:27:45:0E:37:43:88:52:77:63
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:91:ff:a1:06:b8:cd:4d:37:74:b8:94:69:17:5c:97:85:94:
         be:03:cb:f6:6b:13:20:53:9b:04:40:b0:66:52:bc:31:6e:9b:
         45:87:f0:cc:ce:24:10:04:ec:61:b7:64:1b:e8:30:7b:ac:d5:
         73:62:61:7a:46:7e:63:c1:3b:e2:d9:c6:dc:3a:b5:b2:97:2f:
         c8:eb:3e:bb:cc:aa:c7:65:26:4a:03:b4:55:2d:69:74:c1:44:
         10:10:d6:82:64:c5:d0:b8:10:ac:9e:69:39:dc:e3:7c:5d:fe:
         05:d1:d3:4f:9d:4b:40:41:5e:b3:01:3a:6c:92:6f:a3:36:c6:
         02:e9:f1:80:68:e6:fe:c8:2a:3f:93:7c:3f:56:96:5d:4f:9e:
         70:f1:fb:03:e0:18:11:86:85:2b:ca:dc:cc:7e:ee:7c:93:2e:
         8b:24:4a:09:0f:e0:f4:b0:22:24:bf:0a:65:b6:a8:3a:d4:72:
         8b:cc:8a:15:9e:97:67:f7:b6:39:e6:37:3d:e5:4e:63:39:0d:
         09:85:b0:a0:a0:b9:8f:35:ea:56:a8:63:b7:2e:b6:2f:f5:fd:
         70:af:b7:10:e3:7c:ed:51:23:f8:a7:c8:6a:86:11:3b:63:c1:
         d8:18:72:e0:78:58:19:fb:ed:39:b5:c9:be:49:be:1d:01:80:
         d8:b1:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:05 2026 by rpki-client