This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File:                     LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier:          6IwqWaVGVRbjuSJLXs5toW5q0yu8iND2LQ1YMooEpWk=
Subject key identifier:   10:09:13:A8:C2:3D:9A:9E:57:2D:B5:48:53:FD:74:AB:9A:0B:5B:C6
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer:       /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial:       019BF72CC2A50D2F054BBA0C0C12D2CA2947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 22:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:04 +0000
Files and hashes:         1: 7SVxOyfDTdVmUsWmgURrDRQqatM.roa (hash: kbRt8SjM7r5zHztQmiuG8W05HbVb928re2uT+S2QpLY=)
                          2: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (hash: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw=)
                          3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: RcII14VaDEntZQxwmVBLnHGM5rhuVVZaP9PytAc5Cv8=)
                          4: lDkFS134PLdNwq1XhPeVSuXWQw0.roa (hash: sWC1chnNML5lu5ldTASbLUnaff4GQPJ6rkXZBHVvz6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:c2:a5:0d:2f:05:4b:ba:0c:0c:12:d2:ca:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
        Validity
            Not Before: Jan 25 22:01:04 2026 GMT
            Not After : Jan 26 22:01:04 2026 GMT
        Subject: CN=100913a8c23d9a9e572db54853fd74ab9a0b5bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:56:ff:70:1e:d4:1f:4e:48:f2:81:d8:d0:
                    e2:eb:3e:85:61:d1:6f:38:d9:33:ef:0d:fc:b9:ad:
                    92:df:ad:55:18:ab:49:54:4e:83:d3:59:98:b5:16:
                    2c:b3:12:78:18:96:06:2e:d8:a3:1c:b2:95:c4:5c:
                    b5:dd:67:cf:fe:93:3d:63:34:6e:ef:8c:b6:72:e9:
                    4d:de:42:3d:30:09:cd:72:80:5a:e6:03:ac:a1:66:
                    be:f6:66:b0:88:52:77:cc:fd:7b:68:6e:65:a2:39:
                    4e:0a:1a:61:43:bc:21:ce:93:e0:b4:c5:23:12:68:
                    62:a2:e5:8b:58:7f:dc:87:dc:60:8d:13:20:cd:c4:
                    9f:cf:24:0f:21:0e:cb:08:b4:73:1c:cd:f1:23:34:
                    6a:c6:de:91:84:a0:8c:0a:3e:88:21:eb:36:ff:aa:
                    f0:2d:08:8e:7b:d4:f4:15:6b:9f:c4:5c:bf:eb:bf:
                    dc:ee:99:61:98:32:10:24:cf:2b:a7:a4:d7:42:14:
                    86:12:51:7d:b0:71:9b:ce:cc:cb:ef:ac:04:a5:a1:
                    7f:39:92:9f:00:2a:a5:a0:f0:35:34:90:a3:1d:bc:
                    d3:3b:fe:72:b9:c1:4c:6f:c3:14:a5:1f:aa:01:32:
                    99:b4:2a:09:cd:05:c9:fe:9c:e4:bb:19:e7:eb:54:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:09:13:A8:C2:3D:9A:9E:57:2D:B5:48:53:FD:74:AB:9A:0B:5B:C6
            X509v3 Authority Key Identifier:
                keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:22:13:15:1b:7a:53:56:a9:cc:84:23:0f:a6:9c:34:14:8f:
         24:7b:4f:48:e9:e4:33:19:a1:3e:c0:e1:9d:ac:ef:e5:d4:2c:
         d8:f8:5c:ee:8c:dd:e6:a8:fc:75:29:59:18:0b:54:77:13:33:
         41:59:4a:13:57:66:8b:4d:a5:83:f2:44:ef:46:ba:18:53:2c:
         a9:da:a6:89:0e:d6:b2:1d:88:43:d5:3f:99:c9:8b:9f:5d:c3:
         90:65:79:2e:85:d9:e7:cd:b5:f4:c6:b7:6c:6d:a3:c0:af:e8:
         b0:68:c9:c6:58:0f:e9:99:46:05:ab:33:55:d2:15:10:c2:3f:
         4a:f6:50:ad:e2:a6:dc:b7:c2:a8:f7:53:6c:02:11:28:fe:5d:
         bf:15:b6:9a:89:5d:ca:2d:3b:39:0f:c6:b2:30:65:01:2d:36:
         30:63:13:9a:a6:e5:e5:e7:98:90:2d:71:e3:5e:dc:9e:d5:9a:
         4c:1f:11:82:41:62:f2:64:74:83:21:2b:7c:f2:5d:2c:b7:1f:
         39:07:9b:f9:d2:15:00:a1:94:3e:40:9b:fb:16:cd:85:34:29:
         c8:07:4f:94:61:67:7e:c9:6a:09:b7:52:63:6d:93:70:b5:f3:
         6f:1d:2e:c7:d9:a5:1d:a0:24:d7:2d:18:88:d0:b7:2e:6a:72:
         59:20:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:50 2026 by rpki-client