This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
File:                     lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft (raw, json)
Hash identifier:          1dBKFB5fwzAhy8TceVa7WjacHYp1W1ShgzMmWKKdBPM=
Subject key identifier:   E1:19:DB:CE:96:6C:33:7B:05:31:8A:A4:83:BC:6E:FE:32:36:00:CE
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       019BF4D06D4F669A4650E17713A65E1159C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
Manifest number:          0A73
Signing time:             Sun 25 Jan 2026 11:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:58 +0000
Files and hashes:         1: 5duaaoLxI2GH6cCYMPHCmMSHQ2A.roa (hash: pv7D776mN6xHh+aJuajkc1W+nQHEB1SubW6msOXjn6k=)
                          2: 5qo0L1TQGmfb0DZ40F5QQ1AXwt4.roa (hash: y83T+J2MWgz8Ab4dhxXSEXxv3P/YMscFEjT4/HScAVk=)
                          3: ACyMokyAcIhgnojfOOZk2Fp2M_g.roa (hash: RWgqlqxsw+gEGVmD//0j4E4TFF91yMaTTc+WhaSYKqM=)
                          4: lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl (hash: TyEn00b4dfH6RP3/m3Tms9RO3eyEhi+ZKPSEB4QU9gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:6d:4f:66:9a:46:50:e1:77:13:a6:5e:11:59:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: Jan 25 11:00:58 2026 GMT
            Not After : Jan 26 11:00:58 2026 GMT
        Subject: CN=e119dbce966c337b05318aa483bc6efe323600ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:82:75:77:76:42:c2:b3:61:67:df:ea:77:
                    85:93:77:8b:23:bc:9b:f4:e5:4f:fe:df:04:cc:57:
                    40:b9:9b:b7:e0:c9:c5:c6:42:ed:f4:51:49:11:2d:
                    a5:ab:2c:4a:63:e2:24:e7:5c:80:3e:3c:41:ed:aa:
                    11:ad:1f:a6:be:63:3b:40:60:ca:3b:22:30:2a:5c:
                    90:df:57:8c:d7:79:c8:a1:95:af:48:d7:ea:e7:aa:
                    d9:3e:ff:35:e2:23:ed:9d:7a:13:2c:a8:1c:91:78:
                    f1:1b:b4:65:eb:af:3e:a2:24:46:2c:fe:22:0a:20:
                    b9:0b:67:2e:3f:cf:04:90:e5:e8:9f:4f:61:a1:23:
                    e9:00:aa:b5:69:37:07:8b:00:81:45:58:db:72:c9:
                    01:f5:ac:ca:18:5a:12:7b:2c:0a:fb:91:e8:9e:fd:
                    b0:07:49:2b:bd:34:ec:da:f2:c0:ee:8d:82:2e:2f:
                    8b:2d:f0:26:e8:5a:43:98:96:8d:11:9c:72:ab:7a:
                    04:f3:b8:f5:b0:09:23:67:4c:1e:03:d3:51:0f:35:
                    31:a2:09:44:97:fa:6a:dd:94:d4:b8:43:77:7a:0c:
                    1f:7d:ba:9c:6e:dd:48:fb:ac:e4:e6:7d:67:2e:02:
                    47:2e:1c:b7:19:74:e4:09:54:b7:93:be:6d:47:db:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:19:DB:CE:96:6C:33:7B:05:31:8A:A4:83:BC:6E:FE:32:36:00:CE
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:99:0d:79:4e:9f:99:ac:8c:26:91:7d:10:d6:d9:87:d6:
         f6:bf:95:89:90:7f:67:4a:8b:e7:42:96:bb:66:f5:8b:a6:e4:
         b8:d1:25:52:1e:01:e0:d3:4c:89:58:5a:23:3f:df:48:44:ea:
         37:37:31:de:5c:9e:2b:c6:70:a0:fc:e3:60:82:e9:2a:52:ba:
         b6:7c:dd:54:92:11:be:63:ee:e7:c4:7a:5e:de:53:45:3d:2e:
         fa:03:cd:fa:65:80:60:12:65:2e:b7:dc:07:ea:84:ea:75:9e:
         f1:08:b8:3c:15:3d:5b:14:fd:7b:81:af:90:47:b0:93:9a:09:
         4f:d0:24:c4:1b:1b:b4:c5:ab:2e:b8:db:75:ad:73:2c:1f:57:
         79:28:4c:b9:29:0d:23:ad:ee:5a:8a:45:19:39:8a:e2:6a:27:
         29:ed:7d:d4:4b:f8:ea:3d:22:cd:20:2d:cf:1c:c6:06:67:a2:
         dc:e3:18:3b:b3:c9:84:3b:bd:47:3b:32:28:bd:42:3b:14:0d:
         7d:bf:e3:fb:88:51:d7:32:be:3a:8e:6c:34:5b:6c:0e:bb:c4:
         0a:85:d4:04:6e:0c:36:3f:97:cc:0d:26:52:ca:23:3a:08:8c:
         06:06:c1:08:52:41:65:94:3b:62:e7:c7:8f:23:51:87:33:a9:
         fb:ac:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:25 2026 by rpki-client