This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
File:                     LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json)
Hash identifier:          SZUv/lIJS7tqcbENeCMir5nOHJQASd3DNTNyPpFMVFk=
Subject key identifier:   13:0E:C9:32:1D:8C:C1:5C:DE:D0:2A:01:D5:F1:5E:B1:72:02:7E:CA
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019BF4D10E339CDC7EBA7901B546514AD762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 11:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:39 +0000
Files and hashes:         1: 5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (hash: vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=)
                          2: 8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (hash: pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=)
                          3: 8ob5FLuOujVhWEOwxv-forDA0cY.roa (hash: 84hMVRMPCF3nYrOl11aBzjK0ugOKjdN5OhtUyw9UGLw=)
                          4: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (hash: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA=)
                          5: DUZOtNSDDHj7cC86OP1fzZHoD1Q.roa (hash: sq3RafP/g4VzkIenR5pfY7s3somV9YUfAd4xuK9GhSA=)
                          6: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (hash: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko=)
                          7: KywvzoRGSfaFf4crg97cyBzKoQg.roa (hash: +zmajVZk3ZJyJBrTV2gOa41M7zLT4z26iJSomfXlFX0=)
                          8: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: leQTT64codYFdSFPY16T4Lk0gcWfrdSFrv3E3kXl2e4=)
                          9: T6201kaKz2wAhM6zPCN8a023mG8.roa (hash: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4=)
                          10: YOa6NQaDPDJlsrbtADynIa_NyaU.roa (hash: FoktoHEULMwMUIjsscghqSvVAsZbXr6CN7lF5ijkARc=)
                          11: Zp9zRiO75kWzExNlPmmXxiSiVB8.roa (hash: v83of7u5H6aL+AuW3nStEeiW6yeJITq4WVe1dcQEc/8=)
                          12: ezMcKD1ocdQnV8_lR3eRy32z5zk.roa (hash: fTetUR020tv6nBRIK7MCA4dwzA33cRIz7jgKMOHo3p8=)
                          13: gP563nxVMA_mNyBlWZLFCY-wLxE.roa (hash: aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=)
                          14: j2oK7garGa64vPG9Zj-3eHhby28.roa (hash: ZAX94OS32a4+/IR5q/bXkVHeXAeY+w7FlOE25hmdqL0=)
                          15: n149pV6YzpfmUFYDEF8Zv2819ak.roa (hash: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg=)
                          16: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (hash: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d1:0e:33:9c:dc:7e:ba:79:01:b5:46:51:4a:d7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan 25 11:01:39 2026 GMT
            Not After : Jan 26 11:01:39 2026 GMT
        Subject: CN=130ec9321d8cc15cded02a01d5f15eb172027eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9a:cc:48:44:57:cb:0e:c3:80:55:9a:1e:fb:
                    16:5d:5c:6e:ad:30:42:37:f9:08:17:6f:74:c0:59:
                    b4:8d:2f:73:56:7b:3f:c7:39:a4:46:64:30:5b:d0:
                    50:6f:2b:ec:95:50:8d:24:57:f5:41:9c:f4:90:e4:
                    98:30:61:c4:0b:da:af:38:05:35:bb:7c:a4:6e:20:
                    ce:4c:11:13:61:14:18:d9:c8:bb:55:42:f4:0f:97:
                    88:cc:af:05:d9:52:8d:2f:50:72:97:c1:52:68:b9:
                    a7:ea:34:dd:1c:d2:be:12:40:3e:41:c7:15:df:c4:
                    c7:bf:5c:df:24:c5:fc:5b:0d:a9:83:e2:0b:fb:44:
                    bb:bf:04:9c:44:32:c1:ba:d4:0d:66:2e:13:40:0e:
                    b0:77:49:c8:b0:9a:53:3b:41:b1:d9:aa:4e:27:79:
                    0c:b5:4e:e1:ef:1f:4b:cb:c2:67:c8:47:89:de:63:
                    99:bf:4a:b9:5d:fa:90:52:4b:7b:87:ae:14:43:69:
                    c4:ad:f9:6a:81:f8:96:fe:33:15:82:d8:70:1e:39:
                    ab:a9:bd:6a:a2:3d:77:b4:b9:f7:62:81:89:bb:64:
                    ea:f7:32:e2:5d:7b:9b:e5:4f:95:23:84:75:38:c1:
                    9d:7c:1d:0b:b7:e1:31:0f:85:8b:65:aa:a8:d9:2c:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0E:C9:32:1D:8C:C1:5C:DE:D0:2A:01:D5:F1:5E:B1:72:02:7E:CA
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:b3:da:4c:9a:b2:9e:b0:5b:d1:8c:2f:3d:52:d4:f4:12:
         a9:95:08:eb:84:f4:ae:44:2b:f4:76:06:ef:e6:ba:76:d5:3d:
         f3:d2:61:f9:76:8c:20:2f:98:7b:8a:19:e4:02:5b:85:be:b7:
         a8:10:c5:a9:69:86:9f:96:04:d9:ee:7d:31:74:8e:20:be:1f:
         0d:01:e4:fe:6d:14:5c:ae:0e:19:6e:66:c3:db:1e:b1:23:ac:
         ad:b7:55:dd:4d:b8:ed:d3:17:7d:eb:05:b9:7c:df:30:18:bb:
         53:68:69:cb:8d:5b:7d:e2:20:96:05:d3:de:b1:dc:36:ff:3b:
         62:20:e5:91:b5:76:68:1e:82:6a:f8:3f:ad:25:b3:7d:ff:4b:
         46:e3:74:b5:10:fa:3b:dd:52:8f:85:f6:ec:0a:84:b5:41:e7:
         94:af:f6:75:35:0a:0e:a5:59:e4:7b:6f:5f:d8:6f:88:c4:a9:
         28:d8:21:b3:c3:71:2a:c1:38:06:03:01:5e:f1:6f:74:4d:86:
         0d:f0:d5:00:a2:13:fa:f2:a0:8e:5f:83:14:57:d5:cc:12:67:
         37:84:4a:14:47:88:c3:1a:2e:6d:f8:38:21:2d:6a:e5:ca:76:
         ab:e3:33:35:0c:d9:65:98:09:fe:df:c9:e8:90:55:23:fe:5c:
         de:2c:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:45 2026 by rpki-client