This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          23JUT1Hsdc4ojUz053sdzFL99cuoT/DlpVyJCJo81mQ=
Subject key identifier:   02:1F:E5:FC:FA:3C:22:FB:AA:C6:83:6D:CF:8B:8D:25:B2:00:99:84
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       019BF5ABE46890970BAA4D810F9DCA6C68C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          028C
Signing time:             Sun 25 Jan 2026 15:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:41 +0000
Files and hashes:         1: 4KwoPjMEOKwVgqjkR1iM1Sga8ls.roa (hash: zEP8VUcw4u5qtFYg9l1WCeFUs+0BvYnLihv3gDQhsgg=)
                          2: 5quSGDFiCc7x9xQL3RZ2oDRoZEI.roa (hash: GKv86KDQ60+mPLbc7GtPs9wY5m72zA4FBxOc21v69ao=)
                          3: 6MOfJoJfjgHruP2KWqkzqptDlOw.roa (hash: 7sX90kHGNjmL95aSRKZrdKO8hW7cdwTVGZ3KRAMueWY=)
                          4: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: DBBFrsI5d+b8aIAqWnozvUVaGg/NBlasQjwRDzLZCU8=)
                          5: RdYGiesB8wE7Cc7xqOKt4JlLnok.roa (hash: W3DsiCdc3x/PMoGS82zn756ZVAXlVYusY8WrxMFT/7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:e4:68:90:97:0b:aa:4d:81:0f:9d:ca:6c:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: Jan 25 15:00:41 2026 GMT
            Not After : Jan 26 15:00:41 2026 GMT
        Subject: CN=021fe5fcfa3c22fbaac6836dcf8b8d25b2009984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:00:9c:50:96:5e:a7:46:9c:b8:4a:4f:13:
                    72:ef:13:8b:21:e5:30:ec:03:68:a6:7c:bc:b4:0c:
                    c5:1c:93:a8:2c:d2:71:1c:af:f0:ac:20:50:c3:04:
                    56:89:1f:c5:3f:7b:44:5a:bc:eb:c3:e2:b2:cb:00:
                    09:27:9e:fc:69:1d:35:af:99:3a:6e:37:7f:df:c1:
                    da:ed:ca:d4:2f:8e:3b:26:6f:f2:dc:e4:38:fa:c9:
                    c1:41:07:8c:65:01:8d:ac:10:d2:2f:0d:c8:1e:00:
                    0d:4a:2c:07:63:df:b4:4f:24:82:20:6c:73:ec:4c:
                    90:40:a0:bf:54:f8:d3:11:b8:9a:d6:b7:76:80:e9:
                    d1:42:18:4b:2d:36:48:18:12:6f:b3:3d:3a:26:73:
                    cc:84:55:e6:85:03:38:57:fb:a3:41:96:64:aa:9e:
                    25:c1:e9:7c:72:70:5f:b1:42:27:d6:44:ac:8b:24:
                    58:ff:e7:bb:1a:b2:c1:c2:40:5a:e4:44:04:28:34:
                    b5:41:b5:87:f4:92:25:da:13:d8:4e:37:8c:f5:27:
                    be:7d:9d:bf:74:46:70:67:5e:0f:8b:be:d7:6d:58:
                    bc:6f:2a:bc:27:24:1d:96:22:9a:a5:cc:66:8b:d2:
                    d1:d5:a7:ad:2a:e0:a2:10:45:45:d6:7d:c3:e8:f6:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1F:E5:FC:FA:3C:22:FB:AA:C6:83:6D:CF:8B:8D:25:B2:00:99:84
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:44:7a:b5:65:95:fa:31:22:08:49:1a:1e:6e:da:29:f8:5c:
         20:ab:4b:72:c8:0c:50:c3:ef:5f:c5:ff:ac:0d:71:06:0b:f2:
         3f:0d:db:06:18:e7:4a:21:49:08:08:61:26:b4:ce:52:4c:a2:
         da:a5:2b:61:63:a5:ab:47:e3:f4:ef:90:11:f7:e2:81:b4:51:
         e1:01:0c:38:a4:65:9e:d7:f9:a6:5a:6d:30:fb:a6:84:12:8a:
         cf:8d:6c:eb:0f:68:32:de:f0:dd:8f:e4:d4:c7:c2:ec:21:c1:
         13:3a:27:c3:94:d5:d7:08:bc:a7:88:3b:6f:68:5d:23:46:4b:
         18:f6:e1:a1:9f:ea:8f:b8:38:f5:ea:fd:e3:5d:f9:a8:c8:19:
         84:27:4e:05:eb:51:d8:8a:dd:2e:2f:e6:e6:5b:3f:d5:59:c7:
         1b:f1:d8:c7:70:63:92:48:eb:37:39:80:51:05:e2:79:01:44:
         88:c9:82:a5:7d:28:73:63:1a:e1:c5:1c:85:b9:42:30:1a:04:
         b2:63:12:6c:64:a2:22:25:41:a4:29:76:53:68:3c:b7:8b:af:
         00:bc:46:ea:f5:69:3c:40:a6:27:e2:ab:6d:6f:bf:a4:5c:79:
         1e:a9:bb:34:d0:1f:5c:1f:94:2a:12:bb:0b:cf:6d:b0:0a:1f:
         c6:1d:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:50 2026 by rpki-client