This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File:                     LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier:          exdkZ7qlDo8+EiOcN612nPxiwC1rUUP3WTu7SCxuuVQ=
Subject key identifier:   45:B4:2E:EB:2E:3A:09:9E:8D:0A:34:4E:BE:A1:58:97:DA:AE:77:41
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer:       /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial:       019BF50791C5E42DD7DD3279B2414CA89A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 12:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:12 +0000
Files and hashes:         1: F8ssCXzm5DlQ97WN2xVb9wJjA_g.roa (hash: RedzK3Q4KVLEhYDQGEu2AFOE8F+deCMqCtqno/fcLrc=)
                          2: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: oGGpFxphUHiTAr1bZOSH14wMXck7/N7vSaGUSY5DdUw=)
                          3: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (hash: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:91:c5:e4:2d:d7:dd:32:79:b2:41:4c:a8:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5894923bb002a434128810607dfb526722004f
        Validity
            Not Before: Jan 25 12:01:12 2026 GMT
            Not After : Jan 26 12:01:12 2026 GMT
        Subject: CN=45b42eeb2e3a099e8d0a344ebea15897daae7741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:02:f9:bb:e5:82:7f:f9:f6:88:7b:59:20:
                    b7:87:92:29:a8:5c:3f:7e:46:56:99:bb:12:0d:b1:
                    e3:12:57:ac:4b:a1:7d:ea:cd:16:78:fa:77:bc:7c:
                    c7:9a:32:5d:09:8f:e7:38:0c:c7:82:ae:23:3c:8f:
                    de:4b:61:17:6c:58:7f:2b:4d:f9:4e:c4:e3:d1:ad:
                    44:b1:93:6b:f9:15:51:21:00:18:5b:38:65:55:b1:
                    20:8b:0e:4a:01:33:2d:f7:9e:56:d0:79:53:4c:91:
                    bd:3e:3d:23:69:cd:6d:26:be:eb:9b:2a:3b:11:59:
                    cc:50:69:ae:3b:bf:86:88:59:b9:82:97:5e:15:33:
                    b4:75:93:96:36:37:87:53:e8:82:5c:23:54:b0:a4:
                    ac:4c:4f:2f:bc:e3:53:42:22:c7:7d:e5:db:a7:a2:
                    6f:61:44:a1:4d:c3:de:60:45:80:d7:8c:09:33:97:
                    16:8a:28:35:49:95:32:4b:53:7d:c7:26:37:c3:84:
                    95:2a:4d:7f:2c:60:42:36:50:1f:c9:c9:1a:2a:a8:
                    34:03:89:df:de:36:51:29:24:4c:7e:2c:2f:6b:e6:
                    5e:bb:29:ff:a3:47:8d:f5:ec:d5:fc:4e:38:c0:47:
                    ab:44:3a:47:b4:c1:5f:59:7f:54:11:1c:68:00:06:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:2E:EB:2E:3A:09:9E:8D:0A:34:4E:BE:A1:58:97:DA:AE:77:41
            X509v3 Authority Key Identifier:
                keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:7d:e6:4e:32:34:07:78:9a:60:63:85:9e:ea:3d:3c:c1:
         8d:16:98:79:86:14:3f:b2:8b:69:9d:ad:1c:e4:e5:92:86:d3:
         ae:80:49:3d:63:e1:c9:cb:df:42:97:d1:ff:b7:6d:0f:36:c3:
         3b:91:24:1c:91:5d:2a:bc:c8:35:b3:32:97:4c:2d:a5:a7:3c:
         6c:91:0f:12:50:ec:51:4c:7a:25:b4:53:52:bc:f0:9b:f1:e5:
         3d:79:ac:90:8e:3e:b7:26:30:95:df:b5:da:75:9d:93:46:29:
         44:61:a9:88:ff:81:3a:5c:10:75:6a:1d:b4:e7:0b:9d:c5:3f:
         45:69:61:30:56:65:ac:12:6b:b3:0b:b6:bc:f0:96:0a:5d:33:
         f5:1e:62:80:c2:d4:d6:5a:85:4a:ae:a4:61:73:36:c1:0e:b0:
         5a:f2:08:84:da:9a:54:3e:6d:2d:ad:56:7e:39:b5:5e:27:9d:
         c2:73:7c:e5:4f:70:2a:04:1a:dc:7a:8b:4e:56:37:18:7c:58:
         64:85:4d:bf:49:ba:1b:d3:d5:2d:03:b9:9b:4d:33:3c:68:67:
         12:77:36:9c:8f:ad:c7:87:bb:27:71:04:8d:a0:75:91:9f:f1:
         9d:42:2e:6c:25:3c:08:62:d3:7c:57:1b:9c:63:98:67:cd:b9:
         c0:e9:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:45:27 2026 by rpki-client