This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File:                     Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier:          eMy/aWrSyG598HHnJDgnScYkfo9iYJWSMnp/xsiNdHk=
Subject key identifier:   DE:3C:D0:18:3A:2F:B4:AB:A2:FC:BD:B5:ED:DE:7A:04:03:98:37:28
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer:       /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial:       019BF79A8C809DAD3F53C10BFAA3054F4223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number:          01BC
Signing time:             Mon 26 Jan 2026 00:00:59 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:59 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:59 +0000
Files and hashes:         1: 6ShqfJ4w0dhyyxOTeWA4pIn8v2I.roa (hash: G2k5PxWvX5HN6A9EHs0dHdescyeu5uV2PhXpcj9QkhU=)
                          2: 6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (hash: FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=)
                          3: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: CNmA1P5F9VW0Po8U/yt3Hgrhffo084yvBZo3P2xmSlA=)
                          4: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (hash: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:8c:80:9d:ad:3f:53:c1:0b:fa:a3:05:4f:42:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
        Validity
            Not Before: Jan 26 00:00:59 2026 GMT
            Not After : Jan 27 00:00:59 2026 GMT
        Subject: CN=de3cd0183a2fb4aba2fcbdb5edde7a0403983728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:76:f8:50:36:2c:c6:1f:ea:5b:43:fb:d1:
                    26:dc:60:fa:ab:fa:41:9b:65:cb:8f:00:20:bc:09:
                    80:57:18:ae:a9:8f:3d:15:b5:4e:7c:41:fb:f1:60:
                    41:14:ec:5a:c4:af:1f:40:db:95:28:31:fa:d9:4a:
                    8c:f8:59:b0:30:89:c8:76:53:1e:50:05:b9:fc:71:
                    dd:9f:cf:c6:9a:c9:91:b8:4e:bc:bc:fa:57:54:b2:
                    11:e5:e7:f3:bf:fd:a3:c6:72:f7:d0:b3:63:dd:70:
                    91:82:16:8b:6d:84:af:db:9f:a3:b9:79:2c:f7:49:
                    4f:59:8f:dc:42:ae:29:2c:4c:4e:c4:25:4e:ec:cb:
                    9d:7b:1c:b3:c1:16:a0:02:0a:5c:e0:35:dd:9b:70:
                    fa:7e:fd:1b:78:c3:d6:16:8b:a4:19:70:6b:cf:9f:
                    57:c4:4b:a5:c0:7c:66:56:35:34:7b:10:2a:e7:37:
                    6c:5d:a4:c4:96:ea:cf:aa:1c:6b:4e:3a:3d:33:2c:
                    0e:9a:6a:d2:c0:00:88:f2:3f:b5:89:f2:dc:69:7b:
                    a1:ca:45:0f:33:2b:0a:4d:d2:e2:3b:2c:e8:f7:ca:
                    cc:38:80:3a:32:85:41:3e:a3:cf:ad:86:4f:0a:15:
                    34:99:eb:59:b9:72:0f:46:a5:f5:b5:3c:c2:a1:f2:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:D0:18:3A:2F:B4:AB:A2:FC:BD:B5:ED:DE:7A:04:03:98:37:28
            X509v3 Authority Key Identifier:
                keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:8b:05:bb:36:49:bd:27:48:af:1c:53:6f:fe:fe:68:bf:
         de:ef:97:c9:39:78:36:57:de:98:d6:79:cf:c0:e6:e8:ee:24:
         9b:a1:9c:cb:17:98:4c:5a:d8:84:d8:b4:33:5c:c2:2f:c8:45:
         82:cd:10:f3:df:27:18:72:7c:53:7c:2f:60:e7:68:a2:40:f1:
         7e:40:ab:9b:d9:64:f6:64:dc:ab:4b:44:1e:20:56:59:d0:05:
         b7:24:a9:58:a1:73:08:57:69:de:6f:7d:77:1e:5f:b3:f3:ab:
         ba:c1:14:07:5c:24:17:48:75:d0:6a:0e:a4:ae:f2:31:e8:17:
         1a:e6:5a:7b:93:9e:30:fe:1d:75:a4:ef:14:18:a7:7a:33:13:
         73:9d:35:bc:2a:3a:1e:a6:7d:36:3a:02:dd:b0:07:39:ab:89:
         bc:f0:f1:f1:12:28:13:f7:55:ec:02:b8:d7:67:bd:b4:4c:1b:
         96:39:cc:b0:af:f8:22:03:2e:01:92:a8:66:b6:2e:63:8f:3b:
         fc:2a:55:6d:a6:82:36:c2:26:fa:ab:b8:8e:62:57:89:f2:8d:
         78:75:e5:87:89:da:80:49:a6:04:08:a7:24:df:8a:ce:37:8c:
         ce:1c:e1:18:10:e4:aa:c1:04:35:20:e7:cf:14:45:9e:b0:af:
         8b:b5:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:51:50 2026 by rpki-client