This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File:                     L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier:          Oh0gsrk3rU4Hkcuz8enpnhkhg/v8Duy3rnGNsBEzHJg=
Subject key identifier:   AC:A2:49:F5:DD:16:A4:43:76:7D:AD:51:A5:C0:17:25:8E:9E:D9:95
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer:       /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial:       019BF650E18081E2698F1C52896419FBBAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number:          05ED
Signing time:             Sun 25 Jan 2026 18:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:54 +0000
Files and hashes:         1: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (hash: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4=)
                          2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: d8PbwNv+1nhstzKCPJeMy+gz42TutIDR5JYgNYv125M=)
                          3: okNjrlPSLJ97WbWID906BW9GXVE.roa (hash: fy4ogOK2Fv9dbPv7c8Pqqph2SfYRiTtApiDX9S9KzIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:e1:80:81:e2:69:8f:1c:52:89:64:19:fb:ba:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
        Validity
            Not Before: Jan 25 18:00:54 2026 GMT
            Not After : Jan 26 18:00:54 2026 GMT
        Subject: CN=aca249f5dd16a443767dad51a5c017258e9ed995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:de:30:a8:81:97:24:0c:b8:7c:b2:a8:1d:
                    1f:8c:96:33:c7:6d:b9:31:13:e1:b0:33:be:18:f6:
                    1c:b5:66:77:e8:1d:af:a5:92:41:35:4f:a8:10:e4:
                    45:3d:cf:a9:43:73:bc:37:df:2b:32:d9:42:05:f7:
                    dd:8b:67:6f:86:e0:e5:18:58:07:6c:c6:ac:1f:eb:
                    e4:ec:6f:5d:35:50:e9:94:49:56:8a:86:f7:42:9a:
                    49:18:88:71:61:fb:f4:15:a7:3f:a6:1e:5e:08:99:
                    1d:cc:4f:dd:78:eb:48:8e:c9:e1:95:6b:3e:ff:87:
                    33:6f:13:3d:4f:ea:8e:b5:4a:b4:1d:72:a3:03:e2:
                    2d:61:88:d2:d9:ec:ee:b4:1b:f5:33:cd:7c:33:e3:
                    e8:aa:5c:34:11:d8:22:d7:5b:4b:fc:8a:9e:5b:54:
                    1f:1e:2b:78:7a:c5:33:fd:3b:68:79:a0:62:16:54:
                    f7:92:3d:a6:e3:c5:b1:ba:85:0d:d7:cc:0c:6e:f4:
                    22:39:82:d7:a4:de:50:a7:dd:2a:b1:10:93:3d:98:
                    08:d6:96:67:3f:c3:61:9c:41:0a:ca:33:56:2c:e8:
                    53:57:d2:61:ac:7d:7b:c4:1a:9b:2e:f6:97:2f:07:
                    e7:97:19:db:79:c9:ee:d6:bb:b8:2e:5f:f6:3a:e1:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A2:49:F5:DD:16:A4:43:76:7D:AD:51:A5:C0:17:25:8E:9E:D9:95
            X509v3 Authority Key Identifier:
                keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:7d:4b:ff:19:ab:30:ab:46:de:ed:ae:dc:fa:c9:81:02:
         0d:50:36:7f:de:32:70:cd:20:f6:54:d5:4d:37:a3:d2:cb:f3:
         74:5d:98:00:c5:8a:8e:8a:a7:9e:9b:b2:10:73:98:66:ed:ab:
         64:64:f8:6b:13:b1:16:c4:ab:73:66:20:a8:a9:12:53:22:d0:
         81:78:7e:c5:13:6b:af:b6:eb:a8:2f:0a:5b:bb:17:80:5e:6a:
         ad:33:cf:e1:d5:83:c1:c9:3b:e5:ca:a0:c1:12:75:f6:14:ea:
         ac:49:fe:1c:50:b7:4c:33:60:d3:88:4e:17:53:41:6d:1a:bc:
         01:66:0e:bb:55:38:50:7e:f9:79:b4:aa:b9:fa:a6:55:a8:f6:
         13:bf:de:b4:23:70:6e:d5:ae:a0:82:0d:08:89:4a:35:ae:14:
         17:ad:c3:76:f6:e2:dd:09:45:b2:ef:70:9b:1f:3b:43:33:59:
         15:24:95:01:aa:c9:9d:04:f4:57:53:e9:56:41:cb:45:2e:40:
         2a:cf:06:8e:9e:bb:f8:e0:2b:c5:1b:34:b8:be:8c:8c:eb:f4:
         e1:d2:bf:f5:2f:08:77:1a:78:73:60:d1:1e:0e:d5:3c:7b:8e:
         9d:64:f1:7a:ce:55:52:7f:cc:fb:fe:05:62:7f:01:7d:75:e0:
         70:51:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:23 2026 by rpki-client