This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
File:                     LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json)
Hash identifier:          RuXsReqyFeVzwu+T8shWlOFI8mnEJ4BCVQMy/gL+Yxg=
Subject key identifier:   0F:45:9A:DC:6B:11:EA:82:2E:97:BE:0E:8E:17:55:1A:6E:ED:F3:5D
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Certificate issuer:       /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial:       019BF462904BA19A258FB58298E551795F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
Manifest number:          15C1
Signing time:             Sun 25 Jan 2026 09:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:58 +0000
Files and hashes:         1: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (hash: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA=)
                          2: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (hash: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI=)
                          3: JltXya391JkGSYwvzrVlrXpnF64.roa (hash: UccBxpSpEJUyYr/IQ7pBmDAl22letmtiDRLPjq3VHKY=)
                          4: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: om0jdQ/6scL7k0P9wkeBDtv7RLJAaZJQw/sKsCzSPmY=)
                          5: ObD_iT1UqS396-qKzynzvOWcYVE.roa (hash: MME3dtO0blR3+hlzFcjbnhAzp7Vz9ov/p94b+hvW8jw=)
                          6: SxsTTQPpb002U8lLZRV6SRhekS0.roa (hash: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA=)
                          7: ZpWVrlMb2NpY8HHQlSRsYYYBuS4.roa (hash: pkrt/UmdtM08Ahi5VFPpOcMkqFc/0tZBQtexbUjXoVw=)
                          8: _KBQXB2Ok6DxzjcnIQISyeFSnpM.roa (hash: 9HopsVKQdGio4tWIg9WjN9YxEsegpCgT2SWiuwriul0=)
                          9: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (hash: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc=)
                          10: aKANS_nMhqKQxSqYsTLFAPPf4Ac.roa (hash: uM6jlbx5BEyZgSOnEuqPMeNP3j1cSANjK7c9s23dmCw=)
                          11: gZ4dcf6HjqfncGGeENClMefPX_s.roa (hash: 0o7ggVRkzqB00ya5tb+jsy9euf5xB6KFOxp5W1g0pVc=)
                          12: l8zay_INv7E0VzJhTHR34KyIxYU.roa (hash: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM=)
                          13: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (hash: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM=)
                          14: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (hash: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00=)
                          15: sSe9vjQhLXz0LCDCrOhG3-q5jrA.roa (hash: Ks/R2WS3cda1aUMFkl1JkdwTxi5reAccOsu/QKsp7Og=)
                          16: sohX7LbuAHcvqGne2pID4PK53cs.roa (hash: pnEuUuyYA2H3GexHsPga00jBAH2t730CNd994bqMDuA=)
                          17: tqXOVuDrdAyLecpEp2l4AMffHAw.roa (hash: zp13fmxJbku6zhMDC/zXyPJnhXVh8hRoWiN4PFSExOM=)
                          18: tw6AZDGGpP9NxVAB2it1NsPBTW4.roa (hash: IMxXE5hLU1Mm0BQGKqcA2AkFFX2OTXDF0EUw7x9FubM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:90:4b:a1:9a:25:8f:b5:82:98:e5:51:79:5f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
        Validity
            Not Before: Jan 25 09:00:58 2026 GMT
            Not After : Jan 26 09:00:58 2026 GMT
        Subject: CN=0f459adc6b11ea822e97be0e8e17551a6eedf35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:96:7c:70:e6:2d:31:1e:6e:f1:bc:2f:7c:
                    07:1c:f1:99:f6:f4:f3:03:18:5f:ee:ba:9d:33:19:
                    6d:a2:88:0a:fd:b7:d8:87:d2:b6:c7:e9:04:7f:49:
                    ef:33:e5:62:f5:8b:97:32:d8:c8:e8:30:1f:7e:c2:
                    b1:6d:3d:3a:81:5e:e8:cd:03:0f:82:b7:a0:f8:7a:
                    ee:44:da:47:55:d7:1f:6b:c9:e8:80:e5:71:7b:8c:
                    d3:78:50:ca:bd:54:39:c6:87:ad:ca:72:78:e3:fb:
                    c1:24:f7:e1:81:f6:4a:b6:7d:5f:70:ef:0e:95:2f:
                    b2:a6:60:27:05:6f:20:0d:02:35:99:24:3f:31:6b:
                    d6:de:85:36:0c:b8:2b:ea:9f:e9:5b:e7:06:3e:fb:
                    58:8c:7a:eb:c4:43:51:c4:40:d2:27:b8:42:c3:ec:
                    09:f4:72:91:0d:fb:1c:fa:95:b5:77:26:84:ad:1e:
                    b7:b8:57:15:54:28:bb:16:34:d6:ea:e2:a0:63:4c:
                    84:02:60:86:2d:e7:b3:ef:52:cf:be:40:94:4f:65:
                    12:29:9b:86:e7:dc:73:28:90:a8:29:86:dd:15:17:
                    0a:7a:77:a6:fa:77:cd:37:64:c8:7d:d9:27:b6:4c:
                    96:db:22:5d:a1:23:34:4a:22:73:76:d9:24:62:55:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:9A:DC:6B:11:EA:82:2E:97:BE:0E:8E:17:55:1A:6E:ED:F3:5D
            X509v3 Authority Key Identifier:
                keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:22:36:a0:ec:1e:29:da:9a:0f:dc:14:79:27:0b:3d:5c:
         eb:a8:e5:28:3d:ab:ac:97:48:00:9a:92:99:b5:ac:af:b2:67:
         22:44:4a:8b:35:24:40:d8:95:6b:d3:18:3a:f5:0d:18:26:e0:
         c5:7b:92:90:60:23:4d:73:ab:33:9e:66:b4:e3:5e:01:13:7d:
         b9:8d:6d:01:a9:a6:55:f3:3a:c8:0e:4a:eb:b2:46:b7:17:bc:
         d9:18:5e:c4:cd:d4:5c:c1:63:01:f3:54:ad:24:f6:36:35:fb:
         bb:39:f4:7b:ce:a9:24:28:a3:63:77:f0:00:46:0c:83:17:1d:
         b1:42:97:f5:67:84:24:f1:e4:e0:5b:e1:b5:d7:20:14:be:9a:
         94:45:bc:96:88:6c:80:f2:1b:3e:b5:7a:7a:ec:7d:3a:a6:97:
         f8:a0:f1:cd:4b:f7:a5:34:19:22:66:bb:6b:e9:52:0c:e4:eb:
         48:4e:2d:e7:5a:1a:5f:55:74:95:46:4c:af:ff:a7:3a:80:f2:
         60:e6:2c:17:9d:65:40:c6:14:d3:e0:26:9e:e1:10:31:93:8e:
         fd:49:9f:50:38:f2:1c:3e:ef:9a:d2:a8:4f:99:e0:9c:03:20:
         45:76:d4:ec:1b:03:a3:74:c9:50:b2:14:1b:bd:a0:8b:6b:83:
         d1:ac:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:49 2026 by rpki-client