This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          MnDWiOCmlK1CgH6gwqK0waeRrAAGpd2PrKxK9BjfD2U=
Subject key identifier:   B5:74:29:F6:B2:08:20:A0:A9:CB:E7:FA:34:C5:83:7E:BC:2C:59:8F
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019BF72CAF7FB3A88D72514714F8B0F7C627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 22:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:59 +0000
Files and hashes:         1: 7501k10Hy5JYXI9pQLR83jOTyPg.roa (hash: 7y47FiiPEgMoM7qR+pPaLlmCa5gW8XrtUmVO6HZc48w=)
                          2: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: tJRFHm6Nm5thhJEV6qcxYRRrlyDoHrvvU7dA7Nu7m7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:af:7f:b3:a8:8d:72:51:47:14:f8:b0:f7:c6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Jan 25 22:00:59 2026 GMT
            Not After : Jan 26 22:00:59 2026 GMT
        Subject: CN=b57429f6b20820a0a9cbe7fa34c5837ebc2c598f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:33:df:2d:50:b5:6d:bb:e8:d1:2b:fe:f7:
                    cc:1c:7b:09:f7:83:2e:fe:d6:61:85:c8:fc:c2:eb:
                    96:ef:e9:6d:02:d3:48:c2:dd:e0:16:94:65:e7:17:
                    71:0f:3c:a9:74:4d:33:23:fc:f7:ff:a4:50:a5:33:
                    46:31:68:9b:f0:19:37:f0:25:6d:1c:cc:b7:b4:dd:
                    73:f6:c8:6d:f5:be:29:66:71:6d:5d:19:14:cc:a9:
                    e6:96:79:ec:a2:d5:37:30:03:e0:c0:8c:99:52:d6:
                    ef:04:46:22:a9:98:5f:c3:72:9f:b7:ad:08:06:e3:
                    a1:9f:13:e6:0c:96:97:c5:f4:b7:2d:db:d1:de:14:
                    04:9b:b0:5b:83:3b:80:56:e8:94:01:1f:9b:70:b2:
                    ba:2f:04:82:15:3e:45:e4:fd:94:5a:0b:ab:82:65:
                    3d:d9:12:51:27:1a:6c:63:47:7e:92:1f:6a:9e:6a:
                    da:22:93:8c:cc:6b:d6:7b:aa:48:88:a4:62:aa:7e:
                    c7:db:48:5a:01:b5:4d:cf:d0:4d:b7:5d:4d:c2:7a:
                    88:f1:09:eb:4d:14:f0:23:87:2a:02:4c:3a:75:2b:
                    2f:e0:00:e8:70:61:68:61:81:8b:15:db:fb:2d:8c:
                    ef:6f:95:27:92:d8:31:b2:8f:9c:b3:87:46:23:97:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:29:F6:B2:08:20:A0:A9:CB:E7:FA:34:C5:83:7E:BC:2C:59:8F
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:12:24:5c:61:15:55:d4:1b:ff:2c:c8:ad:f9:28:00:a8:8d:
         a9:ad:52:a4:2d:e4:9b:68:b0:d8:85:94:a7:76:17:d4:2f:e4:
         19:43:7f:9a:67:a1:c2:11:be:ad:95:fc:9d:dd:d7:f6:4b:7e:
         04:46:ab:62:66:6a:a3:3e:21:cc:ba:19:26:7a:33:3c:22:5c:
         d3:c5:9e:ba:a5:ad:a1:b5:22:be:98:0c:c0:b7:00:3b:99:8e:
         e2:2b:f0:eb:5b:81:79:89:85:e8:55:80:af:5e:db:82:1b:a5:
         e9:7e:da:a8:c9:ce:a9:99:c2:27:b2:33:86:32:1c:f1:4d:40:
         51:a1:3a:04:cf:ea:34:10:8d:a8:c7:02:80:8f:49:f5:b5:86:
         18:88:ec:d6:2f:d8:05:6c:2c:4f:92:a6:7c:48:c8:11:22:3a:
         c3:bb:0a:53:e8:d0:94:02:8f:28:49:71:c7:35:83:72:d4:2a:
         75:bd:bd:9d:cc:a2:59:4c:77:66:07:16:b3:b1:10:a0:3d:f3:
         1e:b1:da:d7:10:c6:b5:d3:55:40:35:76:9a:b7:c5:93:a4:44:
         5b:d3:a6:42:1c:e5:5d:aa:f5:0a:9b:00:e3:84:5d:22:52:be:
         2f:eb:49:8e:03:92:6d:06:8b:f0:a7:4e:7b:46:e2:44:50:1c:
         df:40:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:00 2026 by rpki-client