This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          1SK5Kcjf/lymLFskkasGtzBneqXdjyxJwbeZaK/kqx4=
Subject key identifier:   D7:68:04:29:5F:96:F6:61:56:80:91:BA:13:8D:4D:B9:ED:81:2C:96
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019AF50B7F1E96B12750F32840E44E75578E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 19:02:42 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:42 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:42 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: +Hx4McECoU+sIeITiBOjgOaNxaoU4dHgbGM45FoIGWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:7f:1e:96:b1:27:50:f3:28:40:e4:4e:75:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Dec  6 19:02:42 2025 GMT
            Not After : Dec  7 19:02:42 2025 GMT
        Subject: CN=d76804295f96f661568091ba138d4db9ed812c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:39:1b:05:98:14:25:50:4b:15:36:bd:c3:
                    b2:f2:9d:b6:c1:3c:6f:37:63:b9:7f:eb:5d:10:85:
                    d4:7e:fa:c0:ca:a7:45:53:9e:2f:61:b4:72:30:09:
                    08:63:b7:80:70:18:79:21:01:3c:d7:70:c8:c4:fc:
                    38:e0:eb:6e:71:6d:18:aa:99:3e:e6:07:51:73:e9:
                    24:5d:f0:c8:9a:00:76:b3:84:4a:27:85:88:8e:5f:
                    ea:d5:ae:d1:cd:61:f6:d6:d9:82:4f:f4:ad:f3:26:
                    4d:65:77:70:bc:7e:14:52:8f:86:ff:fb:52:a5:77:
                    35:66:e6:54:b3:ae:35:5d:65:0f:01:62:c6:24:24:
                    61:d7:b0:6e:b3:87:c3:77:9d:b2:d4:f2:b0:c3:92:
                    9b:46:2e:3f:4b:8f:6a:54:2a:e1:20:64:9b:85:68:
                    e3:d4:a7:1e:9f:b1:fc:9b:41:13:f2:1c:cc:22:78:
                    a2:6c:87:72:05:e5:25:a8:f5:a0:a3:14:b7:b9:55:
                    a0:71:6c:97:70:48:c8:51:73:80:c2:94:6d:c8:86:
                    66:c0:90:f7:64:c4:f5:ca:73:7d:99:ff:2c:8e:3b:
                    2a:ec:47:40:0a:1e:65:16:2a:93:5e:66:a3:5e:31:
                    22:5e:b9:b9:90:e5:0a:f9:f4:dd:a1:d1:e1:2f:9e:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:68:04:29:5F:96:F6:61:56:80:91:BA:13:8D:4D:B9:ED:81:2C:96
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:da:ac:1c:b2:25:56:bc:3e:98:46:2e:f4:b9:42:5a:40:30:
         35:58:1f:82:23:99:37:cb:6b:18:24:61:f0:6c:e2:02:c5:5f:
         b0:f1:e3:b8:31:f5:aa:76:ee:14:49:8b:cc:74:3b:a8:87:90:
         95:6c:b2:6f:cd:a3:fe:38:62:72:fc:b7:ea:90:84:37:54:66:
         6d:ef:1d:73:c5:9e:13:f4:18:ef:89:f6:17:01:62:20:3f:f1:
         2a:66:ad:0b:3c:ff:00:c8:fb:23:d8:b8:bc:74:b2:44:a7:86:
         3d:6a:f7:19:5a:9e:63:16:ec:04:5f:21:97:13:34:04:68:18:
         9b:00:81:c1:da:ff:61:fb:38:cb:cd:9f:a2:46:51:ce:d6:a9:
         f6:76:9f:1e:05:66:ee:9e:7a:48:35:25:e7:27:22:58:5e:87:
         1b:6d:8f:6e:76:5b:79:36:fe:da:17:11:7b:4d:34:d6:f6:e2:
         56:7b:f7:77:75:79:17:f0:99:5a:3c:c0:26:f5:81:d3:dd:58:
         fa:91:55:ea:44:40:67:78:f3:fe:22:d9:88:22:6b:72:04:00:
         f6:bc:33:6b:49:20:1a:cc:0b:32:15:b6:ed:eb:29:b4:7a:22:
         71:78:87:14:4a:10:23:f6:c1:7b:ab:fa:cb:1e:05:84:3c:f7:
         17:b3:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:52:15 2025 by rpki-client