This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          8OIN1wB7GtvSYP9Gxqxo3moY3er3LCXbxhefidIUM9A=
Subject key identifier:   D0:36:F1:22:D1:B6:D6:8D:83:8F:20:BD:4B:58:FA:EC:EF:64:75:BF
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019AEB625441E134B43EE9EC99A7B2C3ABCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          175B
Signing time:             Thu 04 Dec 2025 22:01:21 +0000
Manifest this update:     Thu 04 Dec 2025 22:01:21 +0000
Manifest next update:     Fri 05 Dec 2025 22:01:21 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: c4X4kvzN69f/i/kvfvXk+AC2n4gNiiSQCiFAI8QJgWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:eb:62:54:41:e1:34:b4:3e:e9:ec:99:a7:b2:c3:ab:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Dec  4 22:01:21 2025 GMT
            Not After : Dec  5 22:01:21 2025 GMT
        Subject: CN=d036f122d1b6d68d838f20bd4b58faecef6475bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:a6:9c:d7:03:31:5d:24:30:a1:93:ee:1d:
                    41:39:4c:98:c5:14:4f:7a:62:ea:0b:18:1e:fa:51:
                    0e:26:29:a3:5c:55:a0:b0:53:53:ba:cc:c3:25:3a:
                    73:50:a6:f2:f6:10:13:dd:30:66:55:4c:c3:35:ee:
                    29:58:44:ed:d1:e1:02:9f:37:5f:bf:da:d9:36:e4:
                    38:38:83:7f:c2:bd:6a:9c:1e:99:14:c5:1a:20:de:
                    c2:0b:9d:89:8d:31:03:b2:7c:ab:45:6b:2b:42:fc:
                    16:b0:5d:61:ec:f9:09:22:9e:c7:df:5e:66:f4:b7:
                    65:e2:17:0b:03:c8:01:c7:41:92:be:d1:b6:c2:9c:
                    26:16:d0:37:63:0e:82:20:bc:1d:63:67:2f:a3:8f:
                    77:f1:1c:55:6a:df:24:55:94:26:80:9e:a6:df:8b:
                    de:48:d1:14:5d:46:3e:8f:5b:fe:db:d6:6f:db:9d:
                    eb:7a:02:7e:ae:45:9b:24:12:18:ae:5b:6e:98:95:
                    b3:cc:69:31:a2:11:b4:5d:b6:93:b1:8c:ca:e7:3d:
                    d6:05:23:72:2d:99:28:17:e5:12:5a:bb:55:3e:64:
                    20:8d:b0:8e:3b:62:86:72:2a:ba:d3:33:de:b0:cd:
                    4a:97:ac:f7:5f:1d:04:5e:77:c8:65:55:8e:5a:67:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:F1:22:D1:B6:D6:8D:83:8F:20:BD:4B:58:FA:EC:EF:64:75:BF
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:47:af:31:3b:7e:e5:14:bb:4e:68:a6:07:63:ee:bf:db:
         73:37:f9:03:e5:d2:f4:5b:96:a4:5d:38:6a:23:32:4d:8d:20:
         99:7c:ea:b2:16:a6:88:09:f0:28:14:97:cd:48:09:4c:94:68:
         12:be:26:da:7f:19:fb:8c:f6:dd:3b:28:d8:0d:3b:7c:8b:65:
         d9:d1:88:6c:2c:6a:00:12:9b:66:08:fd:4c:f3:44:88:d2:34:
         14:bd:3c:d9:7f:dc:89:56:19:1b:b9:b4:a2:1b:49:31:dd:d0:
         d3:b6:ca:13:4e:bc:1a:4d:de:4f:d0:35:db:aa:56:c6:1f:d2:
         d0:42:1a:d5:02:73:c3:66:d8:65:6b:5c:11:6a:c6:0a:01:75:
         c2:c3:40:fc:b2:43:5c:f4:ea:f4:97:7e:8e:98:d2:b8:99:1a:
         ce:94:96:c1:df:6a:31:9a:04:7b:42:36:bb:f6:18:6c:48:0b:
         59:e9:69:cf:dd:1c:15:5e:3f:cd:23:13:ad:b8:94:e6:66:91:
         83:83:a5:e5:96:3d:0f:11:ac:56:49:e7:e3:19:cf:7c:c9:fb:
         d0:7d:63:63:4b:6c:7c:fe:ad:c9:b4:65:e1:27:0b:f8:c9:a7:
         3d:c4:e0:8f:c4:e7:7e:90:d0:47:7e:5b:b0:fb:98:87:dc:8a:
         da:ce:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:00:36 2025 by rpki-client