This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          EfjM+Uf9W+SHhkfH1WIhK8+mh6J2VOuFLFW4T4UeFe0=
Subject key identifier:   5E:48:F0:51:7C:C5:0F:6D:0E:7F:D5:0D:61:09:B6:C1:F7:92:CB:03
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019B047E916FC3F2C2B0CBB467ECD3BE0302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1768
Signing time:             Tue 09 Dec 2025 19:02:42 +0000
Manifest this update:     Tue 09 Dec 2025 19:02:42 +0000
Manifest next update:     Wed 10 Dec 2025 19:02:42 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: N20KLzkpfhRt50TJrLOsuQeQ8Az4GcNe5Hit+gfGmmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 16:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:7e:91:6f:c3:f2:c2:b0:cb:b4:67:ec:d3:be:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Dec  9 19:02:42 2025 GMT
            Not After : Dec 10 19:02:42 2025 GMT
        Subject: CN=5e48f0517cc50f6d0e7fd50d6109b6c1f792cb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:ae:cf:e2:cb:89:24:78:f1:12:4e:6e:81:
                    8c:44:09:f2:08:a3:74:ab:be:99:9e:09:e7:2e:9f:
                    5f:19:42:1b:fb:fd:94:9f:c4:61:97:11:f9:96:ba:
                    39:f4:5c:ac:43:b9:b8:05:6c:4b:b4:93:0f:5c:3c:
                    2f:72:90:03:ea:ac:37:35:17:1c:37:fc:bd:2b:c1:
                    e4:6f:9e:eb:7c:59:d4:bc:2c:84:9f:6e:08:18:27:
                    1b:5d:1d:95:79:86:67:e0:dd:2c:25:a2:f9:ab:02:
                    0b:54:ad:6f:a7:b4:16:cd:1d:31:ef:dc:5e:62:3f:
                    8d:c5:ba:5a:9e:fe:f9:50:6a:b7:4a:c1:f1:6f:e3:
                    ad:9c:41:d6:fd:7c:a6:22:98:a2:52:5b:89:70:33:
                    94:0f:78:95:88:6c:ce:87:6b:67:d7:8c:79:4f:45:
                    86:36:a8:a4:fa:9f:95:14:e8:97:74:7f:c0:6c:f5:
                    d1:13:cc:c3:26:ba:1b:cf:bb:cb:0b:17:25:75:a0:
                    a9:6b:f0:82:5b:8a:e3:ae:d5:67:11:4c:42:46:56:
                    ba:df:69:16:62:0c:10:d3:c8:71:b8:cc:7d:49:95:
                    68:67:68:2c:e6:1c:56:88:ec:a4:41:4b:81:c9:29:
                    d8:de:e8:20:fc:0b:5b:c5:24:35:21:d5:83:f5:1f:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:48:F0:51:7C:C5:0F:6D:0E:7F:D5:0D:61:09:B6:C1:F7:92:CB:03
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:82:44:09:5b:86:f5:3f:a2:f8:13:f6:9f:25:ff:a9:23:19:
         54:ad:9a:d2:9a:46:85:29:a3:e2:e8:c8:5e:45:db:c9:a0:d8:
         46:5c:6a:67:8f:c2:54:04:fd:4c:4f:56:ef:92:9b:17:c3:a4:
         e2:22:30:b5:70:1d:07:02:38:68:bd:db:e1:b5:21:47:c6:fa:
         28:9e:0a:b7:eb:01:db:95:fa:b4:3a:ed:70:cd:77:e8:db:2c:
         c2:4a:6b:fe:91:3f:ae:cf:ce:b4:45:9d:fe:79:d2:5d:6d:c1:
         51:07:41:eb:19:97:b4:9a:c7:b8:97:ac:42:fe:d1:ba:0a:d4:
         13:e2:16:05:20:62:3d:97:b6:16:42:6f:28:98:00:3b:07:e4:
         ac:e9:45:12:a1:02:bf:4d:88:ee:24:08:86:a6:7d:34:f9:43:
         44:1f:c4:4c:0c:a5:74:4e:49:8d:39:2f:84:27:23:67:1a:13:
         76:b4:e9:54:b0:c8:70:13:f5:43:ba:df:f7:e9:c1:31:19:a5:
         e9:16:73:5b:45:c9:4f:1b:8e:ea:72:e3:e0:5d:65:96:17:2b:
         33:e0:4a:3d:1e:4c:c5:68:ac:81:1a:a7:27:b2:26:bd:91:96:
         5d:48:f0:b1:25:a3:28:f3:bb:a9:48:1b:05:8c:7e:fc:b9:ba:
         18:f1:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 23:36:15 2025 by rpki-client