This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          CpRaMJTSm1bHFW2yl75Z6JFb/j3Hq1ojqiG/FsGep1E=
Subject key identifier:   CF:AB:18:74:7A:9C:33:07:BC:AE:22:35:91:76:3C:DB:21:37:3B:1E
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       019B06A288EE195FE9F9C15AED583367E9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          1772
Signing time:             Wed 10 Dec 2025 05:01:13 +0000
Manifest this update:     Wed 10 Dec 2025 05:01:13 +0000
Manifest next update:     Thu 11 Dec 2025 05:01:13 +0000
Files and hashes:         1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
                          2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
                          3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: T2xhecSrqFeHe/P9p6V5AjItuQCHWlj21JPzC/ajQQU=)
                          4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:a2:88:ee:19:5f:e9:f9:c1:5a:ed:58:33:67:e9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Dec 10 05:01:13 2025 GMT
            Not After : Dec 11 05:01:13 2025 GMT
        Subject: CN=cfab18747a9c3307bcae223591763cdb21373b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:69:cf:60:44:f1:a7:8b:6c:27:f2:07:5d:
                    70:c0:1b:82:b2:8b:76:18:d4:be:2d:02:75:a8:e5:
                    d8:97:19:b8:44:26:ed:84:06:2d:37:83:c6:22:9e:
                    e8:99:44:01:e3:b5:c5:a9:27:39:8c:cf:42:af:09:
                    f3:f6:a7:fc:35:9f:1b:6d:90:47:bd:32:59:53:05:
                    a0:97:81:d7:2d:91:1e:d7:c8:b7:ce:c6:5b:c4:f7:
                    f0:a6:9f:41:58:b1:98:0e:04:68:4a:e8:e0:9b:2b:
                    03:9e:7c:e0:2c:56:56:fc:31:44:45:a5:40:63:85:
                    65:01:a8:14:30:45:75:2d:30:af:15:ca:c3:e6:1f:
                    2b:2d:67:9f:24:fb:6f:eb:c3:1a:dc:b9:97:d2:9a:
                    5f:bb:75:34:92:77:34:39:64:b5:46:3d:9c:45:41:
                    dc:d3:b5:e1:2d:42:ae:19:ca:7c:65:cd:78:41:9e:
                    92:1e:91:2b:3e:c4:43:89:a3:56:d0:47:08:94:87:
                    84:f7:31:3c:d1:18:aa:54:27:a6:9e:82:57:73:c6:
                    8c:0d:ab:a6:e0:22:b1:c8:66:1c:48:2e:66:cc:f6:
                    d4:db:b7:99:ff:5c:bc:15:a3:46:d0:a1:70:71:15:
                    8c:65:a9:f6:01:26:e6:89:cc:d0:82:04:30:3d:bc:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AB:18:74:7A:9C:33:07:BC:AE:22:35:91:76:3C:DB:21:37:3B:1E
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:4f:55:37:5e:43:53:c1:9b:37:08:1c:18:10:32:b6:73:
         cb:e6:f5:ad:d1:59:05:04:f1:ec:dd:8f:f7:3f:1d:ed:43:9c:
         16:5f:a6:90:1e:f9:3c:43:ce:ad:4d:d0:a2:79:6d:62:08:d5:
         58:bc:d5:13:05:b2:55:35:dd:db:cc:5b:be:46:55:99:c3:ed:
         62:6f:c0:e5:83:ff:e2:f5:9e:fe:29:7a:ac:58:a1:be:8e:59:
         9e:55:06:1a:84:8f:7d:5f:ce:7c:fb:ae:3d:6d:e8:0e:c9:fb:
         15:ef:83:c3:14:73:5d:f1:dd:f4:cc:c3:db:07:1b:6e:53:56:
         91:e8:85:9a:b3:a7:29:5f:a1:98:bf:c8:bf:0c:f3:ab:52:a8:
         8b:6e:eb:e8:a4:ff:65:ce:0f:8c:bb:f7:69:79:ac:e5:34:16:
         2c:47:30:1c:89:88:9f:b1:8c:49:c6:47:79:5b:60:80:3c:37:
         c7:c3:1d:fd:aa:7e:a8:63:cd:b6:57:bc:9d:25:10:4c:e8:29:
         6d:5e:1a:89:cf:8c:d2:67:81:6d:95:75:88:76:eb:ba:9c:22:
         d0:1c:e7:78:a5:6f:c2:49:34:b5:44:a6:aa:b5:f6:98:17:35:
         e5:3c:fc:ac:05:b3:42:7b:76:f9:3d:9a:93:47:9b:08:60:5e:
         58:ff:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:58:54 2025 by rpki-client