This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          LzNfC4TZlZVrF30FlUmvxljUxXH0xxHKSyPH1pwh/78=
Subject key identifier:   7C:B8:E4:CC:9E:BC:94:A8:B5:FD:21:31:2E:5E:CC:13:80:79:54:EE
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       019B1FBD58179CB8F9069973E50A0AF5AB8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          177F
Signing time:             Mon 15 Dec 2025 02:01:01 +0000
Manifest this update:     Mon 15 Dec 2025 02:01:01 +0000
Manifest next update:     Tue 16 Dec 2025 02:01:01 +0000
Files and hashes:         1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
                          2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
                          3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: ADTks99rrE0YkkzfEKjByycGbSKvx1wp3Hm9t0GSwBI=)
                          4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:bd:58:17:9c:b8:f9:06:99:73:e5:0a:0a:f5:ab:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Dec 15 02:01:01 2025 GMT
            Not After : Dec 16 02:01:01 2025 GMT
        Subject: CN=7cb8e4cc9ebc94a8b5fd21312e5ecc13807954ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:f1:c0:cb:86:06:e0:6c:65:ae:66:8e:78:
                    2d:6f:73:c4:06:c1:3c:47:f2:69:ed:18:60:50:bc:
                    64:92:0b:9c:07:f8:cb:a5:20:6f:ad:b9:db:af:4e:
                    58:ba:cd:bd:fc:03:ba:b4:8b:56:79:f9:0b:46:76:
                    05:30:18:d8:38:21:91:d9:52:8f:19:3a:be:88:0c:
                    e8:18:2e:26:7c:c8:8c:23:b3:52:f3:16:62:d3:dd:
                    10:b0:91:fd:24:56:cd:4b:a5:c4:5a:99:ba:48:36:
                    ce:0c:d8:38:93:0d:71:02:17:aa:e4:17:4c:61:f9:
                    89:c4:c2:c7:c5:38:02:e3:cb:e9:5d:9b:cf:c2:3f:
                    d6:60:4a:81:a1:46:8d:5f:e7:9a:13:d6:ec:25:8c:
                    62:be:fa:01:ea:ef:aa:fb:3d:56:b2:89:b2:0b:f0:
                    e3:7e:be:00:07:36:d1:7b:3f:aa:da:34:d8:66:f8:
                    a0:00:03:6d:5e:be:21:60:61:16:0f:a9:4c:f7:6d:
                    2f:f2:05:a1:c1:af:a6:2c:96:00:71:99:73:40:b0:
                    4f:29:63:97:05:40:2a:70:24:63:04:03:ef:08:6d:
                    15:7c:05:7b:95:e9:84:75:be:ac:50:a0:48:d3:b9:
                    71:e9:bd:ae:3a:1f:6b:55:91:2f:f9:19:f7:24:5e:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:E4:CC:9E:BC:94:A8:B5:FD:21:31:2E:5E:CC:13:80:79:54:EE
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f1:62:0f:f8:cc:1c:3a:70:d4:19:6c:62:ca:fe:9a:ca:1b:
         ec:ca:a3:c1:f3:98:48:8d:d2:98:6c:22:e7:8d:21:53:eb:02:
         c2:a7:0f:7f:26:ac:75:7d:03:d2:4d:73:6a:fc:5d:72:9d:6b:
         7d:a7:2e:98:e7:3f:6c:da:22:ef:1b:b0:3e:f4:4c:37:f7:c1:
         d6:1e:5f:90:d2:98:a5:2e:5d:ea:45:c9:ab:9f:42:83:32:2c:
         90:ac:f8:54:51:c9:35:11:eb:9e:a0:6f:0c:ac:bf:3c:12:d5:
         f3:34:e4:c4:70:ef:9d:7e:ea:d7:fa:a0:1b:d3:c9:e4:d2:5f:
         f6:e1:59:f5:2e:fc:06:cb:5d:d2:94:33:69:b0:cf:35:6e:b9:
         9c:d7:83:e2:a0:5a:a2:a2:89:e0:72:38:83:10:7d:49:63:72:
         f3:73:49:a9:c8:90:4c:3d:16:f6:77:68:4a:f5:16:59:bf:3c:
         bc:bd:d8:65:aa:a3:d6:f7:55:71:de:f3:58:2b:35:8d:3b:9c:
         a4:44:a8:e3:77:e3:bd:67:65:8a:46:fb:81:5e:86:5f:6f:cb:
         9a:68:b1:b6:0b:58:f7:ed:51:f2:87:9c:38:ad:65:a1:37:9a:
         93:5d:87:f3:ab:68:98:8e:1e:d1:65:ef:44:14:8e:e8:3e:39:
         5b:1b:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:51:27 2025 by rpki-client