This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File:                     Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier:          Xp4lufXzmuS6JfzzBDfAhyuGNHGDmAebWkX1U+pE7jk=
Subject key identifier:   A0:AF:41:41:69:9E:FB:4F:4B:D1:06:AA:0D:07:47:06:99:DC:FA:9F
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer:       /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial:       019B1238553900DDF907A73631A575631BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number:          1772
Signing time:             Fri 12 Dec 2025 11:00:40 +0000
Manifest this update:     Fri 12 Dec 2025 11:00:40 +0000
Manifest next update:     Sat 13 Dec 2025 11:00:40 +0000
Files and hashes:         1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
                          2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: 4Us1UH+ZG8EX2bFTTVp2v/C5wbZHI/zeeldEpYGBaV4=)
                          3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:38:55:39:00:dd:f9:07:a7:36:31:a5:75:63:1b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
        Validity
            Not Before: Dec 12 11:00:40 2025 GMT
            Not After : Dec 13 11:00:40 2025 GMT
        Subject: CN=a0af4141699efb4f4bd106aa0d07470699dcfa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:b9:3d:63:d6:39:4b:0d:4e:ba:00:44:a7:
                    f7:0b:f5:f0:e1:e1:a9:2d:03:a9:26:41:2d:60:99:
                    e4:15:65:de:b0:62:bf:bc:0f:b1:7c:07:0e:e8:52:
                    de:3c:72:ad:be:95:df:c3:0f:d4:35:5c:7c:2e:7b:
                    cb:47:2a:d5:15:01:97:07:8e:f4:91:5e:ea:0d:be:
                    b2:a0:77:9f:6d:7f:d4:21:6a:75:57:5e:3d:6b:9e:
                    4e:b1:73:4f:dc:0f:83:6e:a2:3c:d2:b7:1b:09:f8:
                    b5:6f:cb:2d:e8:d6:93:f6:be:77:98:16:1d:37:c7:
                    a6:ee:ff:55:cf:3f:4b:1b:00:ff:a4:35:95:b1:5f:
                    1c:6b:22:32:6e:b0:d4:73:d8:4c:ce:66:c3:42:ba:
                    39:78:d3:e4:1f:a8:87:ee:d0:83:aa:3e:6b:8d:4d:
                    87:0f:a7:99:91:54:33:de:93:22:21:cf:44:0e:31:
                    69:99:35:81:d0:62:3f:30:15:64:33:b6:92:0d:5f:
                    85:2f:26:70:75:87:51:a2:23:e3:41:25:d6:2f:a4:
                    06:05:3e:87:62:08:7f:0c:f3:ca:19:65:65:92:91:
                    d8:62:ee:27:3f:7d:1b:fe:5a:da:5c:d7:10:32:e3:
                    d8:a7:ff:09:03:37:3c:71:a3:50:54:62:f8:22:2b:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AF:41:41:69:9E:FB:4F:4B:D1:06:AA:0D:07:47:06:99:DC:FA:9F
            X509v3 Authority Key Identifier:
                keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:87:9e:80:78:0e:c0:d3:21:3e:45:af:6d:52:af:05:30:f1:
         10:e7:62:69:51:80:e1:9b:29:31:0b:73:d5:17:38:ff:0f:8a:
         e5:91:63:1e:c8:7f:22:98:0c:56:6e:7e:e7:f5:39:ff:00:cc:
         a8:e0:26:46:34:bc:c1:5b:94:d9:d0:68:40:47:bd:db:fd:9e:
         5f:c7:0b:9c:7c:f2:ea:f9:90:b7:2b:22:47:45:22:df:48:d9:
         94:ca:83:ed:c8:d6:e3:12:4a:d7:f3:a2:01:5e:5b:9b:d4:b7:
         4f:fb:d9:16:e3:df:38:00:5e:f1:57:98:e5:a4:9e:36:d0:02:
         23:c4:de:78:ea:9c:bd:fe:86:1f:99:c3:a7:e5:75:13:7b:f7:
         07:90:81:0b:19:24:00:e9:f2:46:91:28:ef:a4:3a:88:8d:a0:
         11:aa:05:48:71:a4:4e:2d:33:63:1c:1d:a5:14:f7:c9:4c:a4:
         9c:96:5b:40:83:b6:57:e4:31:ef:94:4e:4b:f8:60:b5:c0:08:
         f8:02:af:e0:d0:d4:58:5d:6e:d5:b3:98:9e:70:a0:a1:cd:16:
         fa:af:cc:1c:cb:0e:78:b7:78:04:0d:ef:8c:d4:12:c0:de:cd:
         69:a7:1e:a9:bc:f4:e5:03:d1:d3:fa:be:a9:04:49:8a:ca:0b:
         dc:6e:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:19:43 2025 by rpki-client