This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File:                     LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier:          YKXf5TPjLTKsIG/TGDng29Okap7jN4HSmQQAipVbrZY=
Subject key identifier:   BE:28:30:CB:9E:33:31:A9:EE:63:1D:77:A5:CF:D9:9D:34:3C:22:02
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer:       /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial:       019B5A8866FFFDAB441CF1BE16EE6A7A289C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number:          06CD
Signing time:             Fri 26 Dec 2025 12:00:47 +0000
Manifest this update:     Fri 26 Dec 2025 12:00:47 +0000
Manifest next update:     Sat 27 Dec 2025 12:00:47 +0000
Files and hashes:         1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: YlpDhJMBy9nEehVVFba5MNqNSTvmYDLwU3jRjaOXntg=)
                          2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
                          3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:88:66:ff:fd:ab:44:1c:f1:be:16:ee:6a:7a:28:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
        Validity
            Not Before: Dec 26 12:00:47 2025 GMT
            Not After : Dec 27 12:00:47 2025 GMT
        Subject: CN=be2830cb9e3331a9ee631d77a5cfd99d343c2202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:7d:b3:6f:d7:e4:fb:6b:2d:fe:50:a5:9b:
                    67:55:c7:5f:7c:8b:fc:1a:17:63:f3:28:b2:71:16:
                    6f:34:0f:87:2a:19:3a:0d:a9:99:2c:3f:4f:73:d8:
                    5b:07:3e:c1:f5:26:22:3d:13:18:98:10:0c:d1:d0:
                    cb:0a:b9:f8:84:44:f8:ce:2e:f5:b2:83:99:57:83:
                    fe:f0:68:f4:5e:21:48:7b:6a:aa:ab:e4:c5:e9:a5:
                    00:52:3c:30:cf:a6:46:71:cb:38:88:f1:fa:74:82:
                    74:11:6c:1c:e3:e7:a9:9e:02:8d:e9:62:d9:8a:f0:
                    b6:cd:bd:94:b4:c7:8f:de:d4:08:11:50:d3:a8:c9:
                    9d:38:2e:00:00:f7:c2:70:12:29:3d:78:99:61:e2:
                    e0:63:17:1f:45:4e:c9:4a:1d:c1:97:1f:4d:13:ad:
                    9c:29:b2:28:96:bc:26:6e:6d:19:91:81:88:f1:d6:
                    46:1a:4e:7a:eb:0e:bf:9b:06:d4:f9:ee:a3:30:5d:
                    06:fb:54:1a:f1:fc:b0:5b:fb:71:52:ca:03:f3:f9:
                    bb:81:ac:25:0f:92:3b:d0:e3:b9:85:1f:d8:ff:b8:
                    b1:24:f1:d0:cd:86:b2:16:45:f5:67:c9:5c:83:c3:
                    b0:de:f4:2a:49:8c:19:6c:cc:a2:e4:2b:5e:f3:ab:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:30:CB:9E:33:31:A9:EE:63:1D:77:A5:CF:D9:9D:34:3C:22:02
            X509v3 Authority Key Identifier:
                keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:47:5c:e3:56:80:de:fa:a1:1f:ff:d4:fd:12:a8:b7:60:
         ba:6e:17:dc:57:cd:7d:f0:7d:82:92:c4:a5:7e:67:8f:1a:ab:
         a2:4a:09:2b:97:14:b9:8d:1b:28:86:9e:47:ee:45:03:34:34:
         24:44:77:3b:1c:d2:92:03:a7:28:2d:e9:18:dd:9a:8c:35:57:
         51:07:27:b4:13:e6:aa:88:c0:3b:d3:07:b8:c2:61:04:d0:22:
         91:c6:a6:b3:22:3b:8f:bf:7e:c9:14:ae:0c:80:88:d3:0c:7a:
         36:7d:e7:61:31:8d:e4:94:31:cf:7a:e9:a9:76:e1:79:96:7d:
         6d:63:7c:54:02:81:2a:29:42:a3:13:9a:1e:7e:f3:c6:ba:7b:
         cc:d8:f6:88:39:a6:d8:03:12:7e:27:fc:40:9a:49:84:24:ec:
         74:37:be:54:46:fa:b0:6c:ce:3e:b8:b8:a4:43:a5:cd:11:ca:
         52:9a:fa:23:18:37:2e:2d:70:38:cd:1f:d0:2f:c8:b5:20:8c:
         2c:b2:47:c7:e9:a6:1d:6b:cc:be:a1:37:1b:f6:5c:45:5d:64:
         30:82:4c:c3:b8:1f:8c:11:df:c6:0b:8a:26:96:39:5d:0a:e1:
         09:28:d1:1b:60:d1:2e:cb:5d:82:a2:04:34:da:af:e3:b6:44:
         6f:ae:e7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:08:53 2025 by rpki-client