This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
File:                     l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json)
Hash identifier:          aVw1mdQZ1EnHf4CJB1F8AT275pdOh8BO7RaJ5lEayA0=
Subject key identifier:   77:D3:81:8C:DF:A0:3A:7F:3B:F3:51:13:5D:2B:01:60:D0:2F:DB:2D
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       019AEF75FD0B6CF062EAFFC3327420B282B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
Manifest number:          084E
Signing time:             Fri 05 Dec 2025 17:01:18 +0000
Manifest this update:     Fri 05 Dec 2025 17:01:18 +0000
Manifest next update:     Sat 06 Dec 2025 17:01:18 +0000
Files and hashes:         1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=)
                          2: B1HLT6HVLwB92rstkDVPtGcJb6k.roa (hash: BvAQr3GV41olKgINXAE1/bgcJFPiuKEnefG0tTP0pQg=)
                          3: B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa (hash: LBtiQvM+v9zo/IiLv5JEHtXJuteP7xqw+3W3lEbcXeU=)
                          4: LjyNe9rxJurAWebpA8VPlicVP-U.roa (hash: 04j1UHLTs8+CZxOxsMhaQamSqnrD7azW9Ipo0uYjumI=)
                          5: Q-4ZyMW4py48-ZiiwVDJSI-iyGE.roa (hash: jB+WiKmq+3ybNPfLxLp4UcRoJN2hIAXScPSvzLruqg4=)
                          6: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=)
                          7: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=)
                          8: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=)
                          9: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=)
                          10: ckN51ugpQaovcqL7-uk8cWmLqXg.roa (hash: AbepzMs/Oj4qVnFocQGvyMM251EH9U8v0u27S4AwMCM=)
                          11: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=)
                          12: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=)
                          13: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=)
                          14: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: G3zDuxifb9a60Vqbg6bnA0r+xpVZ+rOcMoggh3kG5xU=)
                          15: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:75:fd:0b:6c:f0:62:ea:ff:c3:32:74:20:b2:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Dec  5 17:01:18 2025 GMT
            Not After : Dec  6 17:01:18 2025 GMT
        Subject: CN=77d3818cdfa03a7f3bf351135d2b0160d02fdb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:4c:75:d0:d3:af:40:b9:67:d1:89:f0:a9:
                    bb:33:48:1f:e9:83:73:e9:73:94:2c:47:6d:fe:38:
                    95:2b:ca:8e:19:f3:1c:d6:7e:f7:3b:54:64:74:42:
                    fd:19:38:a0:35:06:9f:aa:04:80:e1:fa:43:ee:ef:
                    49:08:08:64:1a:12:d9:37:4c:a5:2f:68:fc:0e:3e:
                    f7:d7:cf:14:1c:61:23:1c:d0:6e:f3:2e:14:1f:4e:
                    2d:03:55:b1:71:74:a5:94:a9:a1:e9:1b:16:7c:9c:
                    4c:30:0d:a2:f4:8b:5e:1a:87:06:7d:e5:82:8f:23:
                    26:6f:bf:f4:ce:4e:8a:80:04:e8:3b:a6:b0:51:20:
                    ec:3b:b1:1a:20:ec:2b:cb:4e:ed:9b:3b:4e:c2:ec:
                    16:aa:92:72:9f:62:6d:dd:b7:10:b6:e0:2f:6f:b4:
                    50:3b:ca:eb:37:cf:3e:0c:aa:12:f8:67:8c:9b:df:
                    51:31:3c:bc:19:85:e1:45:1c:1b:87:c8:24:be:5e:
                    56:9f:0b:1e:9d:dd:12:0a:5f:3f:06:de:e5:f3:8a:
                    a7:06:11:23:0d:9a:2d:b7:dc:38:80:34:77:ae:a7:
                    ec:84:57:a6:49:d7:f2:a8:75:e1:4d:bc:e2:7b:d8:
                    9e:16:1e:06:ec:05:88:7f:12:a9:55:ac:51:19:cf:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:81:8C:DF:A0:3A:7F:3B:F3:51:13:5D:2B:01:60:D0:2F:DB:2D
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:71:0e:06:e0:9a:6f:81:a7:69:8c:61:00:39:22:0b:41:
         2d:1d:2a:4c:8d:73:b5:ca:29:31:34:27:39:6f:28:73:00:1c:
         a4:cc:1e:1e:20:fd:41:2d:65:36:72:f6:55:f7:7a:40:a3:61:
         02:bc:3b:f7:39:50:4a:74:fb:bf:9d:f8:43:6f:ec:01:0d:ad:
         ae:d0:07:ad:f0:46:2d:ad:97:b7:c7:0a:bd:c0:e6:01:1d:4b:
         74:da:70:89:5e:37:4d:fe:b1:e0:40:a3:4e:99:b1:cb:83:7b:
         a4:ab:67:5f:26:21:c4:32:97:70:54:99:7a:f1:be:06:31:48:
         93:b3:a7:8c:d5:02:07:c4:de:7d:2f:9d:e3:ab:b1:d5:5a:25:
         4e:36:0b:da:8b:c3:0f:62:1e:15:48:c8:6a:a5:43:8f:01:b2:
         73:17:9e:2c:5c:0f:c9:61:31:ae:26:8a:49:d0:72:72:9f:b3:
         0b:ea:6b:49:77:cb:d8:cc:37:4c:e1:05:36:aa:e7:0d:fc:f4:
         df:18:91:f0:57:42:ed:79:56:6e:fa:ff:7d:20:d0:49:af:a9:
         f5:c7:ec:60:71:4c:52:68:9d:9c:0e:6f:5a:66:ee:82:5c:7f:
         ba:1b:16:08:1b:eb:40:4c:96:76:0c:e6:5f:68:f4:08:4d:fb:
         19:fc:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:50:33 2025 by rpki-client