This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File:                     LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier:          QgqBLiu1korDNbh4xGJWodVMG7fuv+Rr43M+Rr5Nz88=
Subject key identifier:   2F:4F:9B:95:9F:88:C4:9C:6C:77:C6:EE:FC:51:B5:80:0E:A1:E0:1F
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer:       /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial:       019B5A1AD8466091A59B95C5F04EF65BD3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number:          01F5
Signing time:             Fri 26 Dec 2025 10:01:07 +0000
Manifest this update:     Fri 26 Dec 2025 10:01:07 +0000
Manifest next update:     Sat 27 Dec 2025 10:01:07 +0000
Files and hashes:         1: 2RLPKPvDSs3i2HR8_eugi8jwWnc.roa (hash: wcYNpPvYweifi8qy+TpJpPxYZ1uEH1ELvZbmF4K8Vuw=)
                          2: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: sVYlRyGQxSMb+E5KD7rBnlTgKSP6er0HAour3JCd2eY=)
                          3: urOt64IcWjkGwHZxkqOCPUOEjR4.roa (hash: Rkv7UWJXHLiOXNWaX5iz/7GalanqXJANSGjIZFx+Xgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:1a:d8:46:60:91:a5:9b:95:c5:f0:4e:f6:5b:d3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
        Validity
            Not Before: Dec 26 10:01:07 2025 GMT
            Not After : Dec 27 10:01:07 2025 GMT
        Subject: CN=2f4f9b959f88c49c6c77c6eefc51b5800ea1e01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:10:49:28:02:b0:b8:27:f8:e0:47:7e:81:
                    af:8a:ff:64:bb:e2:b9:ab:8b:9d:24:26:a8:ae:da:
                    19:5c:08:a6:de:92:66:d0:93:a7:4f:f3:65:e1:2b:
                    78:cc:ea:e8:e6:e9:7d:99:89:23:d1:43:e8:b2:18:
                    ad:b7:7e:1a:c9:5f:93:09:60:b1:37:06:fc:87:36:
                    3f:28:ed:80:e2:9f:d6:a5:8c:b3:d2:3b:47:2d:eb:
                    f5:d9:b4:12:e6:56:16:fb:95:d7:74:5f:97:d5:06:
                    33:21:32:b8:c3:7c:a9:6f:e9:be:5e:44:0f:48:db:
                    b0:89:29:63:80:ad:f8:80:f8:36:c2:33:a6:10:0c:
                    a4:08:c1:72:3b:23:9b:fa:f9:25:5f:8f:a4:e6:83:
                    89:2e:b5:06:8f:e0:a3:60:12:a0:f6:0f:a7:b3:5f:
                    12:f0:80:9c:6d:9b:e1:f7:a4:36:4c:7e:4f:f2:d1:
                    05:e5:c0:a0:fb:df:29:67:81:29:7d:c6:63:7e:6d:
                    da:e2:9b:58:03:45:fe:6e:5a:9e:34:6d:02:b2:7d:
                    54:92:3f:a0:91:11:59:15:1b:03:2d:54:8e:6a:84:
                    bf:fb:7b:37:47:5e:aa:e1:ce:67:9e:c6:ad:25:e3:
                    ab:c0:e1:cf:58:5d:46:c0:e8:ff:10:64:46:85:8f:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4F:9B:95:9F:88:C4:9C:6C:77:C6:EE:FC:51:B5:80:0E:A1:E0:1F
            X509v3 Authority Key Identifier:
                keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:fa:d0:08:f1:73:df:be:b1:79:4e:eb:67:03:96:cf:98:
         1f:90:6f:00:d9:46:38:20:3e:df:ba:a1:c2:37:8c:db:b9:30:
         75:9f:7b:23:ee:a7:56:b8:85:17:ca:d6:5b:4e:32:0e:c4:f0:
         8e:fb:0f:f5:7f:81:74:09:2f:83:80:8a:ad:01:cd:40:ba:4a:
         bf:85:d7:a5:8c:d1:9d:b4:72:93:fc:a9:d2:45:f9:06:96:eb:
         4a:3e:b9:c2:40:36:3a:ef:aa:8c:44:fd:d1:9c:b0:b6:0a:54:
         a9:53:19:46:c2:16:c5:65:47:9c:57:5e:6f:75:2a:96:35:09:
         cc:49:eb:d3:ae:99:0b:19:98:6c:09:e5:3d:53:54:a7:9f:4d:
         2e:7a:04:23:82:4c:93:d3:c1:77:92:4e:ce:7e:98:b8:77:b7:
         31:d4:cf:5b:f9:ae:61:b9:c1:43:64:cc:ed:8b:d9:e0:23:c9:
         af:e4:c4:b7:9f:06:2e:e3:04:40:fa:a2:9c:fc:c3:19:cb:bf:
         e0:bd:36:70:88:28:11:ac:3d:bc:13:a6:c4:b1:fe:da:aa:2a:
         a3:5d:10:b1:7d:49:ab:b5:4a:89:a5:0f:1a:61:8e:93:8a:a8:
         51:43:2a:88:85:97:e2:ec:e2:85:04:12:86:6b:85:53:5a:d1:
         4d:d1:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:19:48 2025 by rpki-client