This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
File:                     LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json)
Hash identifier:          S/fCmm+WvZQO4wH2q6RVQi+AZjr9FbIP9uib7Wa4F3I=
Subject key identifier:   D2:54:35:14:85:28:61:8A:2B:BC:C5:E6:D3:C5:7D:17:5F:0F:8F:1E
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019B25881407A3BC54AF59573D34E5F9CB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
Manifest number:          1781
Signing time:             Tue 16 Dec 2025 05:00:33 +0000
Manifest this update:     Tue 16 Dec 2025 05:00:33 +0000
Manifest next update:     Wed 17 Dec 2025 05:00:33 +0000
Files and hashes:         1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=)
                          2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=)
                          3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=)
                          4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=)
                          5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=)
                          6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: v8UmhmaIqE+31l7dPcZ8yFjSVpRFtXWMHdJoRA9xMRY=)
                          7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=)
                          8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=)
                          9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=)
                          10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=)
                          11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=)
                          12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=)
                          13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=)
                          14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=)
                          15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=)
                          16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:88:14:07:a3:bc:54:af:59:57:3d:34:e5:f9:cb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Dec 16 05:00:33 2025 GMT
            Not After : Dec 17 05:00:33 2025 GMT
        Subject: CN=d25435148528618a2bbcc5e6d3c57d175f0f8f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:63:6b:68:bb:be:b3:81:22:4b:0c:08:00:
                    1e:cd:71:a1:84:49:57:da:0c:ff:de:a9:38:3b:b1:
                    65:e9:55:92:ac:a5:e0:d0:f0:bf:f3:47:b7:f6:51:
                    d6:e1:26:dd:76:70:ce:f6:94:66:bd:0e:3d:a2:91:
                    df:56:5f:bc:65:54:90:df:df:04:7e:d7:7c:c9:67:
                    a4:e4:a5:29:f6:32:e3:1b:76:36:82:9d:a4:60:82:
                    04:08:4d:b9:f3:a7:18:cc:a6:92:a0:c5:92:a4:be:
                    2c:f5:5e:9c:8a:ae:2d:70:70:57:8a:e7:47:92:11:
                    b9:8d:00:e9:c5:dc:7a:ef:4a:ab:fd:b6:0b:79:05:
                    66:13:39:c0:a6:34:1f:64:a5:6a:9f:c6:66:e8:62:
                    49:93:65:15:c3:60:cd:ed:eb:2c:65:9e:dd:a6:70:
                    23:bb:ee:f5:da:f1:3a:f2:6c:a6:fa:93:44:b1:b1:
                    99:93:13:86:fe:f2:ff:24:15:3f:32:13:f0:ac:6d:
                    f8:43:5d:8b:5a:08:d8:f6:27:c9:87:d7:f4:2f:88:
                    93:8b:90:6f:de:59:c2:b3:50:86:f7:53:38:13:a5:
                    3e:65:b5:f0:f0:3f:3d:0f:a3:7e:84:eb:47:9a:28:
                    10:75:c2:bc:d0:d4:91:b2:f1:53:43:3f:2b:c4:7d:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:35:14:85:28:61:8A:2B:BC:C5:E6:D3:C5:7D:17:5F:0F:8F:1E
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:42:fc:8d:d9:9b:59:bd:2f:a9:4f:51:1a:e6:a2:b0:91:
         15:2b:08:e8:6a:cb:03:bd:fb:c1:0d:b8:e1:c0:58:1d:48:b0:
         84:2c:51:6e:a4:1d:1a:3a:9a:1e:69:4d:9e:54:ea:66:e6:82:
         2b:c9:29:ba:72:c8:d2:72:ce:92:4c:7f:cc:72:b4:c9:1a:e0:
         e4:2b:97:44:33:ed:e1:71:5d:5b:62:a1:8e:7b:0e:e6:18:3d:
         f3:c4:d0:50:db:d8:64:59:82:5a:be:e0:00:7c:48:29:1f:f9:
         5e:6b:5a:26:fd:55:7b:f3:2c:cd:00:a4:99:f2:11:d8:48:c2:
         50:90:d0:6d:37:56:de:aa:55:73:98:cd:db:d2:ec:87:85:b0:
         9b:17:72:19:3f:37:33:88:e9:d5:60:19:3f:97:9e:80:1e:50:
         2f:de:af:5a:c6:4f:a4:22:9d:0e:1d:fc:a4:f7:58:35:3b:60:
         0e:7a:da:00:01:38:ef:67:22:4d:38:16:6f:cb:ef:d6:fb:5e:
         be:e8:ab:cc:24:b8:56:51:cb:ec:28:1a:e2:67:1c:46:84:31:
         1f:82:7f:34:bd:a8:80:c7:35:5d:92:b1:c9:be:46:c7:e4:67:
         06:f6:98:84:c8:4b:33:4b:65:42:de:22:f7:4f:61:57:18:8b:
         69:d0:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:24:02 2025 by rpki-client