This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
File:                     lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft (raw, json)
Hash identifier:          paGhtE0Eob1a0sidxwJmYSjfLaKzyBogLRd81cG0mFs=
Subject key identifier:   A6:38:5E:0A:96:8A:EE:74:A8:A9:AA:91:E4:7F:6B:88:73:40:0B:37
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Certificate issuer:       /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial:       019B5AF6BE6CF4BB97E4DEF2F44079C1C8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
Manifest number:          1799
Signing time:             Fri 26 Dec 2025 14:01:18 +0000
Manifest this update:     Fri 26 Dec 2025 14:01:18 +0000
Manifest next update:     Sat 27 Dec 2025 14:01:18 +0000
Files and hashes:         1: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (hash: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=)
                          2: Z0bxD_dypTvELJHwQ8sfKKr3Yl0.roa (hash: OilYGhipbpMsApciEZvD2e2HegS2pxvaEYjH93aVvgg=)
                          3: jmbXitTxYDhXxX8Sm7GQvdd6SyE.roa (hash: zVpGoN0B3V4SBK16rXtn4P+ZIoIETx7c6+rwVBVyUtc=)
                          4: lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl (hash: N8fJe6+XfjWFxIs1gVw69RYtE5r21vdLXZcE/zK8Zik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:f6:be:6c:f4:bb:97:e4:de:f2:f4:40:79:c1:c8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
        Validity
            Not Before: Dec 26 14:01:18 2025 GMT
            Not After : Dec 27 14:01:18 2025 GMT
        Subject: CN=a6385e0a968aee74a8a9aa91e47f6b8873400b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:33:07:62:13:6e:0c:42:96:39:03:9b:00:
                    f1:06:08:2a:5f:b9:1d:6f:84:83:a3:fa:59:ed:0e:
                    44:74:cb:35:86:ef:c8:ed:30:6c:d4:7b:f0:36:27:
                    cd:3c:b8:5b:6f:af:31:8b:8a:94:59:6f:9e:a9:d4:
                    ae:72:84:4b:95:59:a1:ed:8d:e8:c4:e9:f7:2b:10:
                    1c:ff:6f:60:29:c0:5c:46:1d:c6:33:61:ee:45:ca:
                    0b:54:9b:6c:11:d9:90:c4:bd:71:5d:cc:53:7c:db:
                    05:cf:14:b9:20:77:0a:be:06:e2:12:b3:a1:16:a6:
                    10:67:88:91:f7:63:3d:56:22:3a:38:7e:94:ab:ad:
                    45:1c:58:ca:46:57:7c:19:c3:4a:ac:d2:f8:83:fd:
                    71:9a:12:9b:db:6d:5b:9f:5c:11:0d:03:fb:c3:ff:
                    9e:99:ea:4e:87:8b:5a:4a:2d:f6:9f:0a:98:6c:a9:
                    da:e7:ee:ce:fe:a2:31:65:5a:61:0c:fd:40:db:6d:
                    f9:7a:fc:a6:f2:30:63:3e:db:56:42:94:b9:39:12:
                    ef:66:93:7f:38:43:c3:46:14:26:e5:cf:c7:5d:17:
                    9c:29:fe:b3:5a:e7:10:9f:8e:ed:57:c2:a0:60:16:
                    fb:f3:fb:10:ea:8a:9b:04:e9:d7:26:97:1a:d6:40:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:5E:0A:96:8A:EE:74:A8:A9:AA:91:E4:7F:6B:88:73:40:0B:37
            X509v3 Authority Key Identifier:
                keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:27:88:a2:64:9d:92:b9:83:e7:6b:8e:11:31:2f:26:8c:14:
         dd:36:6c:c9:68:8e:31:85:fc:33:cd:8b:4b:31:10:a3:f6:87:
         42:5d:9d:e2:a9:59:a8:b8:71:76:ce:ff:7f:d9:f1:79:d1:17:
         10:7b:49:ac:95:e1:ed:70:57:9d:50:23:ef:96:14:db:e9:34:
         39:5e:f0:02:84:af:56:a6:4b:17:9a:79:63:4c:77:0a:d3:df:
         fb:4d:cb:51:28:66:2e:90:bd:b0:76:b6:94:06:8e:92:20:be:
         93:8d:f7:45:ff:48:51:50:ba:6a:ba:25:fc:00:78:19:48:c6:
         ef:5e:90:00:11:b0:7b:a2:64:57:00:97:29:f6:f0:9e:b8:2e:
         f7:d6:67:0c:36:2b:05:6b:e7:16:90:28:5f:35:f9:9a:64:0e:
         c6:c5:f3:25:3c:f0:66:66:2d:f2:6e:c3:cc:61:a5:91:6a:7a:
         a9:d5:71:6a:5e:3d:fc:7f:1d:ec:e8:66:f3:d6:d8:62:b9:35:
         45:56:f4:e6:ac:97:0e:56:13:d1:a5:91:f2:6b:6c:8b:b2:cc:
         99:62:38:d8:4c:20:6c:48:23:38:78:c8:78:be:cd:39:53:08:
         e5:d4:a9:16:ce:94:72:44:f9:77:04:61:44:a0:00:29:83:46:
         24:c2:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:11 2025 by rpki-client