This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File:                     LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier:          E8n1KhTh1WDb9IxPGKu2gFkw9D94m/eijL+pyMH15tQ=
Subject key identifier:   11:99:B3:C1:11:0B:FC:13:4D:6C:2D:6A:98:E3:A7:A2:6F:FE:DC:96
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer:       /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial:       019B59E444FE48A52FDBFE420A17D82F62AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number:          024C
Signing time:             Fri 26 Dec 2025 09:01:30 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:30 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:30 +0000
Files and hashes:         1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
                          2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: 2nidyTLF9uJmwNwpl7hF+REVKXuLtzEeDU9UDhhue4o=)
                          3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
                          4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e4:44:fe:48:a5:2f:db:fe:42:0a:17:d8:2f:62:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
        Validity
            Not Before: Dec 26 09:01:30 2025 GMT
            Not After : Dec 27 09:01:30 2025 GMT
        Subject: CN=1199b3c1110bfc134d6c2d6a98e3a7a26ffedc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:0b:a5:f4:dc:46:ee:e4:e7:1e:05:0a:b8:
                    af:db:59:f9:7a:4e:17:ea:b4:09:7a:d4:ad:67:c9:
                    77:e8:36:27:6e:d0:57:2c:b9:bb:5d:60:4a:6b:41:
                    3b:29:d3:aa:90:79:8e:d0:ea:27:f3:05:f6:27:cc:
                    16:be:5a:1d:ad:80:8c:17:e0:cf:28:e3:70:96:4f:
                    3f:55:3d:97:b9:3b:d6:da:92:65:11:82:26:5d:57:
                    70:3e:b6:d1:aa:4b:bc:e8:b9:38:1c:35:03:0f:0d:
                    e0:93:64:e4:2a:42:e1:9a:a0:ac:d7:ec:39:3c:93:
                    01:44:37:c2:74:6d:be:7b:c2:e7:e0:0f:6e:83:17:
                    85:42:c8:ae:36:9c:0d:7a:36:a4:2e:15:36:f4:43:
                    35:32:d4:56:6d:77:b4:82:0a:74:76:d9:44:f7:77:
                    e4:fc:f6:ba:35:52:42:6f:e1:5a:29:2f:b3:ad:6a:
                    f0:df:11:49:b1:90:5b:08:c0:f6:8f:4a:d1:90:ad:
                    04:a1:63:08:4f:41:f8:a3:9a:ef:d7:1c:9c:e8:2b:
                    dd:52:5e:df:88:98:cd:33:be:da:b7:ba:e0:f0:e2:
                    e0:61:8b:c3:9d:b4:29:39:3f:e3:2f:c1:23:a7:e1:
                    41:52:57:31:da:cd:13:18:75:05:0a:2b:05:bf:3f:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:B3:C1:11:0B:FC:13:4D:6C:2D:6A:98:E3:A7:A2:6F:FE:DC:96
            X509v3 Authority Key Identifier:
                keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6b:79:03:1f:78:56:e3:e3:d1:27:de:b8:1b:a2:b5:20:16:
         25:16:a4:f1:8d:db:80:16:fa:8a:56:ee:ae:91:58:2d:c2:df:
         5d:cc:5e:84:b8:f9:df:56:47:3f:67:f0:33:37:d9:c3:60:43:
         99:5a:e4:d8:5b:fa:d9:8b:4c:44:0e:99:e8:7d:08:3d:0d:ca:
         02:7f:60:94:d8:b1:c8:fb:9f:5d:27:42:3f:fd:82:28:09:ed:
         86:27:5a:3c:99:4a:9c:24:54:0e:ed:f8:ca:97:6e:2e:e6:73:
         eb:9d:7d:50:d5:54:65:22:60:6d:fa:64:7b:20:82:4a:8b:19:
         9c:a2:07:14:fd:69:b9:68:ea:e9:c4:c6:3f:41:3e:b4:43:69:
         c7:ab:83:c0:2d:60:ba:29:f9:24:0c:0d:52:13:c8:7c:83:d1:
         fd:fc:80:b0:03:2e:92:2c:51:e7:57:2f:39:8f:13:f5:88:14:
         b6:2c:65:4b:f6:58:38:01:b3:c0:ee:19:33:b4:1f:70:f2:be:
         d7:2e:7e:8a:43:9a:b6:33:72:b2:33:78:5b:06:f5:e9:02:19:
         7d:b9:e6:fe:2c:b2:b0:b8:5f:67:cd:f9:a4:0a:22:ad:88:78:
         94:32:fb:f0:1d:99:7a:2d:45:e5:f0:d3:c9:83:00:bc:2d:9d:
         dc:ee:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:05:32 2025 by rpki-client