This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
File:                     rLVLzEkpGh8yt86tTylogtBTFJI.mft (raw, json)
Hash identifier:          IJuyfEtgKpoSWnqF6d72wXH2rxGlVqWD462T76uCtdA=
Subject key identifier:   C5:69:D1:5C:59:83:EE:0A:BE:59:14:D7:8C:01:57:78:C0:13:68:E2
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       019B0F6F171CF30372A3A59B5D59CE75623D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
Manifest number:          1770
Signing time:             Thu 11 Dec 2025 22:01:37 +0000
Manifest this update:     Thu 11 Dec 2025 22:01:37 +0000
Manifest next update:     Fri 12 Dec 2025 22:01:37 +0000
Files and hashes:         1: JhWEH1-OplFyfRpnGPaAH68zRx4.roa (hash: 58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=)
                          2: Kalap6T2m16JSwDjwLxjNXHdNyY.roa (hash: JVJj7fl4hbm6J8kNJ+/MRSc7T2RN3F+EXAgFNtKUtbU=)
                          3: PUwPc09p8c8_Sn1YM_ZYypexbaI.roa (hash: OH20qakQRBJhyXsGRRFFaEvlTNopBkE9EYzgH/uJXtA=)
                          4: Qa2_2S_PkTHxTJ-vKPqlybewfm4.roa (hash: drfKDlHg11rvWBFBJCgdefYg02WWSePfByGXqjFYb5E=)
                          5: rLVLzEkpGh8yt86tTylogtBTFJI.crl (hash: 2qAm2uecrEYh5A/7Z0WMivcpKHtKOMhliCkwqpHf4mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:6f:17:1c:f3:03:72:a3:a5:9b:5d:59:ce:75:62:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Dec 11 22:01:37 2025 GMT
            Not After : Dec 12 22:01:37 2025 GMT
        Subject: CN=c569d15c5983ee0abe5914d78c015778c01368e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:c4:d1:10:9d:93:73:d7:b9:be:cf:10:95:
                    9d:20:4c:af:a6:8f:cd:fa:fb:89:3c:e7:37:a0:ca:
                    4a:ad:b8:94:12:99:b2:7d:d2:5a:1a:aa:7e:88:0c:
                    b2:86:bb:15:3c:56:28:80:b1:63:4c:d1:91:7d:8e:
                    cd:53:f9:78:d9:0e:b3:8c:b9:4b:bc:47:95:61:a1:
                    30:74:a5:62:a8:58:c8:d8:11:e3:9a:bc:4d:b3:5a:
                    c0:9c:79:d8:02:04:e3:df:4c:a7:70:a5:c1:25:9a:
                    be:67:52:52:f3:c0:8e:68:79:0e:2b:27:92:46:c0:
                    ee:41:f3:ec:e3:46:9c:df:1a:5e:01:07:3b:4b:ca:
                    c3:47:5a:ad:b6:2d:9b:0f:9a:bd:ce:75:a7:8c:33:
                    83:78:2b:f7:45:77:2a:9c:0f:e9:77:a5:8a:1e:de:
                    e0:b2:17:3f:3d:c5:57:ac:b8:64:4f:63:74:52:a2:
                    3a:40:1c:aa:f7:04:da:eb:75:07:d7:f0:61:3a:ae:
                    4a:50:7b:2b:c8:22:3c:a0:09:4b:b6:ff:80:c5:4c:
                    f5:44:08:dc:b5:90:64:77:cd:56:3f:e4:06:79:92:
                    4d:fc:d1:52:38:1e:a5:8e:cd:8b:a5:03:4e:25:df:
                    d4:c9:e3:8f:cd:0c:e5:84:56:55:81:84:96:dc:db:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:69:D1:5C:59:83:EE:0A:BE:59:14:D7:8C:01:57:78:C0:13:68:E2
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:15:c4:7a:79:58:c8:e1:94:7d:5b:3a:76:e7:c4:a8:cb:4b:
         dc:51:c0:20:d7:b4:bf:77:f3:02:1d:4c:85:92:fb:73:48:77:
         5a:bc:50:73:7b:4e:1c:08:ad:14:b7:f2:d0:83:27:3f:2c:6a:
         65:33:e8:ed:0d:a0:fe:26:a2:00:2e:3d:c8:e1:cf:62:6b:ba:
         2f:38:5a:89:26:0d:05:ce:da:ac:c5:d8:13:af:05:54:07:f9:
         da:bf:3f:b2:36:cd:89:4f:3a:56:e3:bc:46:6b:50:4f:a1:fb:
         00:b5:2e:42:99:f4:38:8c:ed:2e:4b:23:bf:7c:e2:d9:d6:bb:
         8d:55:f6:fc:b1:13:33:6f:4b:6e:37:e8:f5:a3:3a:1f:23:60:
         ce:4a:f8:07:6e:2a:8a:a3:6f:b5:e1:c2:4f:18:de:ea:cd:87:
         eb:86:9e:56:66:21:9c:d0:ba:e0:46:68:44:88:5f:7d:37:48:
         f1:1e:81:48:46:2a:7b:91:9a:08:31:ef:cc:c7:be:8d:c2:83:
         14:b3:45:c4:ed:15:1b:05:f1:ed:4f:01:6d:33:1f:34:80:2b:
         4e:1a:ba:53:ea:54:6d:62:ad:c2:83:a7:62:eb:3e:a8:be:8a:
         81:35:2b:2f:67:a6:f9:e8:59:cc:bf:d2:df:39:e1:75:cd:a8:
         9b:73:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:11:09 2025 by rpki-client