This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File:                     luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier:          v+5gctF/dtmmD1q5kmykdhxwwYWseYMf17YH/RzL12I=
Subject key identifier:   38:CC:32:A4:67:3E:0E:7B:6D:2F:65:53:01:60:61:FF:8D:2D:C3:EB
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer:       /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial:       019B6B44E937B0E90639262930E27C20342B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number:          1733
Signing time:             Mon 29 Dec 2025 18:00:36 +0000
Manifest this update:     Mon 29 Dec 2025 18:00:36 +0000
Manifest next update:     Tue 30 Dec 2025 18:00:36 +0000
Files and hashes:         1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=)
                          2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: smxu4Ut0XEsHzKEu8RrT7/mVFLVHPWlQ+yyo2C8DQjI=)
                          3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 15:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:44:e9:37:b0:e9:06:39:26:29:30:e2:7c:20:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
        Validity
            Not Before: Dec 29 18:00:36 2025 GMT
            Not After : Dec 30 18:00:36 2025 GMT
        Subject: CN=38cc32a4673e0e7b6d2f6553016061ff8d2dc3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:49:7b:8f:31:1f:90:9b:23:2a:e3:c9:35:
                    92:36:c6:00:6c:50:1c:40:f9:c1:88:af:27:ca:8c:
                    f3:19:41:bf:7d:c2:a4:87:9c:e9:06:6f:90:a7:43:
                    1f:7e:4a:38:b1:ec:61:6c:22:94:2f:dc:05:5f:8c:
                    a4:c0:2a:19:11:8d:47:8f:f9:68:a8:29:cd:d0:02:
                    dc:47:15:cf:e2:cc:ce:d9:7d:2e:96:e7:c2:b5:6a:
                    1e:05:25:d8:85:d0:ab:b2:b6:ab:94:6f:52:98:83:
                    4d:7a:16:9f:eb:94:08:46:ca:df:05:71:c0:c6:9f:
                    27:4f:d8:07:40:88:c1:51:d1:6e:5c:81:ac:c9:ec:
                    19:8a:d1:45:6b:45:76:19:70:d8:3f:94:bd:8a:40:
                    3f:e3:53:5a:be:ef:3c:97:ba:41:c5:03:f5:45:9d:
                    46:05:c8:ab:4b:67:90:f8:eb:e1:a4:fb:86:34:eb:
                    cb:ff:35:32:9a:b6:16:71:05:5a:c3:75:1a:5e:04:
                    00:31:d8:50:a8:f8:85:bb:8c:b9:73:df:72:af:db:
                    9c:1e:44:1c:b6:e6:10:07:49:01:8b:58:c0:93:2f:
                    6d:75:f2:e1:3c:c8:aa:6a:7f:ed:8e:ab:79:bd:ff:
                    3c:c0:ac:13:a6:49:21:49:34:60:09:c4:22:9c:29:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:32:A4:67:3E:0E:7B:6D:2F:65:53:01:60:61:FF:8D:2D:C3:EB
            X509v3 Authority Key Identifier:
                keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:5d:93:f2:af:56:17:67:98:96:af:93:2b:03:6e:c0:4d:
         e6:3d:4c:8b:21:69:1d:2a:4e:c5:8b:3b:db:05:a9:ef:2c:01:
         6b:20:32:de:30:e7:1a:bf:31:1b:fa:84:91:22:b0:66:86:75:
         ef:ed:63:f1:bd:2a:e3:fd:49:51:17:24:93:5c:33:fb:5c:2d:
         51:f9:a9:d4:94:26:28:8b:46:6f:1b:31:dd:f3:69:04:d7:af:
         d5:42:ba:e6:46:b6:ce:d9:72:a3:25:1f:eb:39:83:cc:68:50:
         6f:13:7d:96:1d:c8:05:f7:eb:8d:8e:12:c6:20:67:09:18:99:
         7e:29:8b:64:44:8b:1e:10:24:25:91:ba:a5:f4:81:3c:0a:a8:
         b6:d3:08:d8:00:81:79:bf:86:93:3b:1d:6d:1f:85:d3:19:de:
         88:af:7b:84:8a:ab:8f:11:8a:e1:e2:1a:89:55:61:40:a7:38:
         95:10:71:f7:a6:6e:50:04:c0:7f:65:de:b0:d3:2b:91:e8:7b:
         82:bf:a0:6c:5d:a8:86:42:e6:28:e7:fd:9c:01:01:d5:7c:70:
         47:81:c7:be:c6:67:cb:4b:6c:be:02:d2:c0:d4:93:3b:66:e5:
         0c:72:a3:4b:9f:6c:0f:20:ba:fb:7e:e5:4e:fb:4e:cd:8e:6d:
         d8:89:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:44:49 2025 by rpki-client