This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File:                     lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier:          9YzoIzdpmAsfMaQ1XagY9pRmrNjSlKvSrs0TTbA4WYU=
Subject key identifier:   16:62:15:83:15:66:8D:59:D1:E6:44:2F:3D:92:31:4A:22:22:C1:44
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer:       /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial:       019B3EA3AAB16B9B05B3260C0724B67653D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number:          178F
Signing time:             Sun 21 Dec 2025 02:01:11 +0000
Manifest this update:     Sun 21 Dec 2025 02:01:11 +0000
Manifest next update:     Mon 22 Dec 2025 02:01:11 +0000
Files and hashes:         1: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (hash: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=)
                          2: Ylocyo8IuYXL1jFDJemfcOF7HII.roa (hash: kWYwKTsoMIuvF5bk7I/FFQ+w4HxrfN+6bwhubAtqknA=)
                          3: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: YnX3zbPQvk4kb+J5ZeTS53yLr3YZksPMNFmwT3AJBOA=)
                          4: xQ5C-mq8-mHSyfrn5JtEpDjdplw.roa (hash: wJd8QphcgtBxMu9MMqDp1Ofvwa30TStFcRoo1rd2+MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:a3:aa:b1:6b:9b:05:b3:26:0c:07:24:b6:76:53:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
        Validity
            Not Before: Dec 21 02:01:11 2025 GMT
            Not After : Dec 22 02:01:11 2025 GMT
        Subject: CN=1662158315668d59d1e6442f3d92314a2222c144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:f3:f5:3e:d0:9d:c3:5d:3d:52:66:dc:92:
                    44:56:60:bb:f4:01:95:e4:0c:47:71:2e:e2:9e:3a:
                    9d:2f:da:ad:f9:61:21:96:99:d0:98:06:1e:46:59:
                    23:1a:49:57:e2:da:72:79:e7:12:51:7b:35:74:38:
                    ba:cb:92:ce:26:0c:93:9a:28:56:d0:c1:61:89:b4:
                    f3:66:17:27:24:27:c5:a4:6e:c3:54:79:cd:7a:24:
                    92:91:7e:fe:88:72:d8:75:38:30:28:54:08:17:d5:
                    71:50:4b:1d:5d:ea:3e:83:9e:d5:01:29:45:79:ec:
                    6e:21:5b:12:a4:f5:53:6e:fc:87:7c:c3:6d:e7:61:
                    83:3f:3f:56:49:6e:1a:86:36:51:12:b6:51:cf:68:
                    ac:32:46:fe:78:36:34:ab:77:ea:5e:95:5c:dc:57:
                    85:48:51:06:fa:d4:4c:41:b6:e0:a1:da:91:5b:60:
                    91:cc:0f:57:47:77:b8:54:c7:16:14:6f:b6:05:df:
                    2d:61:a3:47:2e:42:17:7e:b2:2d:3f:98:54:c4:57:
                    6e:6d:64:59:5a:5f:87:dd:b5:65:d5:9b:c7:61:70:
                    34:b0:c0:83:eb:36:a9:b0:75:fe:02:df:d0:ff:cb:
                    1f:43:34:de:01:64:2f:c6:1b:fa:1e:50:42:ae:34:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:15:83:15:66:8D:59:D1:E6:44:2F:3D:92:31:4A:22:22:C1:44
            X509v3 Authority Key Identifier:
                keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:43:c7:8b:66:46:35:98:e3:ca:6e:13:d7:6f:bd:26:30:fe:
         77:3a:de:20:83:30:cb:66:8a:7b:95:17:6b:53:9e:64:b2:ef:
         7a:1f:4d:19:56:67:46:f2:fc:f4:d2:02:f3:54:6e:9d:7f:19:
         ad:a9:26:ed:b2:2b:b8:bf:44:a9:24:73:c2:cc:24:29:2a:6f:
         00:c3:47:f4:3d:ec:4c:3a:e4:57:58:c4:6c:1f:05:bb:c3:81:
         0d:16:f2:0b:54:27:dd:71:b9:7b:f9:b4:ef:f2:33:fa:19:a2:
         2f:50:5f:99:19:8e:f3:ce:de:8a:9e:89:e7:77:da:ee:ab:95:
         c2:68:1b:76:ed:df:5c:d2:07:c6:47:52:11:c0:76:67:0d:32:
         08:74:66:f7:a5:9d:86:f0:fd:f8:21:80:63:08:64:2b:44:eb:
         02:d9:be:b4:b9:85:15:d9:de:5b:f4:69:77:4b:93:d5:ac:9b:
         02:3c:dd:7a:61:14:09:fa:bd:29:eb:74:42:3d:9a:31:e4:7b:
         31:d6:a9:3d:95:32:67:32:48:c6:af:a2:dd:a1:bc:2b:f2:d4:
         12:5d:e9:4c:1c:d1:2c:75:b3:8d:e0:5a:dc:f1:d7:b4:c5:a2:
         51:fc:ed:9b:d7:c1:37:0a:9b:0e:0b:6b:ea:a4:99:40:43:bf:
         bc:20:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:57:49 2025 by rpki-client