This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
File:                     l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json)
Hash identifier:          JRW0jOC9kw9Gt5JEPMsO7KHeFdIqOAB/Vmk9ffUqjIY=
Subject key identifier:   BA:A3:0E:05:F0:39:1C:AE:BC:75:39:98:65:C8:4B:CE:62:58:7D:2A
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       019B33E90532AE8B6C69A3CD86B692260D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
Manifest number:          0876
Signing time:             Fri 19 Dec 2025 00:01:07 +0000
Manifest this update:     Fri 19 Dec 2025 00:01:07 +0000
Manifest next update:     Sat 20 Dec 2025 00:01:07 +0000
Files and hashes:         1: 0q-3LrdZn_4YUc7nDchWpSwex8I.roa (hash: 3Qw6MJqjQq8kL5cqox3Cgu57fPaEgLQn0FhwZYIzDvk=)
                          2: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=)
                          3: B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa (hash: LBtiQvM+v9zo/IiLv5JEHtXJuteP7xqw+3W3lEbcXeU=)
                          4: Dzba0z546jG6R2SGCuYdjSnL4n8.roa (hash: U+zeHiuALtq4MxFkR7xsczxsZgmCmQpJROrjMsWNoqU=)
                          5: LjyNe9rxJurAWebpA8VPlicVP-U.roa (hash: 04j1UHLTs8+CZxOxsMhaQamSqnrD7azW9Ipo0uYjumI=)
                          6: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=)
                          7: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=)
                          8: _ZA3fVjUOSpoMtDLyVYLBRx_dD8.roa (hash: 7oWaUTpctGN48g9MNHNn+KL+DygCtU5NImH7gjtLptQ=)
                          9: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=)
                          10: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=)
                          11: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=)
                          12: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=)
                          13: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=)
                          14: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: HIcLNoKx/hp9B/S3o8akmWNQtGSApkXaDfDB7oj4N94=)
                          15: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:e9:05:32:ae:8b:6c:69:a3:cd:86:b6:92:26:0d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Dec 19 00:01:07 2025 GMT
            Not After : Dec 20 00:01:07 2025 GMT
        Subject: CN=baa30e05f0391caebc75399865c84bce62587d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:3e:dc:73:21:65:32:fc:c9:cf:ab:43:12:
                    c1:59:c9:55:cf:06:54:da:da:ac:0b:6d:cd:19:61:
                    76:45:49:13:cc:47:54:56:f6:e8:ff:e2:63:61:2d:
                    e2:86:92:91:3a:04:dd:a1:b7:b7:2b:7b:ac:05:bf:
                    b4:64:e5:f0:76:f7:17:d3:3d:83:8a:41:ff:10:5d:
                    4a:3b:46:c3:d5:a7:02:8f:d5:ea:2a:fe:6e:91:11:
                    2f:d4:fd:91:99:3a:6b:c8:01:8c:a5:3b:b3:6b:83:
                    7a:82:cb:1c:b1:34:47:0a:4f:98:a4:66:54:80:52:
                    bb:09:73:75:3f:25:11:c0:3f:b7:2e:ce:0c:ce:d9:
                    34:bd:53:75:0c:fc:13:e2:fa:1b:13:7c:50:4e:f1:
                    95:55:2f:f6:b1:5a:69:dd:a1:03:a4:5e:a0:ca:98:
                    ca:68:3a:0f:db:f7:c9:c4:6b:f3:de:4d:4e:a8:bf:
                    72:db:3d:b4:ad:1b:3f:bd:2f:74:b9:78:7a:6e:39:
                    ab:e0:52:2b:82:eb:54:bd:5d:ab:9f:1d:09:bd:d7:
                    e9:8f:c6:24:2b:5b:42:13:53:94:95:a1:c3:e2:cd:
                    61:29:ca:14:e6:df:d8:49:d7:3f:de:b4:90:11:4a:
                    ff:ee:17:70:c8:7c:7f:a8:d2:19:a7:e9:83:76:07:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A3:0E:05:F0:39:1C:AE:BC:75:39:98:65:C8:4B:CE:62:58:7D:2A
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bb:37:6e:cc:c5:ec:ca:fa:4c:69:87:74:7a:7a:a7:12:3f:
         42:d7:be:63:5a:53:e4:9c:b2:f6:1d:33:85:f6:a6:50:40:57:
         8c:9c:d2:bb:eb:7c:17:87:70:5d:f7:b7:2e:1e:43:68:86:54:
         af:75:73:ec:e7:35:3b:a8:94:8b:fb:bd:2c:e9:f6:15:c3:7e:
         fb:11:e2:15:de:17:a9:d2:32:b9:4b:1f:52:00:5f:52:32:50:
         8c:be:a7:71:76:2b:a8:ea:66:bc:c4:c3:9e:82:ec:00:ac:2e:
         e3:cd:29:a3:ad:9f:e4:76:5f:fb:71:98:88:99:ca:37:cf:3a:
         14:b8:ce:ad:bd:71:f6:fb:9b:37:1a:d2:10:1f:26:33:ae:43:
         96:2c:99:49:b3:0b:6e:92:f4:ef:b8:b9:87:87:c0:fd:ab:e1:
         88:94:8f:03:33:8e:0c:1c:c9:0f:e9:01:db:df:a6:56:31:97:
         c0:df:20:b6:ae:39:f6:87:e4:43:32:9f:32:16:e1:4d:57:d4:
         37:10:71:ef:57:f1:59:73:b5:12:41:48:f1:de:42:6e:51:e4:
         4f:df:05:b2:c9:b2:80:6f:e0:ef:94:cb:25:b2:9c:17:89:91:
         21:1d:fe:fa:bc:fa:51:a7:04:3e:d1:d2:3b:00:b1:f0:9b:4c:
         bd:e2:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:25:21 2025 by rpki-client