This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File:                     L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier:          M0JPVEtN6DSiLKMmtwPWjSXV8kCAH04GdqaybAK7fUs=
Subject key identifier:   96:3A:3D:B9:9D:AE:1B:B2:63:60:76:CD:B4:9A:F5:1B:F9:26:7D:AB
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer:       /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial:       019B3C7EE20341F8AA05539FFA297515AEBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number:          06E5
Signing time:             Sat 20 Dec 2025 16:01:46 +0000
Manifest this update:     Sat 20 Dec 2025 16:01:46 +0000
Manifest next update:     Sun 21 Dec 2025 16:01:46 +0000
Files and hashes:         1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
                          2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: YZZPDyr4lYe3r61nPMc7D4sCQVXOpXEiLoDO0S2gyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7e:e2:03:41:f8:aa:05:53:9f:fa:29:75:15:ae:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
        Validity
            Not Before: Dec 20 16:01:46 2025 GMT
            Not After : Dec 21 16:01:46 2025 GMT
        Subject: CN=963a3db99dae1bb2636076cdb49af51bf9267dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:6e:e2:e8:fe:67:af:02:23:0c:9d:3a:39:
                    63:fc:05:14:89:ce:79:4f:38:08:9f:8d:fb:53:de:
                    a0:18:2e:39:82:f0:e3:48:05:4c:f7:d4:cb:f8:0e:
                    9a:b5:00:50:bd:3e:24:e4:33:51:0f:76:55:a9:47:
                    84:47:8f:2a:96:3b:1e:fb:4f:aa:f1:e1:a0:d2:15:
                    3a:2b:71:66:c8:32:37:10:4a:c7:ec:7b:f1:9f:c3:
                    9a:82:b9:c6:c5:ac:6e:d8:42:a6:67:ce:f4:62:a8:
                    20:d1:99:6f:a5:ec:9b:c9:73:f7:38:27:52:d6:7e:
                    b7:1f:b2:4e:af:5c:40:cd:6f:72:14:84:a4:17:30:
                    d4:fe:f2:50:01:28:75:fe:f8:d9:6b:56:f1:17:5c:
                    46:db:f4:0e:6b:7a:88:92:6f:bc:83:20:7f:04:4b:
                    71:44:b7:d4:ff:a0:e9:82:03:fb:08:72:a2:36:67:
                    13:b3:ed:03:8d:90:b2:98:05:ef:b9:6a:bc:d9:02:
                    da:64:2e:84:07:0e:ce:e3:8d:3d:fb:e9:9d:f2:dd:
                    93:bb:04:ef:84:7a:3c:60:e9:af:85:21:92:3a:f2:
                    3e:3d:b3:0d:1e:c7:6d:1d:41:45:8b:6c:55:23:d5:
                    0b:1e:6f:76:f2:c4:68:d9:98:ab:a9:c5:f4:4e:8e:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:3D:B9:9D:AE:1B:B2:63:60:76:CD:B4:9A:F5:1B:F9:26:7D:AB
            X509v3 Authority Key Identifier:
                keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:88:66:94:46:25:2e:45:6b:8f:18:63:51:6e:35:d6:3a:4a:
         e0:1e:27:5c:59:66:ab:3f:2e:0c:a7:b8:cb:98:e2:c9:d6:f6:
         ad:62:4c:73:d6:39:89:f4:74:25:2b:be:96:78:bb:c8:aa:f5:
         50:51:79:83:bf:b1:e4:1d:a8:ff:31:49:78:c5:bb:b6:b6:98:
         1f:d2:8d:dd:48:9c:dc:f5:83:0b:0d:8c:e1:cf:30:ec:99:9a:
         44:29:55:bc:ef:4b:68:26:fb:e3:4f:2d:01:5d:18:c2:28:03:
         8b:2b:ad:03:69:ac:47:e5:df:54:87:6e:e1:65:b4:f4:0f:1a:
         54:e0:4d:9b:06:61:84:5a:a2:8f:16:db:df:a5:dc:b5:24:05:
         b9:b0:0e:4a:3d:0d:38:b7:4e:3e:e3:c6:92:98:85:02:49:1f:
         39:79:97:cd:e6:bd:8e:9f:b2:0d:88:f8:79:14:87:70:99:94:
         42:af:01:83:ca:eb:98:48:d7:02:00:40:b1:79:f4:86:d4:fa:
         9e:88:d7:a0:aa:c3:b4:c1:db:13:f4:96:1a:30:08:d8:bd:7a:
         13:8f:19:8f:25:b6:89:51:7d:39:fc:85:92:ad:04:0b:85:02:
         84:65:1c:d2:53:e0:79:0e:33:5d:a5:65:47:86:12:da:73:7c:
         4c:93:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:53:29 2025 by rpki-client