This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          7+/sH84sSNceXB8+Vu8fcRjlgGzw7EvmkauxfooGYzc=
Subject key identifier:   19:E2:7E:97:05:59:33:FD:03:90:D6:53:97:02:04:52:C7:30:A3:38
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       019B443781079CB5C2D41BFE128E80EF3F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          178A
Signing time:             Mon 22 Dec 2025 04:00:46 +0000
Manifest this update:     Mon 22 Dec 2025 04:00:46 +0000
Manifest next update:     Tue 23 Dec 2025 04:00:46 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: _ONnyoGJy4BONjnQqy_VIZR_lsQ.asa (hash: fg8lcyp5xk0Ls5QPpNy6ZcES0R4cZ7H66Wj2T/SkgFA=)
                          3: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: GrjCqdp6zE1JUB9o3gs49+WGQp8MVlss+BmNEmpENpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:37:81:07:9c:b5:c2:d4:1b:fe:12:8e:80:ef:3f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Dec 22 04:00:46 2025 GMT
            Not After : Dec 23 04:00:46 2025 GMT
        Subject: CN=19e27e97055933fd0390d65397020452c730a338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:64:2b:1a:5b:61:41:37:a5:8e:41:9c:34:
                    07:b6:62:97:8b:c1:08:e3:04:4a:a0:93:5a:a3:27:
                    ad:a0:08:d1:dd:12:9e:f0:e7:c3:ea:65:b8:19:b2:
                    eb:36:fe:9d:1f:c1:d8:cf:84:55:0e:11:9d:78:62:
                    c3:cc:97:5a:1b:ec:c0:23:86:a4:35:9d:a6:3a:e8:
                    c8:6f:de:dc:ab:58:30:47:af:0b:5b:f0:54:30:91:
                    58:5d:14:c8:c9:a3:0c:99:fe:ec:b6:e3:2e:1b:b6:
                    47:30:ad:1b:f6:9d:c2:82:ed:ae:da:37:a8:98:90:
                    10:82:2e:5b:68:ca:5d:c6:ec:31:96:be:05:d6:b8:
                    7c:41:55:97:dc:13:c4:1c:16:d8:19:33:23:81:9f:
                    c5:05:8d:f7:fd:df:15:c6:10:68:83:b5:ff:66:32:
                    5f:1e:9a:87:cb:fe:1d:16:a7:8b:ae:5c:85:0a:83:
                    f8:5e:3d:8e:2a:f4:35:9f:75:88:c9:63:b5:be:23:
                    28:11:70:28:c2:c5:60:1d:b4:c7:ab:b8:18:32:70:
                    07:d6:84:26:f0:ed:12:7f:3b:94:c7:4f:79:b5:4b:
                    62:6c:26:90:e5:69:d0:1f:a7:39:c9:89:b8:0a:79:
                    c4:4c:9c:5c:2c:7f:61:19:83:55:ee:8e:d7:28:f8:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E2:7E:97:05:59:33:FD:03:90:D6:53:97:02:04:52:C7:30:A3:38
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:be:47:a0:87:9a:96:2e:68:da:0a:ce:a0:21:ea:b0:4d:
         04:c7:8d:b7:28:48:b3:5d:87:c7:3a:4d:71:4e:e8:10:85:c9:
         76:29:55:89:fa:fa:3d:6c:47:88:9e:d8:8a:ff:d0:f4:5b:31:
         c8:d8:47:f4:73:ba:79:27:df:26:77:21:5a:70:a6:54:ca:de:
         ab:08:80:e0:5e:77:c5:51:56:19:07:c4:41:b8:73:8c:b5:86:
         a6:1a:a1:76:69:b4:06:37:13:e5:0d:f2:35:cf:d0:38:55:d7:
         26:6d:8a:1c:32:61:c6:87:6f:bd:e9:be:02:31:40:bd:fb:b6:
         85:25:3c:4d:a3:4b:ec:a2:d1:a9:b9:25:8f:7a:b6:f6:22:2e:
         ae:69:59:40:91:21:b6:b4:2e:ce:d9:64:cd:14:d4:37:7e:c1:
         81:0e:a2:f4:e3:03:62:85:24:e2:ce:57:60:be:30:6d:3e:25:
         1f:ac:1b:06:d4:e5:06:25:30:de:bc:72:29:86:07:e5:d9:ae:
         27:b2:c2:23:d4:be:47:1c:26:78:a3:52:a5:c3:ea:f8:78:8b:
         78:50:f1:3d:67:bb:6d:af:71:b5:01:96:fb:e7:9f:36:7f:36:
         02:7a:69:8f:4f:b0:e9:2f:64:d9:70:09:eb:67:f7:96:06:9d:
         eb:81:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:38:07 2025 by rpki-client