This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
File:                     LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json)
Hash identifier:          D98n59+ssYaYFiCNYwf7tWCbOXHRstzaRFBbblZkanM=
Subject key identifier:   54:B2:6E:04:14:12:A9:1B:F5:48:25:82:92:F1:C8:4C:91:B6:40:18
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019B3CB510E59CD4C70749E506C5A76BD270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
Manifest number:          178D
Signing time:             Sat 20 Dec 2025 17:00:57 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:57 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:57 +0000
Files and hashes:         1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=)
                          2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=)
                          3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=)
                          4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=)
                          5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=)
                          6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: d0fiLKGf4b9ez0G/ZUwS6YMqAXD/Nnwk8ERosL4ljWs=)
                          7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=)
                          8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=)
                          9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=)
                          10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=)
                          11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=)
                          12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=)
                          13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=)
                          14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=)
                          15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=)
                          16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:b5:10:e5:9c:d4:c7:07:49:e5:06:c5:a7:6b:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Dec 20 17:00:57 2025 GMT
            Not After : Dec 21 17:00:57 2025 GMT
        Subject: CN=54b26e041412a91bf548258292f1c84c91b64018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:e2:54:df:6f:24:a1:e0:cb:11:c3:61:bb:
                    1c:fa:6b:64:d6:13:3b:7b:f6:83:c0:ac:df:66:e9:
                    ce:a7:93:2b:7f:f3:7f:9a:0d:fa:09:85:39:7a:d3:
                    e8:01:3e:68:74:5a:2e:32:30:5f:6b:3b:3a:38:f5:
                    33:93:8b:71:fb:bf:d6:2d:96:da:06:58:a0:07:90:
                    61:2b:a0:6f:5b:eb:6f:7a:af:de:17:84:e4:e8:1e:
                    64:9b:85:c7:a9:6b:a5:cb:aa:93:25:df:34:ec:90:
                    1d:fb:8d:dc:4b:ad:14:fb:b1:b3:5e:1b:aa:9a:79:
                    9d:be:57:7a:27:73:6b:8c:92:28:47:47:9e:f9:fd:
                    4f:53:b4:8f:30:90:cf:49:b3:f1:c6:f2:d0:ab:61:
                    e8:e8:f5:8e:aa:0b:0c:51:0c:1e:e6:d0:8c:38:66:
                    7f:94:ba:63:ea:a1:93:df:5f:23:89:c7:d3:7a:90:
                    2f:90:21:d3:67:5e:ea:0c:7e:3e:e3:66:0d:a2:5a:
                    08:59:bb:46:fd:61:61:cd:35:cc:2f:f3:2b:cd:11:
                    e6:44:28:8b:dc:0e:43:30:76:07:a0:dc:9c:c3:01:
                    7a:19:cf:af:a3:ea:e3:77:29:ab:0f:3a:4e:76:4e:
                    a9:da:1a:1a:13:bb:5f:b5:2c:db:d5:7d:e2:7c:0f:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:6E:04:14:12:A9:1B:F5:48:25:82:92:F1:C8:4C:91:B6:40:18
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:e2:c6:da:2f:26:24:9a:8c:6e:4b:99:ce:b0:36:c9:d6:
         8a:82:09:8f:e0:c5:7d:3f:f3:92:4f:e0:7a:af:b0:39:55:c5:
         13:f8:8e:f1:4b:6a:ad:f2:c6:e9:78:7b:f3:40:09:a0:c7:98:
         b8:d1:ed:71:87:b5:6e:93:4c:22:37:b4:3d:d1:e5:d9:f3:a5:
         68:9b:a8:ee:a3:97:91:cd:c2:91:00:6b:e2:23:10:03:02:39:
         bd:e5:3d:49:a9:85:02:53:8c:31:9a:2b:61:5a:b3:6d:5b:2c:
         2b:7e:89:2e:25:e9:9b:68:e9:ba:cb:bd:f9:99:ad:45:2b:95:
         a7:00:12:49:c6:78:c3:a0:d1:d1:71:35:b9:68:f7:c5:a5:80:
         75:a2:66:c9:ce:b3:2a:46:57:66:40:60:e4:5d:c4:d5:70:5f:
         2b:46:bd:56:dd:3d:8b:c8:d3:47:70:68:b7:30:ef:e9:03:f5:
         ae:e5:f6:aa:49:c3:9b:29:48:e8:0a:66:cf:af:a2:06:19:85:
         40:3c:33:62:79:1f:ca:85:85:4c:d5:84:9a:b9:f3:78:ed:6f:
         99:7a:30:e2:5a:6b:ef:e6:40:84:51:c7:4b:e8:c8:93:9f:ab:
         92:d8:73:7e:bc:97:bb:43:6c:ca:9b:7b:1e:c7:fa:57:38:79:
         1b:6f:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:49:09 2025 by rpki-client