This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          chNDTlGQDA2j1pguvxqYJyga7arHtVcIYTLWgZ079yc=
Subject key identifier:   E8:58:05:8D:F6:63:6C:07:7C:D4:EB:E7:F4:33:7F:40:66:F9:FF:C5
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       019B2E1D6930342347A6E40BD07381A35EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0826
Signing time:             Wed 17 Dec 2025 21:00:37 +0000
Manifest this update:     Wed 17 Dec 2025 21:00:37 +0000
Manifest next update:     Thu 18 Dec 2025 21:00:37 +0000
Files and hashes:         1: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: ewDC/A40Ap7LlGHJzdWo0+KR+DoLzxOyRww4VGkFz7A=)
                          2: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (hash: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=)
                          3: orj-Fixx4A4juS-1X934vffLD8o.roa (hash: J+pYVYwK1M5g1D7W7QYyMTB9RQs4NzDsKsiKv4dwqAY=)
                          4: uLBMYegUP8tr8kerX1auVghRTuo.roa (hash: ObMmlvRRjGND9SS2xSn/Yi9qsVHAdvZK1zpCASvTGOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:1d:69:30:34:23:47:a6:e4:0b:d0:73:81:a3:5e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Dec 17 21:00:37 2025 GMT
            Not After : Dec 18 21:00:37 2025 GMT
        Subject: CN=e858058df6636c077cd4ebe7f4337f4066f9ffc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:c3:73:54:23:06:cb:7d:42:4f:fa:09:36:
                    92:9d:e0:93:15:04:27:7f:be:7f:df:d7:ec:a7:b6:
                    7a:09:8f:14:3d:97:c5:c1:e6:45:7c:8f:c9:6e:68:
                    b8:e4:05:c4:ac:62:de:01:1c:41:37:30:00:c4:37:
                    15:bf:79:1a:be:d8:21:73:4b:7d:b8:11:f1:1f:ca:
                    58:ce:81:14:af:9c:41:72:dc:b5:01:1e:ef:0e:35:
                    70:89:61:a6:13:e3:67:84:51:63:46:dc:c0:62:e8:
                    33:89:04:13:95:49:e8:b4:c8:08:bd:f2:c0:d5:9c:
                    d3:11:03:8c:ff:d7:03:29:5a:fb:7b:0f:44:a7:92:
                    4b:5e:92:41:8e:10:52:99:65:68:7e:52:d8:00:1d:
                    4f:8e:02:39:d1:87:d6:b2:6c:be:b8:23:17:82:e4:
                    9b:72:8a:39:e8:5e:6b:7b:79:9b:16:dc:dd:96:28:
                    63:b9:09:bc:99:8e:d4:46:65:c8:66:e9:4a:36:36:
                    01:d4:04:b6:ee:4f:1a:1b:db:ea:81:42:c3:f3:d4:
                    b3:dd:bf:51:cb:b6:f9:dc:1f:01:73:48:b7:ec:6c:
                    88:c9:c7:c4:94:31:a9:82:6f:0a:19:03:6a:f2:2e:
                    81:44:4e:93:4d:b8:a2:ea:77:4e:89:92:ea:87:35:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:05:8D:F6:63:6C:07:7C:D4:EB:E7:F4:33:7F:40:66:F9:FF:C5
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0f:7c:af:55:c9:ff:03:4a:95:48:5e:21:01:3b:cb:6a:bd:
         95:b6:8b:d1:4a:7b:82:ab:8c:77:92:a4:69:ba:f9:f0:f5:f3:
         c0:34:17:55:38:a5:2a:a0:c3:44:da:7b:1f:94:e5:c3:15:80:
         52:8d:1a:99:35:d7:94:42:41:8a:70:87:7b:36:d8:82:41:b3:
         ec:1e:c2:ce:fe:89:81:bf:d1:04:1d:6c:0f:91:29:41:3b:23:
         e9:25:bb:45:22:02:6d:b6:ca:05:1b:82:ad:68:fd:fc:59:80:
         52:73:54:f5:f7:07:c1:07:c5:a8:2f:39:a7:a4:db:92:60:ba:
         d4:bb:97:c9:ae:b6:c2:1e:cc:b8:65:84:82:4c:fd:a6:be:56:
         74:f0:c5:f4:65:b9:ae:d1:8f:d4:98:25:04:d1:e5:b2:6d:be:
         f8:31:eb:5f:82:68:56:7c:b2:a2:7d:c2:2e:77:5e:19:b2:ea:
         c3:d9:f8:4c:e3:f8:be:77:c4:24:9d:a0:a0:e2:9c:b9:b1:a5:
         6d:50:8f:4c:1d:cb:14:70:ca:93:29:31:d5:3f:ea:83:9e:84:
         8b:7b:1f:be:42:47:83:46:fc:0e:a4:b5:9d:8a:fd:24:51:c8:
         f0:ba:fa:51:7a:d3:89:42:fd:03:cd:89:f9:3e:b5:e4:11:7b:
         d6:3d:c8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsuHWkwNCNHpuQL0HOBo176MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh
Zjc1OWUwHhcNMjUxMjE3MjEwMDM3WhcNMjUxMjE4MjEwMDM3WjAzMTEwLwYDVQQD
EyhlODU4MDU4ZGY2NjM2YzA3N2NkNGViZTdmNDMzN2Y0MDY2ZjlmZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLPDc1QjBst9Qk/6CTaSneCTFQQn
f75/39fsp7Z6CY8UPZfFweZFfI/Jbmi45AXErGLeARxBNzAAxDcVv3kavtghc0t9
uBHxH8pYzoEUr5xBcty1AR7vDjVwiWGmE+NnhFFjRtzAYugziQQTlUnotMgIvfLA
1ZzTEQOM/9cDKVr7ew9Ep5JLXpJBjhBSmWVoflLYAB1PjgI50YfWsmy+uCMXguSb
coo56F5re3mbFtzdlihjuQm8mY7URmXIZulKNjYB1AS27k8aG9vqgULD89Sz3b9R
y7b53B8Bc0i37GyIycfElDGpgm8KGQNq8i6BRE6TTbii6ndOiZLqhzWFJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhYBY32Y2wHfNTr5/Qzf0Bm+f/FMB8GA1UdIwQY
MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt
MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx
LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQ98r1XJ
/wNKlUheIQE7y2q9lbaL0Up7gquMd5Kkabr58PXzwDQXVTilKqDDRNp7H5TlwxWA
Uo0amTXXlEJBinCHezbYgkGz7B7Czv6Jgb/RBB1sD5EpQTsj6SW7RSICbbbKBRuC
rWj9/FmAUnNU9fcHwQfFqC85p6TbkmC61LuXya62wh7MuGWEgkz9pr5WdPDF9GW5
rtGP1JglBNHlsm2++DHrX4JoVnyyon3CLndeGbLqw9n4TOP4vnfEJJ2goOKcubGl
bVCPTB3LFHDKkykx1T/qg56Ei3sfvkJHg0b8DqS1nYr9JFHI8Lr6UXrTiUL9A82J
+T615BF71j3IfA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:40:45 2025 by rpki-client