This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          1TryNR1sl/xYrUkKjahHyk8tQkwutn7GcZIUXDZDqUk=
Subject key identifier:   57:AF:72:E5:7B:33:03:63:73:0A:71:48:E7:ED:F4:D7:41:04:CE:E0
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019B34C661C20CFC515E2CFC94D0B564BAF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1781
Signing time:             Fri 19 Dec 2025 04:02:54 +0000
Manifest this update:     Fri 19 Dec 2025 04:02:54 +0000
Manifest next update:     Sat 20 Dec 2025 04:02:54 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: yzjmsv4PPf2BGvjQR4Y4dzKtj6h/oI+DNYZayN12D2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c6:61:c2:0c:fc:51:5e:2c:fc:94:d0:b5:64:ba:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Dec 19 04:02:54 2025 GMT
            Not After : Dec 20 04:02:54 2025 GMT
        Subject: CN=57af72e57b330363730a7148e7edf4d74104cee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:6a:0d:23:d1:6a:43:c3:6e:78:dc:28:6f:
                    8d:0e:44:ed:1b:cd:28:45:7c:fd:2f:b7:10:91:12:
                    4b:06:96:0b:81:6e:41:13:d8:8d:7b:94:76:2d:56:
                    77:e0:b2:83:da:e4:41:e7:79:f5:66:10:9c:81:03:
                    da:d8:fe:4c:d4:51:ed:a0:a1:77:21:52:c9:40:8a:
                    6d:3a:ea:8b:99:cc:64:38:1c:98:8d:86:b8:56:20:
                    42:1c:61:28:1e:c9:de:75:3f:7e:95:31:7d:7a:1e:
                    bb:72:78:d8:2d:f2:04:fd:fe:51:e5:0d:03:8b:60:
                    ee:07:fb:99:d5:5f:31:26:e1:5a:f0:51:29:f8:99:
                    5d:ef:61:97:bf:c6:c2:a9:ed:80:c1:60:7e:ba:85:
                    7c:4d:33:96:0f:d2:c9:c7:af:56:70:6e:9a:cd:6f:
                    d3:85:aa:a1:86:e5:9c:28:c1:1f:20:c0:2e:a3:02:
                    57:4f:06:8d:9e:ce:40:28:ef:26:ea:b9:8a:79:c6:
                    95:56:60:c4:63:88:b1:18:3d:fa:b6:e0:9f:38:a5:
                    7d:26:9c:db:65:d8:be:da:c1:20:db:74:87:28:b3:
                    69:80:ef:81:6f:e5:5b:23:e3:89:ab:67:1b:df:90:
                    22:bc:1a:9e:03:b3:da:20:c2:1a:e5:c8:b3:63:a1:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AF:72:E5:7B:33:03:63:73:0A:71:48:E7:ED:F4:D7:41:04:CE:E0
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:88:3b:e6:8f:e2:18:f8:3f:43:0e:5d:58:de:30:9e:27:db:
         51:72:a7:ee:ce:66:c7:c8:88:68:58:77:09:e6:76:ec:7a:90:
         d7:9f:30:10:2d:e4:46:8e:62:9b:c0:95:22:14:6d:2e:43:3c:
         6b:23:62:b0:f2:e5:90:a6:48:37:ff:5f:d6:bc:1d:f3:29:85:
         81:4b:fd:9b:a9:d9:2c:87:f6:51:58:92:34:76:88:88:ce:7a:
         d6:2c:c8:44:d4:2d:f7:b3:81:8b:86:fd:d3:82:ee:e9:93:3b:
         de:f9:dd:1c:d2:bc:6c:a0:27:11:2c:2b:a2:ac:4d:3c:85:61:
         38:f6:cf:60:2b:5c:d4:37:82:d8:49:c1:ab:66:ae:bc:c6:8b:
         d7:82:4e:09:57:75:a8:a6:a2:fe:9f:df:3b:a1:a6:60:3c:28:
         36:6b:b9:d1:e9:c3:8e:3c:02:95:8a:e9:f6:76:4e:7d:f5:63:
         3d:02:70:bf:1e:06:95:11:09:1e:8b:6f:eb:d8:9c:fb:45:0c:
         e9:e4:7d:51:00:bf:77:32:92:a6:a8:0a:39:f7:1e:5b:1d:2a:
         e2:a5:11:7c:d3:01:8a:6c:b1:e9:ed:1c:85:2e:21:54:b3:70:
         25:c8:53:c3:79:b4:64:e9:c1:92:da:3e:f8:38:da:b6:e3:ed:
         e4:76:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:47:21 2025 by rpki-client