This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File:                     Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier:          +WUpZSTY5GWMwQ49toVT/oBpPZg5RIGQdJaYtUmRkbU=
Subject key identifier:   99:B5:1A:0D:37:AE:35:FD:25:3E:A4:E7:81:4F:E6:FB:72:FF:AD:5D
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer:       /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial:       019AF164040E3F65E95BE06457EC3B23A56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number:          177B
Signing time:             Sat 06 Dec 2025 02:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:54 +0000
Files and hashes:         1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: AG5edQT1JpmQt1/vzzqHhtnR8CWaVgKspTzhnlGaGO8=)
                          2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
                          3: d_Bkx5CiDUV_kg2qkPKaQef3r94.roa (hash: PuMvdeDp+oahZv6uItyUP3eDxdAVpG52+61igpdkLPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:04:0e:3f:65:e9:5b:e0:64:57:ec:3b:23:a5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
        Validity
            Not Before: Dec  6 02:00:54 2025 GMT
            Not After : Dec  7 02:00:54 2025 GMT
        Subject: CN=99b51a0d37ae35fd253ea4e7814fe6fb72ffad5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:2e:33:d1:e9:1c:d1:85:26:a2:c3:83:e3:
                    f8:95:a2:fc:90:f6:2d:ea:81:e1:15:ad:b4:5f:e8:
                    fc:b4:8e:9e:20:ad:0c:da:e6:ae:03:51:1e:e3:91:
                    fe:fa:36:0f:bc:33:ec:d2:73:13:4d:07:62:15:e0:
                    8b:79:00:56:80:bb:48:59:e5:08:87:50:7a:f0:cf:
                    c1:4d:d8:39:2b:4a:d4:09:96:55:ee:5f:28:b3:e3:
                    54:fa:74:16:21:3f:17:c1:f2:3a:3a:6f:21:e3:d4:
                    80:7c:6a:33:e5:37:75:92:2d:5b:77:68:cc:dc:e0:
                    57:a8:4c:e4:de:ef:2d:cd:95:2e:fa:e4:0c:e9:c7:
                    6e:a5:43:3d:d4:86:a5:df:dd:45:34:08:86:49:1c:
                    70:48:c4:1b:28:97:7e:0d:05:5d:11:2a:af:89:3c:
                    0b:14:46:64:ed:26:a8:6e:8e:72:e6:28:a4:fa:82:
                    db:8e:36:46:86:d6:95:2e:07:e0:ce:1d:b1:95:e0:
                    25:9c:5b:2b:04:fa:5b:9d:b1:99:09:e6:bc:08:18:
                    d1:5f:fe:10:c0:4f:01:91:cd:a0:9f:fe:fc:83:b1:
                    37:f3:b5:1f:36:62:2c:d8:ca:3a:72:e8:94:61:fa:
                    89:59:64:1d:c6:2d:98:48:d3:4e:7e:e0:21:34:ff:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B5:1A:0D:37:AE:35:FD:25:3E:A4:E7:81:4F:E6:FB:72:FF:AD:5D
            X509v3 Authority Key Identifier:
                keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:6d:c1:f4:44:17:4b:59:c1:32:89:77:a7:6b:67:97:f7:
         d6:93:f5:a2:32:a3:c2:a7:13:0c:04:9c:16:4e:ba:52:45:7b:
         8b:df:67:45:a6:a6:aa:50:78:d8:cc:b7:42:76:8a:17:ca:f0:
         99:0b:d1:55:c9:b0:e8:5d:be:c7:89:aa:c3:2c:0f:42:ea:d2:
         02:c0:dd:8d:4a:cb:2a:35:56:75:7f:9d:86:87:91:a1:e2:fe:
         20:17:3e:6d:e3:8c:a9:92:de:ca:71:44:81:88:f9:2a:a3:4a:
         62:eb:7f:2b:60:9b:a8:e2:b6:32:36:79:a6:03:f1:02:46:b8:
         7c:07:e2:1f:87:e4:75:cb:13:b9:ff:24:b8:b9:aa:b2:29:ec:
         dd:d6:98:c3:f5:a5:63:c6:a0:3f:17:90:9b:89:dd:8b:c9:44:
         29:f1:33:4d:96:3b:99:55:0b:e5:8e:9b:63:99:28:9e:b2:b3:
         bc:2e:72:24:7d:84:d5:2c:1d:bc:81:8e:22:df:1f:62:eb:3c:
         d2:f9:70:86:2a:33:d7:49:19:0e:6e:3e:3a:61:e8:9e:95:6e:
         9a:77:e1:35:27:f8:58:3a:31:3e:5b:10:a1:e1:b5:cf:9f:6e:
         3b:d4:df:bd:2b:89:98:53:90:6a:df:dc:76:3f:86:d4:69:9d:
         5c:ba:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:37:32 2025 by rpki-client