This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File:                     LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier:          mChS/5SL8DYsEom5yE0wT0lB+ZdusB4j/SZeOeGn0ZM=
Subject key identifier:   98:83:07:F2:06:3C:41:EA:8E:B6:DC:A1:97:F6:72:A7:D5:A8:9C:1C
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer:       /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial:       019AF2768EC52D6E214149DB2072DA9B7ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number:          15B0
Signing time:             Sat 06 Dec 2025 07:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:47 +0000
Files and hashes:         1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
                          2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: 1KhE54iRb3U/zaRmE051L9XWQq9waR2iCP38phacgMw=)
                          3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:8e:c5:2d:6e:21:41:49:db:20:72:da:9b:7e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
        Validity
            Not Before: Dec  6 07:00:47 2025 GMT
            Not After : Dec  7 07:00:47 2025 GMT
        Subject: CN=988307f2063c41ea8eb6dca197f672a7d5a89c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:96:8d:5d:54:83:26:8e:af:85:f7:3d:5b:
                    30:1e:9f:70:2c:0b:1c:ef:d2:46:47:41:dd:bf:a4:
                    ac:04:b3:b8:98:0c:8f:ae:31:85:2f:5d:b9:67:1a:
                    91:01:c6:d5:b5:a8:70:46:8c:90:90:e8:ad:40:52:
                    fc:24:a4:6a:e6:49:98:c4:42:95:ea:c1:bf:65:79:
                    6b:dc:72:7b:bb:54:7d:23:9b:42:11:ef:61:32:94:
                    5c:5d:1c:b1:78:48:9e:a0:c9:c3:e9:12:56:da:93:
                    ec:ea:24:22:53:d2:78:6d:89:59:fe:01:a4:ef:47:
                    4d:55:de:7e:a3:ba:d3:1b:5c:13:06:73:b9:c0:91:
                    78:fb:15:40:b1:b8:6b:78:19:34:f7:10:d8:95:ea:
                    c0:d3:ed:0c:d8:ad:89:42:71:fc:08:19:b2:99:7e:
                    8b:9f:be:28:c4:a0:ba:b5:47:67:07:a4:b5:7a:01:
                    05:7d:5d:fa:2f:41:df:04:e4:27:31:cf:73:a7:29:
                    c5:40:e3:55:b5:d2:0e:e0:b2:f7:f1:79:91:6b:63:
                    5b:03:93:d1:e7:74:0c:8d:89:d6:78:c8:95:d6:65:
                    60:64:75:fd:fc:7f:c3:39:0e:0b:c9:90:bb:db:e2:
                    68:7d:f7:45:72:77:7f:cf:a8:76:ad:c7:6a:0b:b3:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:07:F2:06:3C:41:EA:8E:B6:DC:A1:97:F6:72:A7:D5:A8:9C:1C
            X509v3 Authority Key Identifier:
                keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:bf:65:c9:44:a1:8d:5d:26:69:7d:8e:a0:0c:0c:2d:ef:
         c9:a5:d8:a7:c2:fb:3a:d2:da:bd:3b:e5:9e:c2:22:0a:c4:1d:
         d6:8c:6e:2b:c9:e0:86:04:e5:ca:12:bd:6f:44:7d:2c:35:de:
         d4:a4:d5:ab:58:9a:2d:f2:9a:90:e9:00:bc:d2:bb:82:86:9f:
         8e:5e:2c:4f:42:f8:37:84:72:58:1e:bb:d3:16:2a:55:74:fe:
         ca:f8:cd:bf:f6:37:84:be:fb:5d:60:ae:5d:54:0e:c8:11:18:
         a5:c6:1d:c7:b0:d8:7f:83:2c:ec:7c:d1:01:3c:80:42:18:84:
         ea:dc:27:17:df:c7:54:43:b6:7b:62:8e:fc:99:45:eb:68:9a:
         7a:dc:f8:53:62:17:9d:01:5d:33:7d:30:62:ca:9f:3f:58:af:
         e6:13:be:ee:cd:e8:14:cc:2b:bf:3a:ff:e7:ec:7a:02:03:56:
         ef:c2:c0:bf:96:7e:25:8b:46:b3:58:f9:c8:6c:52:5f:14:1c:
         d7:08:81:62:af:96:0e:d8:5c:7a:dc:c6:43:17:7e:a9:61:a8:
         2a:69:97:c4:46:53:70:b6:f7:20:83:5a:45:b5:75:c0:13:26:
         89:c6:8c:22:73:a0:18:00:fc:de:c8:3f:c8:6f:75:00:33:05:
         49:e1:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:51 2025 by rpki-client