This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File:                     LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier:          Kj+M6sbypHyxACBo4YDIsWdOepRGERA917JV/Q1AIo0=
Subject key identifier:   46:5A:86:62:98:AB:7D:AC:79:3B:AD:FE:24:20:15:16:7B:AD:BC:8E
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer:       /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial:       019AF12CDBD7C157FE43F27C5DFAC9584057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 01:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:40 +0000
Files and hashes:         1: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: Fx3q/e0TnkbAqekdGBEs8CeKIESgDC2ZdQ/T9h2z0c4=)
                          2: crLPMCLXufFmk5JWVKp5VcK8TgM.roa (hash: YNo5LlcmxdPpx/UYh+crxJHa+r1xiA2h5iT8bwm5x4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:db:d7:c1:57:fe:43:f2:7c:5d:fa:c9:58:40:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
        Validity
            Not Before: Dec  6 01:00:40 2025 GMT
            Not After : Dec  7 01:00:40 2025 GMT
        Subject: CN=465a866298ab7dac793badfe242015167badbc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:9c:81:2b:68:96:b4:5a:00:14:f3:38:84:
                    e8:de:40:3d:14:bf:a5:05:ff:61:9e:85:94:fb:ba:
                    17:a2:fa:22:86:5c:7f:4b:86:7b:16:20:d6:8a:e3:
                    a1:06:11:08:12:4c:15:39:2a:59:39:2c:be:f0:f7:
                    d5:c4:56:32:2e:d9:b8:42:cc:e6:12:81:11:0f:3c:
                    bf:52:2b:01:23:5e:16:8e:8f:b0:4d:20:5c:38:3b:
                    3a:a6:42:48:22:df:36:0b:4a:2f:3e:e2:6d:87:46:
                    2e:ba:ae:f7:13:99:f0:46:30:27:fe:71:6b:35:38:
                    73:b9:a6:de:fe:dd:be:00:85:1b:73:e8:e4:9f:5c:
                    2f:d4:10:3a:68:d0:f9:9c:b7:0c:3e:67:80:f8:97:
                    c3:c7:c6:10:a1:af:6c:7b:e0:25:da:82:e1:f7:17:
                    31:85:5c:93:a8:75:3a:1f:2c:80:47:cb:a8:75:d5:
                    cf:e1:dd:48:aa:4a:ec:07:85:0a:ad:70:50:54:8a:
                    99:7f:2a:0c:1b:d2:ed:f4:c2:e7:a6:c6:67:33:fc:
                    8b:68:6c:d7:16:06:01:58:35:1c:10:33:25:4e:76:
                    c3:b1:cd:5a:37:b0:cd:25:13:df:fa:ce:68:9f:60:
                    c2:ba:8b:c3:04:95:b0:17:63:02:07:52:fd:e3:5c:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:86:62:98:AB:7D:AC:79:3B:AD:FE:24:20:15:16:7B:AD:BC:8E
            X509v3 Authority Key Identifier:
                keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:c7:6f:32:82:f8:25:fe:11:83:a9:6a:91:9c:1a:0b:01:
         bf:60:b0:06:02:1b:d7:81:30:06:f4:2e:27:04:2e:6d:a4:31:
         20:a3:7c:7e:a4:68:af:ce:df:a8:c7:ea:c7:95:52:21:41:c4:
         f3:a9:55:a4:ac:89:f8:49:13:45:4b:89:92:52:bc:84:df:63:
         9c:86:5e:7a:7e:c5:4d:dc:e8:00:ac:6b:ba:76:1d:1b:c3:02:
         1e:59:43:e0:7b:73:54:ca:46:72:91:3b:ea:e1:76:17:f7:44:
         60:1d:81:3a:af:2a:d7:f5:6e:f8:83:03:41:3e:0b:53:70:5d:
         d9:60:65:f2:20:2f:36:9b:d1:1c:59:fb:b2:74:a0:c4:f9:79:
         63:be:52:af:0f:83:04:21:fd:af:06:15:ca:42:1d:05:18:d2:
         73:ab:cb:94:08:d5:cd:a0:31:0b:93:5f:6f:ac:c2:5d:85:e7:
         da:22:ac:ca:30:4c:0f:01:98:ac:70:b0:b6:10:1c:77:e4:42:
         26:64:87:c9:69:d5:b0:cf:a7:a9:ad:81:4d:33:8c:fd:c8:c6:
         10:13:e5:a2:a7:4b:22:a0:ca:d3:36:24:c0:0d:28:e9:f9:46:
         af:ca:e9:cc:32:50:1f:2f:6b:4e:37:7e:67:1c:28:ad:e5:4e:
         bd:7d:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:05 2025 by rpki-client