This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File:                     LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier:          zFFqzpY/wD0n/v0NWZFFCjHJj+aOSSnSIFleWPzBrzk=
Subject key identifier:   B2:76:F1:78:9D:D2:0C:6E:D7:8E:76:7C:C4:CD:B8:7D:C0:8B:8F:EA
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer:       /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial:       019AF2767391AB7400B2A754C5324F130B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number:          110A
Signing time:             Sat 06 Dec 2025 07:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:40 +0000
Files and hashes:         1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
                          2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
                          3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: 2nv3CZ5vwux86V0KZV6ma3MVX/bn/g0+tkxeGV3lHGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:73:91:ab:74:00:b2:a7:54:c5:32:4f:13:0b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
        Validity
            Not Before: Dec  6 07:00:40 2025 GMT
            Not After : Dec  7 07:00:40 2025 GMT
        Subject: CN=b276f1789dd20c6ed78e767cc4cdb87dc08b8fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:19:be:b8:5e:8a:c9:c7:ba:ed:eb:92:22:
                    18:9d:c6:47:3d:1b:de:52:35:59:83:2f:f6:4f:b9:
                    ca:49:3f:1f:1a:ee:98:f7:0a:e1:2d:84:56:9f:6a:
                    ea:08:bf:3c:3f:c6:f9:4a:e3:94:72:e0:9b:3c:fc:
                    a1:e4:9e:8a:5e:9f:93:0d:c0:38:cb:03:9b:a4:b7:
                    20:a9:9c:34:00:ea:50:11:71:1a:ba:37:d2:5f:6a:
                    5a:df:92:1a:08:a1:c7:1d:ff:14:f0:b4:c8:3f:eb:
                    c5:ad:c8:cc:d6:3c:4e:8e:13:39:92:3f:bd:b3:ce:
                    38:02:3f:01:86:08:f2:c0:02:1c:cf:f9:d1:5a:c7:
                    1a:97:cb:5d:9f:f5:63:fb:10:8d:23:6d:ae:85:2a:
                    b5:4b:a3:06:8d:22:eb:92:49:1e:9d:48:e8:af:04:
                    32:17:f1:45:ad:c3:4b:2e:a7:17:de:9b:c6:40:8e:
                    40:98:34:8f:db:d3:55:fc:c1:1f:1f:ab:1c:d5:7e:
                    25:05:6e:0d:f1:be:0e:fb:5b:f4:58:0f:6c:6e:96:
                    4c:e1:3b:77:9f:7f:6a:f0:79:21:cc:3f:e1:47:99:
                    bc:d0:4e:ab:e6:8b:59:d8:7a:86:2a:c0:b0:84:9e:
                    d3:8d:bd:12:66:52:e1:2f:f1:2f:5f:28:c0:8f:1e:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:F1:78:9D:D2:0C:6E:D7:8E:76:7C:C4:CD:B8:7D:C0:8B:8F:EA
            X509v3 Authority Key Identifier:
                keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f3:b7:2a:f1:09:d4:51:d0:3e:23:7a:43:6d:33:0d:f6:cd:
         95:69:2b:e3:22:82:16:e8:5d:5c:bd:39:33:63:ad:92:c3:5c:
         85:d8:12:99:52:20:84:d7:1d:79:99:d4:ae:b0:f1:a2:a3:9f:
         6d:11:c1:14:05:35:3e:e0:96:58:c0:0a:2e:ef:95:8c:9d:b6:
         ff:96:f1:59:1f:71:88:f5:80:39:f5:2f:e3:42:b1:fb:6b:20:
         12:f2:da:02:f6:c5:2a:2d:a6:58:d2:85:8d:76:ae:aa:26:32:
         3b:22:be:85:23:47:51:5d:02:c4:53:e6:e0:3d:c7:eb:42:39:
         8d:96:93:e3:cc:56:eb:76:3a:f2:ae:81:7a:77:b3:97:12:94:
         a0:c0:6f:f1:b7:e8:32:bc:2c:30:c1:fc:6d:a8:a3:4e:1f:40:
         b4:72:40:b4:13:94:ca:af:28:b7:3a:19:df:37:b9:7d:89:36:
         f0:15:27:e9:0e:4a:41:1c:aa:c5:49:d1:73:28:ea:28:f5:11:
         e6:37:80:c4:b0:7d:fa:fc:fa:72:79:2e:e5:26:2e:cb:9d:c7:
         c9:89:ce:26:12:d1:f6:f8:c8:99:2d:d9:10:52:84:82:d6:79:
         0b:75:c0:a2:e1:66:6e:3a:71:7e:98:b5:e7:36:cd:4c:a4:c2:
         71:23:5f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:18:43 2025 by rpki-client