This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          cZ5YchrReExAhrtnfS15gMuZ2t5TSSqBpa5huYEU6W4=
Subject key identifier:   8C:7F:D5:7A:BD:AA:33:A5:F6:73:89:73:F3:4D:B4:31:C7:EE:9B:8F
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       019AF35281068E13F345C95D4229871F8B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          1793
Signing time:             Sat 06 Dec 2025 11:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:01 +0000
Files and hashes:         1: 0iKiDzWWxSntVrrXCmhrJjOH6aw.roa (hash: av0mGR/5BFLwU8N3c2ijOxp9aJ3xR9cZmKrH0YmTzMA=)
                          2: 3IY4TmbnRLj5k1WANLdjXwTXYew.roa (hash: qjK8pA3ZvCwbUBgq8RlJOJI1zB3hdjk5IYpiJi0lf+Y=)
                          3: AY_WLc-0HtZ3hixtwdogLmPKXhE.roa (hash: fnYmgKRqcujwjHKJHjsTwufzR5xIWY84VoLFf58blrI=)
                          4: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (hash: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=)
                          5: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (hash: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=)
                          6: I2YZ3IMak0VxnQcMthTtwmErqSw.roa (hash: p04i2TuYtY5s50ZwH3Us8UiZXTbYrw5bHRhSeM6Ld8Q=)
                          7: N1UPnpGbNb1WxlcwhmpNf9382tU.roa (hash: sVH0/mCrj6ooEgPulsyqsGGjutjQRuOUkglrIpDvJ/o=)
                          8: N4HwjJKSX0cNlaYcj3jS4bVMgXE.roa (hash: YIMBZJbGgThBGYMYz0OP8LMxO+xC4s7B+V+yscfXQzc=)
                          9: Nb6TNhx-uC8I1Ffn515OIvBOQXg.roa (hash: Rag11JXj0d5gz3k2DXVRyxAiLg6LoiF+avVU8LVp2b0=)
                          10: TDMrt1P1gCHwvoGmH1EuT7lA4wU.roa (hash: XiBPhE3TLU1BuZaHa1qGrBxFPh5DC9L1nSoO49zFSn0=)
                          11: UUrExGIUuYmvJrzFIhPpcC26aCI.roa (hash: 5oxwYt4KRXP54+h592JN5Pg7aFrlsSfI2urY+v1pF/M=)
                          12: WfQsimdISfx91Ef7cYATyQIN7d4.roa (hash: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=)
                          13: aClXX-iR5Bl7IeW2FlIWaN6iIYc.roa (hash: HtL2L3d9fDCOnFgD6PIPMw7B8WRPV0RJs8E04QzbYYE=)
                          14: iSC665C-UVVhnrmnNRLvj3Ij9kA.roa (hash: kHL9oQkOOW8rZCb10yvOczvSUcqVnHoZYo6f16erQPM=)
                          15: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: WE8g6iZzDj3tnaG6iJisSK7AdSvncG0t4yMUXyOMMdo=)
                          16: ntfUrbz7BUkei1F-tn7_XqXuheE.roa (hash: JAg5H8Q6Okry2xwWdwcj84ENgOyWvgrkVLihOHku7dw=)
                          17: vjtwmaRwxidwva3YZznIjLCoyQw.roa (hash: ZIJmnXOzxW3+TY4MpM3ZcpPqyL+GA1pmCMT952lDXKw=)
                          18: yGH6Oil6BAsrvRObF0sqosVRvc0.roa (hash: lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=)
                          19: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (hash: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:81:06:8e:13:f3:45:c9:5d:42:29:87:1f:8b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Dec  6 11:01:01 2025 GMT
            Not After : Dec  7 11:01:01 2025 GMT
        Subject: CN=8c7fd57abdaa33a5f6738973f34db431c7ee9b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:f8:3f:23:4b:61:50:1f:40:bd:fe:6b:09:
                    34:32:08:3a:2f:a6:fb:dd:d3:3c:ca:1a:d2:bb:9f:
                    09:2f:29:56:e8:0a:45:c1:c9:cc:ff:b8:cb:b1:93:
                    86:a6:0d:1c:5b:7d:92:ab:05:b7:ee:06:3b:94:59:
                    7c:f3:cc:16:a4:4c:c6:a0:95:b2:67:41:2a:e2:c0:
                    ad:c1:7e:07:db:df:6f:4e:37:00:7d:5a:40:21:6e:
                    25:f9:bc:3b:db:84:84:0f:1e:cb:11:10:8a:88:70:
                    6d:f1:31:0f:26:83:eb:50:12:4f:bc:f6:ab:53:85:
                    ff:e5:15:cf:03:c7:cc:9c:db:41:e1:44:a8:4a:7b:
                    53:57:46:98:a9:db:58:0b:3a:1f:43:77:17:ec:db:
                    71:34:af:12:63:76:9e:31:d3:b5:54:4d:50:22:6c:
                    37:50:4d:b1:89:b9:cc:64:fc:ff:3e:69:e8:a7:5f:
                    a7:1e:4a:0c:45:7f:89:f4:31:77:77:82:75:84:07:
                    e0:a7:02:80:a1:22:35:f7:5b:86:5a:06:bd:a2:4c:
                    de:dc:66:31:2e:50:5d:4c:53:9d:05:cf:76:5b:d0:
                    8a:9a:8e:34:b6:8d:b4:01:6a:80:62:d0:c9:b5:e0:
                    1a:37:ae:e0:47:c0:e4:3d:6d:07:2e:61:22:45:93:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7F:D5:7A:BD:AA:33:A5:F6:73:89:73:F3:4D:B4:31:C7:EE:9B:8F
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:18:74:11:dc:22:88:64:65:73:0b:99:b2:45:07:f2:54:33:
         c5:1a:e6:db:80:12:2d:51:14:d9:86:12:92:c0:59:f9:7e:0a:
         3f:76:95:d1:10:80:fc:24:3a:f4:52:1e:4d:30:01:a5:07:77:
         f5:76:40:b5:c6:bf:2d:39:31:32:38:5c:12:43:aa:c1:92:96:
         08:eb:97:22:6b:82:3b:f8:0d:19:39:e7:95:d9:79:5b:71:a1:
         f7:07:28:65:61:5e:f3:02:ed:7e:ef:02:0a:f1:86:2a:0e:62:
         0c:0d:ba:5e:91:7f:53:b6:24:80:ab:3b:61:f8:44:4f:c4:fb:
         1b:ed:08:5a:3a:f0:7d:6a:95:e7:8e:8f:36:6d:06:fb:ac:e0:
         d6:41:37:92:36:ba:dc:9a:b5:49:81:45:14:c0:6c:e7:24:e3:
         d0:23:0a:6f:f0:6c:42:75:19:54:8e:eb:3e:f8:d2:2c:2c:62:
         09:44:ed:9f:14:49:0b:97:37:a2:ee:c0:46:03:49:d1:c3:50:
         ca:6b:9f:80:ab:8b:8e:47:fd:6e:b1:75:42:58:37:a5:4b:74:
         9f:b5:f8:fb:29:57:22:6a:8c:d4:30:31:22:7f:a7:09:de:c2:
         96:40:07:a8:fe:52:a0:3d:6a:c0:42:d7:36:3f:8e:80:5c:24:
         dc:73:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:46 2025 by rpki-client