This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File:                     LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier:          SGamYgK5MWnJlxLJkmNJifo/4NzKNnKqmEoMGvZ+ojM=
Subject key identifier:   F4:D6:13:F6:9C:CB:6E:B8:07:04:AC:25:00:85:3E:46:CA:14:6A:14
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019AF12D43B32AB7788AF1185DC62713EB8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number:          05C6
Signing time:             Sat 06 Dec 2025 01:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:06 +0000
Files and hashes:         1: 1xjWVjs3koYC_kPUqAJqpqdwbwg.roa (hash: fw/VqmKRzC/93kggKzzd5mMzlLwdRHo2w3F0Nsroot0=)
                          2: 5cjzvJ9LXRCgyAfGcgLzr8Qoim0.roa (hash: RqByopZAR3eKtKVkKLGyp3Oz4MRGbLlKFFp0mtA5CpQ=)
                          3: C4UsWWSkM-BnhYMBEvTvGvac8FA.roa (hash: Udd8lMesWtN+x6oPF2e8nLmi9fAdU3zj7CTo6T72YnU=)
                          4: E2N0lMQc7iBXrWbLU_IB_WpZpAs.roa (hash: ZxZaSUxykN4vlzGUz8krAAxo2i6hu5CSGpRnjssj5VY=)
                          5: Lw7_YPuqPYPBZV8n8Wt5P9NRwsQ.roa (hash: 1Dm2dtkAzqxn7yado6BTKG4Rw10eSLXp8OwGOIhf1xs=)
                          6: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: Jz9ly6mCAZBYTw4zoWrdjuRCmZSoS2/kZqQ0u0oC8HY=)
                          7: QOlfpyLTY1GVk9P04eDDk4hrifQ.roa (hash: MN8KY4FWwTDhVDLYaAg0IRz1oAsYXnnAQRhwbCNV4Tk=)
                          8: YqBXpDQiXpk138ox9ulGQaR5grA.roa (hash: BIqaH1uAUhERfgNALFZlB1LtxiRIrkNo+yapdFNZxMc=)
                          9: ap6RctwBdAZiIdDDCY_zjne5czU.roa (hash: 8NqImI7bkD/7QBKkJAuMH4OZQYfRp1KOz77RUhl22Uc=)
                          10: bXbBf7KxxWqh2jqlvKbNflSebNs.roa (hash: 7i4DMyJwvupDDG9jZW4NbSOx3n1uNqTN7nHNHBQMmhs=)
                          11: jXorES_blK4nBNFm3R_EwLoZj0U.roa (hash: gZjunuqIq6U6ZGj5kWZ5wADLITCN/sbwJ1ZzoK8csEc=)
                          12: uNvbYvHrpqJuxIhcHt-1BFK0pMI.roa (hash: kpoYfsRRIuyuMkiibmfxSwK/PKM0OFnIj7VaHcrBfm4=)
                          13: yDpEKIiizClbtFz7oGPvOYtp264.roa (hash: +4X0XmT1mUKMWdn/slNnCZnYtBjk9lBUVq8bJKFw5QI=)
                          14: zRtO1-BRSsUGXQcidImvfnLpcQ0.roa (hash: 2q+w34DDnqVMnx3DmxrSdduUyOAdrNZNrDnK8Xa9mGQ=)
                          15: zyHq_Q3GWloeeV-VjTbtIHpVm4w.roa (hash: qMW9P3897BYoaIoMgMW6gBm5tbL+KWXsoPCeCqIZHdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:43:b3:2a:b7:78:8a:f1:18:5d:c6:27:13:eb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Dec  6 01:01:06 2025 GMT
            Not After : Dec  7 01:01:06 2025 GMT
        Subject: CN=f4d613f69ccb6eb80704ac2500853e46ca146a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:3e:9a:0b:f9:c4:f7:71:44:03:c1:54:0e:
                    51:11:38:98:73:38:dc:80:cd:ec:1c:1f:af:be:cd:
                    1a:9c:2a:f6:dc:17:a6:74:0e:32:dc:91:b7:b2:74:
                    5e:43:8e:dc:e9:f5:39:b7:5b:4c:bf:71:de:76:01:
                    91:26:bb:f4:45:5d:5a:12:31:bb:96:4c:4b:9c:e5:
                    56:2b:c6:82:7b:d9:9e:76:f2:f1:cd:bd:52:95:2a:
                    bc:88:32:39:c5:a4:e1:c4:cb:77:9c:30:37:59:1d:
                    68:0f:64:2e:78:0b:c1:16:2e:a2:ce:7c:41:20:3c:
                    da:47:57:1f:d3:e0:69:e2:51:72:dc:57:10:fb:87:
                    30:a7:a8:5c:3d:3b:66:7b:a3:17:12:d3:ec:01:a2:
                    d2:f1:2a:94:22:24:a7:be:ec:6c:3f:ee:70:08:ea:
                    ea:5b:6b:f7:fc:02:ed:ed:05:e2:c6:5d:7a:d4:55:
                    19:78:3d:e5:68:4b:93:10:c6:64:d0:4f:6e:26:de:
                    4f:cb:39:2e:5b:52:e1:67:8f:11:7f:9a:f1:19:c0:
                    ab:93:b9:00:cb:4a:b7:f0:e6:2e:37:83:79:fb:01:
                    fc:3d:3f:e9:a3:c1:61:22:a4:a7:15:d3:f3:56:a2:
                    f7:d9:8d:5a:35:32:95:73:e5:00:67:ee:64:ba:8a:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D6:13:F6:9C:CB:6E:B8:07:04:AC:25:00:85:3E:46:CA:14:6A:14
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:70:72:7e:a7:2f:e9:95:bf:5a:76:0c:69:ff:7f:48:9d:46:
         cf:9e:f8:2d:e0:3e:22:10:23:e5:43:d4:05:e4:d4:08:e5:e1:
         50:00:dd:e5:d1:b8:d3:43:07:fe:49:3d:1a:c4:ab:76:1d:b9:
         0f:ce:2c:84:17:07:24:49:9b:98:3f:da:24:6e:e9:6e:b5:ba:
         b0:78:68:dd:43:38:12:cf:12:99:9b:b0:c5:16:59:c9:58:0f:
         f4:be:74:19:5e:e8:34:f6:92:41:a6:6f:83:71:15:0d:cb:12:
         60:05:50:ee:ba:bb:f9:52:1c:87:30:73:90:24:12:2b:14:25:
         b1:46:75:98:c4:1e:20:9e:69:aa:ef:30:34:ee:89:5a:c0:31:
         d0:b3:1b:ec:19:c8:c1:b7:bc:e7:9d:15:63:92:6b:22:64:21:
         a4:4d:e6:98:32:94:c4:05:08:5a:7a:86:d7:9c:de:b1:ac:dd:
         8f:fc:17:67:9f:7e:40:d1:d5:9e:85:0d:fd:13:79:1e:33:70:
         4c:5a:a6:58:0f:5c:07:06:11:b9:83:e3:53:e3:b2:2d:81:e0:
         34:50:b5:e2:0e:8f:c9:8d:b8:06:c4:19:5a:6d:94:6a:15:f1:
         90:d9:64:ec:2c:e2:a4:fe:0d:4c:b3:7f:d2:a4:0e:0a:d0:be:
         8a:1f:cf:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLUOzKrd4ivEYXcYnE+uNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD
EyhmNGQ2MTNmNjljY2I2ZWI4MDcwNGFjMjUwMDg1M2U0NmNhMTQ2YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZU+mgv5xPdxRAPBVA5RETiYczjc
gM3sHB+vvs0anCr23BemdA4y3JG3snReQ47c6fU5t1tMv3HedgGRJrv0RV1aEjG7
lkxLnOVWK8aCe9medvLxzb1SlSq8iDI5xaThxMt3nDA3WR1oD2QueAvBFi6iznxB
IDzaR1cf0+Bp4lFy3FcQ+4cwp6hcPTtme6MXEtPsAaLS8SqUIiSnvuxsP+5wCOrq
W2v3/ALt7QXixl161FUZeD3laEuTEMZk0E9uJt5PyzkuW1LhZ48Rf5rxGcCrk7kA
y0q38OYuN4N5+wH8PT/po8FhIqSnFdPzVqL32Y1aNTKVc+UAZ+5kuoq8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTWE/acy264BwSsJQCFPkbKFGoUMB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnByfqcv
6ZW/WnYMaf9/SJ1Gz574LeA+IhAj5UPUBeTUCOXhUADd5dG400MH/kk9GsSrdh25
D84shBcHJEmbmD/aJG7pbrW6sHho3UM4Es8SmZuwxRZZyVgP9L50GV7oNPaSQaZv
g3EVDcsSYAVQ7rq7+VIchzBzkCQSKxQlsUZ1mMQeIJ5pqu8wNO6JWsAx0LMb7BnI
wbe8550VY5JrImQhpE3mmDKUxAUIWnqG15zesazdj/wXZ59+QNHVnoUN/RN5HjNw
TFqmWA9cBwYRuYPjU+OyLYHgNFC14g6PyY24BsQZWm2UahXxkNlk7CzipP4NTLN/
0qQOCtC+ih/Psw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:30 2025 by rpki-client