This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File:                     lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier:          G8n9eEp42JcSIBJrW7LEyiYJwHMado6Req6ndeQX/D0=
Subject key identifier:   16:83:00:AF:F0:E5:C1:AF:B5:4F:0A:A3:ED:D6:2C:58:B9:E6:17:F2
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer:       /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial:       019AF50992F14292EB20D595C8027AD0BD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number:          0D42
Signing time:             Sat 06 Dec 2025 19:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:36 +0000
Files and hashes:         1: 1-l2kYHPzzOgxMyPGeYc0XGNjBT4.roa (hash: LNd5PHqRanBJORsf7oSyFeUFPQrcAuT39Hzl/svHnzg=)
                          2: KIcKUhtodUhmesQcw4UOrgje-VM.roa (hash: ZjtXxzfOCPus9MATQw2KmYmGCHHWM6Ux5YwzOydVNao=)
                          3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
                          4: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (hash: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=)
                          5: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
                          6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: mMzXJNHRTWs/YIbAfX4V3Hj+kLWD4dsU5eVqfiQ+PLw=)
                          7: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (hash: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=)
                          8: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:92:f1:42:92:eb:20:d5:95:c8:02:7a:d0:bd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
        Validity
            Not Before: Dec  6 19:00:36 2025 GMT
            Not After : Dec  7 19:00:36 2025 GMT
        Subject: CN=168300aff0e5c1afb54f0aa3edd62c58b9e617f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:0f:3e:4d:28:81:35:30:e1:7b:96:a0:a9:
                    00:5a:5b:b5:e1:de:8a:16:20:14:b3:dd:6d:50:33:
                    b9:ca:16:0d:6b:76:35:9b:c3:39:61:f1:fb:49:9f:
                    c3:5a:d7:fb:5d:f1:67:94:b2:a1:d4:4d:ce:d0:16:
                    73:48:32:8e:1f:7d:5c:43:a1:44:ca:4f:9f:34:e2:
                    9a:4a:5a:b6:6b:c1:f9:60:13:82:9f:7e:21:dc:11:
                    04:e4:da:57:73:a5:a8:85:3b:71:e3:7a:83:e2:66:
                    31:a6:93:9d:20:5b:ea:a7:83:3e:6e:26:3e:31:51:
                    d6:8c:93:9c:45:0a:22:0e:58:5b:73:fd:74:82:a2:
                    a5:a4:56:4b:22:45:f3:3f:dd:bb:07:8b:67:2e:c8:
                    c7:dd:9c:02:ba:8d:f3:c9:8f:85:c7:68:ac:49:30:
                    7c:f9:d7:87:97:24:25:30:76:11:02:df:4e:dc:46:
                    c1:2d:f2:04:b6:85:2f:66:39:95:2b:a0:04:ed:ff:
                    12:2b:f2:c7:fe:5b:ba:c4:e6:07:39:8b:c2:b1:c7:
                    bd:82:df:38:ea:b4:28:74:af:25:53:2c:da:ac:c6:
                    9e:c4:55:de:e6:39:66:b0:3b:7f:8d:70:3c:fb:60:
                    d2:9c:c6:89:f0:83:a4:d8:ab:14:17:0c:e8:1e:73:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:83:00:AF:F0:E5:C1:AF:B5:4F:0A:A3:ED:D6:2C:58:B9:E6:17:F2
            X509v3 Authority Key Identifier:
                keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:4f:73:ef:20:35:ba:d4:0f:78:1b:96:2d:84:77:2a:c4:
         4b:8b:30:d5:e6:cb:39:26:5a:d0:12:53:b4:a7:58:2f:0d:a3:
         b2:f8:52:6c:a5:bf:b2:a4:7a:45:7b:92:55:db:8a:30:0f:99:
         82:be:09:16:c3:77:1a:47:c1:6c:7b:bb:c6:ce:08:ec:01:46:
         8c:a5:9b:0b:37:ff:f3:f7:87:95:26:6a:2a:e0:2a:7f:4c:01:
         0c:d1:91:04:f4:47:db:83:f4:79:60:a9:47:35:03:59:29:bf:
         de:db:70:14:63:af:13:fa:c5:c9:82:02:5a:ed:05:24:d3:28:
         d1:5a:13:f4:8a:1c:e0:04:8f:e6:ec:34:e9:66:33:f5:9d:8a:
         84:30:bb:78:ee:a5:f8:a9:07:39:99:eb:67:c0:65:7f:a8:c3:
         fb:1c:60:d3:0b:52:e6:bd:73:06:57:52:1b:1b:30:b2:18:bc:
         36:37:7f:26:70:3b:09:41:6d:ae:33:5b:a0:9f:6d:a6:56:a3:
         68:13:64:fb:b2:f3:e6:5d:c9:c3:e3:95:25:2a:0d:97:13:63:
         07:1f:a9:39:b9:77:cb:20:d0:fd:e7:6c:33:b4:5e:9a:60:e8:
         1a:ad:78:90:bc:2c:81:c3:ce:a3:1e:bb:ff:6c:d5:6e:a1:ca:
         4f:3d:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:27 2025 by rpki-client