This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File:                     LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier:          tYy1Pzbm6uAbBcEjbl0qTlRSW0WT6uC/22Nhvl3UIwc=
Subject key identifier:   FB:2D:E3:04:B8:B3:0D:73:51:91:03:90:E5:B4:00:BE:4F:70:E5:C2
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer:       /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial:       019AF12E4849443D8B911D04003C14FEA3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number:          1610
Signing time:             Sat 06 Dec 2025 01:02:13 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:13 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:13 +0000
Files and hashes:         1: 1-buam4cvzrUESLjjB1PACZifMOE.roa (hash: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=)
                          2: 1Xxzpu5NB_tAOFF7vKFky5CdRts.roa (hash: n+JshJ/fSDMDcSDZOom+oloo+zJzlcN/7rhG+Doia9U=)
                          3: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: BZjp3LtU3qA1CEDXoBi6oUQiMGP1hqp8Tc1DFwwaRzY=)
                          4: fKVvugVq57Vok-HeOBFsVeEq_KY.roa (hash: F7Yehco5YSDWcARYN+I7zPfrg1uSQ0Y+IfgsllPqsIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:48:49:44:3d:8b:91:1d:04:00:3c:14:fe:a3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
        Validity
            Not Before: Dec  6 01:02:13 2025 GMT
            Not After : Dec  7 01:02:13 2025 GMT
        Subject: CN=fb2de304b8b30d7351910390e5b400be4f70e5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:7f:37:4f:96:53:d0:6c:aa:57:da:57:4d:
                    9c:8c:79:1c:4f:99:f7:e4:d5:c0:2d:36:d4:a8:76:
                    0e:36:73:b7:d5:43:e3:54:d9:47:77:5d:03:3b:10:
                    d6:7d:da:2c:52:54:ce:c4:5e:f2:a4:c3:08:40:3a:
                    75:63:5a:cd:f5:3c:4d:4a:a0:a3:e6:02:1a:47:86:
                    31:d7:89:83:15:d6:84:f2:e0:e6:02:ed:43:d3:44:
                    37:aa:7d:4a:66:7b:91:38:3d:6a:ab:dc:07:a3:da:
                    fe:bb:b2:56:4f:2d:8f:e0:ac:b4:57:2c:1c:e1:00:
                    c7:aa:04:97:c7:84:d4:9c:a6:f4:d5:7a:b2:35:36:
                    57:da:8a:fc:47:e5:fa:af:b7:5b:42:e4:ca:ef:d8:
                    73:83:20:e9:45:89:36:0d:ac:2a:3a:74:7a:0e:9f:
                    e8:90:e0:38:17:c9:06:7f:03:4a:de:d0:5d:ef:54:
                    25:96:0f:d2:9f:5e:a1:e0:87:f4:25:b3:74:8d:04:
                    0c:7d:c4:ea:6a:e9:98:11:09:97:38:af:a7:c1:3e:
                    09:6e:84:b2:dc:e7:6b:50:7b:0a:2f:7e:65:ed:1e:
                    f2:55:b5:2b:41:31:dc:58:8b:86:eb:73:3f:0e:6d:
                    32:40:5a:e3:66:57:fb:6b:1b:36:ad:06:0f:9d:13:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:E3:04:B8:B3:0D:73:51:91:03:90:E5:B4:00:BE:4F:70:E5:C2
            X509v3 Authority Key Identifier:
                keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:16:a9:9e:2f:c8:be:40:99:46:a3:2a:7b:15:aa:45:2d:
         c0:94:b1:26:a2:33:21:88:c6:7d:fd:21:3e:7e:d5:bc:da:4a:
         87:1a:9b:17:b1:16:2d:9a:b1:fa:08:0c:b9:8b:79:d6:15:27:
         71:85:6e:4b:24:48:68:1e:0a:ff:1e:d9:6b:90:c3:10:78:83:
         06:77:41:57:67:6f:f3:b3:b8:6a:e2:e7:0e:1d:e8:84:c4:25:
         dc:97:4d:5c:78:49:54:02:c3:1b:6d:61:e6:90:e1:0c:6e:1c:
         d4:87:3f:c0:1a:7e:09:3b:2e:c9:55:46:d9:05:0d:34:e0:1b:
         5e:f5:72:d2:0c:fc:72:1b:b0:29:93:fe:60:9c:41:7d:c7:00:
         05:da:42:f9:46:17:1c:65:1c:47:5e:44:c4:0c:56:e3:9f:bf:
         7f:b8:74:25:42:e8:19:51:0f:90:e6:24:69:de:82:40:37:13:
         f3:ba:7c:d5:5f:c7:4f:de:d5:79:cd:e2:56:be:e3:a3:8d:7c:
         01:8a:d1:ab:dd:91:5e:0a:e6:d5:18:d0:28:92:a6:c0:a7:c4:
         d1:ce:95:c7:5a:cb:d9:fe:0b:de:1a:da:63:7d:31:92:b7:2c:
         de:61:4f:36:b6:27:cb:49:b1:86:d9:d8:66:ce:39:39:0b:84:
         02:a6:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:47 2025 by rpki-client