This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
File:                     LG1GLWWE49of8lFVSjReScatD7E.mft (raw, json)
Hash identifier:          EQtUl3wpW8buz5I3KmyomGYeIYkq1MdQx/tloF2UyVY=
Subject key identifier:   62:EC:A0:7C:70:77:E4:74:4D:44:96:ED:27:86:98:01:AC:31:B6:21
Authority key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Certificate issuer:       /CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Certificate serial:       019AF31CA053DBD3DB1BF9C5C7D2E73BE01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 10:02:10 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:10 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:10 +0000
Files and hashes:         1: LG1GLWWE49of8lFVSjReScatD7E.crl (hash: J7PRzfrQKaivH3OpCMP0xuYWWTYKtZICncESLS8PabU=)
                          2: PlTGp6Ho-NUz3UJ_pTXgK1lVgrA.roa (hash: 9OM5uBqz0hnAImE+ogfgxUlyhO9v7s+esgTavmxFQEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:a0:53:db:d3:db:1b:f9:c5:c7:d2:e7:3b:e0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
        Validity
            Not Before: Dec  6 10:02:10 2025 GMT
            Not After : Dec  7 10:02:10 2025 GMT
        Subject: CN=62eca07c7077e4744d4496ed27869801ac31b621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:7b:98:e8:0a:5e:2b:0e:46:2b:1d:b6:c9:
                    bd:2a:26:f7:30:2f:90:ba:f5:4a:1a:44:a8:97:68:
                    fd:6c:98:90:99:5f:d0:a2:81:28:b5:81:d9:5c:cd:
                    eb:ce:43:10:6d:50:9d:c9:06:41:ea:35:26:f1:96:
                    3d:66:be:b0:d9:d1:ea:39:ea:3e:bc:4d:1c:da:a0:
                    0c:69:c9:a3:85:3b:bb:14:53:9f:aa:6f:07:06:7c:
                    d4:15:da:89:36:75:ce:0f:0d:53:ae:37:93:eb:0f:
                    90:9d:f8:96:3f:c4:ff:ed:95:05:aa:70:7e:52:00:
                    ce:5b:b8:2c:bb:68:0e:3f:eb:ad:6c:82:cb:d8:7b:
                    b2:c7:ac:cb:62:02:96:62:61:f3:73:54:06:ad:58:
                    e1:f9:15:7d:95:da:16:dd:75:60:3f:72:ed:05:8b:
                    4d:c8:df:96:1d:a4:cb:56:8d:f6:8d:2d:a8:dd:fb:
                    f7:5d:c0:8b:9e:44:4a:54:f2:98:51:9f:9e:c5:38:
                    49:1f:a7:4b:fb:93:5b:62:23:56:e3:c5:89:99:f3:
                    5a:b5:1e:6b:33:6f:1f:84:27:70:8d:43:f2:68:e7:
                    57:74:d9:0c:fc:f8:ab:b9:84:5f:d2:d0:12:42:9a:
                    cc:50:4c:ab:e7:43:e2:7d:f9:ce:1f:89:1c:75:24:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:A0:7C:70:77:E4:74:4D:44:96:ED:27:86:98:01:AC:31:B6:21
            X509v3 Authority Key Identifier:
                keyid:2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:9b:d0:43:3b:df:1c:39:71:e9:3e:93:9b:98:2e:12:87:
         4d:00:0d:36:43:80:1f:5b:1f:c3:fd:f4:48:30:05:31:1a:93:
         9f:b8:d3:95:2d:2e:d0:0f:4f:ce:30:63:79:6b:62:e2:71:cf:
         10:9e:39:9f:7d:09:66:aa:9d:18:08:f1:9b:6e:06:ec:31:0c:
         db:e4:bf:b5:4b:11:d6:6d:14:7b:b7:cc:f2:ad:1b:27:fa:f7:
         7e:af:a8:85:3a:8c:b8:d2:57:87:8a:74:14:8f:50:80:89:25:
         3d:e3:00:f8:36:18:7d:f6:ea:b0:a1:4e:32:f8:54:0f:d2:54:
         70:ea:9c:4e:f9:87:f1:98:8e:af:24:85:6f:9f:84:83:c1:cf:
         b1:0d:d6:f6:d7:95:bd:bb:e3:fc:4f:46:17:54:98:12:74:7e:
         75:2c:c8:70:66:b0:d2:81:ae:c4:5e:af:77:4d:81:1f:27:6e:
         21:9e:42:8e:6b:2f:ca:a4:a4:2e:83:bc:2e:ef:f3:ac:da:9d:
         51:ff:c5:e1:a5:9a:ac:2c:99:51:80:99:df:88:0f:b2:e3:2b:
         4f:78:f7:ff:3f:c6:97:3b:70:03:a2:4e:e4:42:a1:49:3d:8e:
         68:ef:db:fc:ea:1d:84:05:26:64:7a:09:e4:de:bc:a1:95:71:
         b3:52:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:50:49 2025 by rpki-client