This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File:                     rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier:          Z87sprSqi9Vnx5WmFg9JQrbGf5XxNrIhEh5UXnHGFQ8=
Subject key identifier:   64:2C:AA:E8:02:79:76:6B:25:63:4C:D6:C6:B0:D7:F4:4E:A3:E9:09
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer:       /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial:       019AF1D2273AFA1F8530EFE69629BCB8D971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 04:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:12 +0000
Files and hashes:         1: hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa (hash: GeXT9//cL/zNTjZxuaw4Cm/U6jftaxUYi+/QSdMp5D0=)
                          2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: TBTJWrFCWFxFzCRx4FD3Ge5TtHGwKNcTot7KTIPYkhY=)
                          3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:27:3a:fa:1f:85:30:ef:e6:96:29:bc:b8:d9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
        Validity
            Not Before: Dec  6 04:01:12 2025 GMT
            Not After : Dec  7 04:01:12 2025 GMT
        Subject: CN=642caae80279766b25634cd6c6b0d7f44ea3e909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:57:88:25:ba:be:dc:d3:6f:e6:82:83:ea:
                    40:77:0e:dd:27:34:15:7c:4a:bd:75:b1:ff:ea:64:
                    13:40:30:b1:66:d2:9a:8b:4a:65:f1:f2:98:34:de:
                    c4:4a:6e:da:cd:ad:a0:ee:a5:ef:73:11:8c:69:bf:
                    4c:61:3d:6f:35:5c:9b:24:58:95:21:f7:9c:04:93:
                    0f:3d:ce:26:18:21:b7:9c:85:f2:40:16:29:1b:a6:
                    4c:94:99:eb:8e:36:11:82:a5:19:60:8c:f5:a4:9c:
                    9b:71:32:1e:17:e7:a9:77:df:92:03:b0:ed:19:97:
                    4a:26:82:e7:d0:a9:4c:e1:15:33:a6:7f:47:32:73:
                    9e:4c:e2:14:f1:7b:a7:de:40:6a:fb:a2:35:41:4f:
                    47:a9:70:55:b7:6e:a6:c7:fc:ba:6e:75:8d:2d:6c:
                    5a:36:d8:dd:42:cc:d8:ad:ab:6e:a4:af:f4:f1:cd:
                    d6:a5:b5:0a:f5:25:57:06:72:8e:dd:27:49:81:af:
                    ce:b2:a6:5f:70:a4:b5:ae:a7:96:e1:1a:91:c3:d7:
                    a6:03:05:bc:25:6e:c0:24:a8:7e:d8:b8:15:57:30:
                    09:38:0b:b7:47:2f:5c:3e:ae:7a:f3:23:23:b9:e4:
                    10:dc:6c:33:b3:06:87:21:e3:40:13:1c:15:99:24:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2C:AA:E8:02:79:76:6B:25:63:4C:D6:C6:B0:D7:F4:4E:A3:E9:09
            X509v3 Authority Key Identifier:
                keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b7:86:4b:cf:d1:8c:6b:2b:8c:19:2a:e4:38:0e:65:3a:c5:
         d1:bc:2a:36:c8:23:28:b0:51:6e:42:69:3b:bd:03:d1:12:a8:
         0c:f4:dc:7f:c9:54:b1:72:8e:0a:d5:19:74:ea:54:0d:d2:e2:
         0e:81:f6:95:ad:fd:f9:9d:e9:8a:5c:27:9e:30:c1:15:6b:9b:
         3b:9b:94:31:bd:ff:77:cb:20:8f:8f:f2:09:32:b3:6d:62:7e:
         85:52:57:22:30:5b:ec:fe:dc:2a:f7:8d:94:8e:0f:be:b9:77:
         1b:29:90:e9:9b:75:ec:8e:72:33:71:96:7a:c9:13:00:63:5f:
         e4:ac:50:a3:bd:8a:b9:08:24:e2:73:d9:53:9b:8f:56:e4:71:
         c9:b6:23:03:0e:db:bf:63:e1:a0:7a:18:1e:88:0a:66:ed:e9:
         54:6e:dd:4e:01:1e:4c:87:72:b8:47:64:35:15:58:d9:19:9f:
         f3:f6:90:8d:39:9d:a5:2b:c0:57:4a:d2:05:dd:48:5b:2f:be:
         09:02:c1:b0:59:c9:cc:53:d3:ac:aa:de:53:d4:fa:bd:93:fe:
         96:92:73:b8:3f:ac:1c:ef:bc:51:1f:8f:2b:85:c7:b9:a1:b0:
         bd:63:45:e7:a7:a5:f7:06:4a:7c:b3:ae:c8:c2:b8:77:40:80:
         d8:6f:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:01 2025 by rpki-client