This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
File:                     LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json)
Hash identifier:          UrJLsg6un+hQq/KKbdHMUPb5cpZyAYBlWPnJeByQFfs=
Subject key identifier:   89:16:ED:18:12:34:8C:E8:22:53:1D:CF:A8:68:31:C7:11:C0:80:85
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Certificate issuer:       /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial:       019AF1648F57FC73969E9F29D1B9AF2BE75A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
Manifest number:          0FEC
Signing time:             Sat 06 Dec 2025 02:01:30 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:30 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:30 +0000
Files and hashes:         1: 10boupFvI1XULQNro2UN6lTac7g.roa (hash: TeSlzV5XfscAlltaInqH0+tXc9GXKbl3p81v+qesFug=)
                          2: 39NWCkxRJ14fZsy4fi4Dndunc3E.roa (hash: I60N/7b2uZcY0NbUe1SX8teSf0fVCyRemkra4xSsvf0=)
                          3: 3gaGUu98vgQ58MJvezo7k-ARASo.roa (hash: zKOcaqs6+UltL1w+RWoeOik9hgJIRqoSknm0oRsT/R8=)
                          4: 9SjejDTjZj0BtNF2Kp675mfLhag.roa (hash: RSM260xjwGf3+M4q8hzyY6CZ3UIIUis4qXJ8wDFcbHo=)
                          5: K57zRI93D4Vp1wMJF72FshTwG28.roa (hash: +61sxRGSjoUvyPkCFintn1yn0/ScQTJViPj1QF7B1mY=)
                          6: KUbX0VcDxa-Iyxzf4X9iZxn8Eig.roa (hash: bb9xUuRWwAY6FOOdBD4YOtWtJhp7uGNnKhs67QdqaKM=)
                          7: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: hRvy6SX2ShCyjo43CkMVq3vWRiqfpoBDcenrnNx0TqQ=)
                          8: M67bSslu4i4Gy4p1ZlEfDj5c18Q.roa (hash: Cn1wdpfKE6warGKgEQa4o30Ra7TF3raQ0MpI76McIbU=)
                          9: P_s-zHSXglw_281jGOhyczBmJzI.roa (hash: wyG34RwDivUB0Qbi0DQatHzUoY8seUZaKV4g8a0quJw=)
                          10: UBsXmv4C5qffM7QM-9ND5QsfZfM.roa (hash: txrbSAO01vgCN97ZFCzVUVpn4VMkZhlbZmWHgF7E6VM=)
                          11: UMD_GrrBm5exfk4ne6BfKt3EdWg.roa (hash: r961vKQM2ic8nkYfC0teGF9Gu+iyVr4kAJkHxGV3f5E=)
                          12: Ug3t5QSKiSeV7OaH9F3UphE_NVs.roa (hash: VCeDrHYHr0n+emKVtRdKeoVIDZkLCFe4gRvZ/XqLmhk=)
                          13: ZHR6Evs2t_5MsAWITZbO0_S2MQc.roa (hash: TTSbz7ZJFR5Cfc5bWCmHmNZ+Klnd0Mt+hNshpgdxShs=)
                          14: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (hash: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=)
                          15: sAlcT023Re1_motyjBVZccLuCgg.roa (hash: tja1+p7BrfZqb4rfBBKJcVOy+ZddkR/MXj/lAwerOJo=)
                          16: wC0sOJE7Wv-NDnjnHyFLfG4GZzQ.roa (hash: eBDWtuxEoge7xWpb5CncoOSy1UIXobW2890cjPYuR1s=)
                          17: zF2MV26QdQWRwXiicXiudK6n1Xw.roa (hash: 4aHxt6tPwu63K1PTNxL4On+nj5XwjJaZnAxdGrgtlxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:8f:57:fc:73:96:9e:9f:29:d1:b9:af:2b:e7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
        Validity
            Not Before: Dec  6 02:01:30 2025 GMT
            Not After : Dec  7 02:01:30 2025 GMT
        Subject: CN=8916ed1812348ce822531dcfa86831c711c08085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:f4:bc:d9:e2:06:c6:be:24:ef:18:3f:13:
                    bd:96:6b:37:b0:09:cf:20:10:ae:5a:f1:e9:6f:55:
                    1e:9f:73:3f:08:12:c0:1c:75:28:b2:06:af:ec:a7:
                    f5:f7:8b:69:8a:8a:32:e5:4b:bb:b9:9b:fb:74:b6:
                    0a:4b:93:00:f0:b8:d3:78:b0:e6:07:3d:3e:e2:b8:
                    0b:64:4f:b7:13:4d:c0:e8:88:d6:c8:bf:21:07:56:
                    a7:00:72:e9:32:fc:b9:8c:e3:b6:1d:ad:4a:0b:b9:
                    c8:8b:78:0f:e0:fb:e2:4c:9a:57:fe:8f:bd:56:db:
                    10:39:c2:8f:85:08:79:1f:23:3d:c4:82:65:aa:91:
                    86:80:8c:bf:ba:d4:97:a9:c2:7a:23:13:25:26:4a:
                    6b:dd:0b:6e:1c:42:49:20:f2:59:b5:60:72:a5:ba:
                    ab:68:e9:c9:4b:55:b9:50:2f:2e:87:f6:e9:63:2a:
                    99:e6:3c:bf:b5:4e:7e:f9:f5:d8:5f:ef:01:7e:66:
                    25:d3:c6:6a:6e:d9:a8:a1:3a:21:9e:a9:5b:3c:21:
                    cc:86:61:bd:a9:42:05:b9:f3:65:ac:fc:0f:dc:4d:
                    9a:35:05:0d:12:9b:ca:b3:e1:74:35:8e:68:0b:e9:
                    ef:30:3a:73:a9:b5:85:bb:ec:22:62:ad:b5:23:6b:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:16:ED:18:12:34:8C:E8:22:53:1D:CF:A8:68:31:C7:11:C0:80:85
            X509v3 Authority Key Identifier:
                keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:50:93:8d:a6:ef:05:5e:e6:c4:97:7b:f8:17:fb:0c:e9:
         48:a3:eb:b6:80:ee:05:2e:2b:17:5e:ca:62:25:00:8e:b7:d1:
         a1:91:cd:1a:20:37:2a:f9:a5:ea:8c:b9:ad:20:70:8c:78:d3:
         ca:1c:65:1d:95:dd:df:ad:93:93:e2:12:39:1c:3a:3c:2d:82:
         ec:c4:c7:95:02:9d:9e:f7:aa:e6:dc:04:00:73:8b:9b:02:33:
         69:1c:04:07:03:9f:07:94:84:26:1b:ee:99:d4:11:27:8c:52:
         a5:81:42:11:07:f6:27:cb:98:13:ce:e4:cd:53:63:0b:1f:f9:
         45:c3:ff:57:c9:4f:db:93:e0:51:ec:1a:27:64:96:a5:8b:25:
         69:ad:20:38:00:5f:32:83:21:51:a9:8b:24:5a:b8:64:4d:4b:
         24:38:46:5e:17:1f:5e:9f:c2:c6:ce:25:0f:f2:d7:bd:c1:df:
         4f:6a:f4:96:80:ed:57:64:57:3d:cd:56:7d:4d:88:a9:32:1c:
         c0:60:36:79:42:7b:2e:cf:1e:6e:f4:c1:89:7f:3c:7a:97:aa:
         d8:a9:24:fb:12:50:79:c3:a0:95:31:d7:ee:30:60:92:11:e7:
         ad:5f:05:bb:cb:e7:eb:2d:18:75:c0:a9:9d:e0:d5:48:e2:90:
         f0:3a:4d:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZI9X/HOWnp8p0bmvK+daMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD
Eyg4OTE2ZWQxODEyMzQ4Y2U4MjI1MzFkY2ZhODY4MzFjNzExYzA4MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1X0vNniBsa+JO8YPxO9lms3sAnP
IBCuWvHpb1Uen3M/CBLAHHUosgav7Kf194tpiooy5Uu7uZv7dLYKS5MA8LjTeLDm
Bz0+4rgLZE+3E03A6IjWyL8hB1anAHLpMvy5jOO2Ha1KC7nIi3gP4PviTJpX/o+9
VtsQOcKPhQh5HyM9xIJlqpGGgIy/utSXqcJ6IxMlJkpr3QtuHEJJIPJZtWBypbqr
aOnJS1W5UC8uh/bpYyqZ5jy/tU5++fXYX+8BfmYl08ZqbtmooTohnqlbPCHMhmG9
qUIFufNlrPwP3E2aNQUNEpvKs+F0NY5oC+nvMDpzqbWFu+wiYq21I2v0KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkW7RgSNIzoIlMdz6hoMccRwICFMB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5pQk42m
7wVe5sSXe/gX+wzpSKPrtoDuBS4rF17KYiUAjrfRoZHNGiA3Kvml6oy5rSBwjHjT
yhxlHZXd362Tk+ISORw6PC2C7MTHlQKdnveq5twEAHOLmwIzaRwEBwOfB5SEJhvu
mdQRJ4xSpYFCEQf2J8uYE87kzVNjCx/5RcP/V8lP25PgUewaJ2SWpYslaa0gOABf
MoMhUamLJFq4ZE1LJDhGXhcfXp/Cxs4lD/LXvcHfT2r0loDtV2RXPc1WfU2IqTIc
wGA2eUJ7Ls8ebvTBiX88epeq2Kkk+xJQecOglTHX7jBgkhHnrV8Fu8vn6y0YdcCp
neDVSOKQ8DpNNw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:57 2025 by rpki-client