This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File:                     LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier:          fRb7RhKjDz7bAkgdcPyCl8PGu1yPHx+s/xDUrzFR6Ew=
Subject key identifier:   0D:1C:77:04:D4:62:C2:25:24:91:8E:4D:C7:4D:7B:4B:09:04:D1:C3
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer:       /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial:       019AF2E42681E9C0824598187B6B35820921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number:          0960
Signing time:             Sat 06 Dec 2025 09:00:29 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:29 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:29 +0000
Files and hashes:         1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: YSRLLmb0laHXkvhJYzO3aBHobajZiz3BFUIPc2MGshU=)
                          2: PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa (hash: GGgzoj2Mm5Fc4LoEFoe3yEWV5i9Cn3vEUPsbJ0RHjrI=)
                          3: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:26:81:e9:c0:82:45:98:18:7b:6b:35:82:09:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
        Validity
            Not Before: Dec  6 09:00:29 2025 GMT
            Not After : Dec  7 09:00:29 2025 GMT
        Subject: CN=0d1c7704d462c22524918e4dc74d7b4b0904d1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:e6:a6:83:ac:06:5b:40:4e:84:ab:64:12:
                    c2:7d:94:e0:69:c6:da:77:b4:05:2e:ed:2f:24:aa:
                    ed:ab:0b:62:85:55:03:71:ee:14:e3:8c:ed:30:3e:
                    ff:9d:76:7b:24:59:2f:37:5f:98:e0:2d:1b:7f:f3:
                    d8:de:7e:6f:94:a1:18:33:f3:d0:84:a1:0e:ec:31:
                    8a:f9:fe:ff:86:55:72:b2:bb:74:c2:7d:35:f7:15:
                    db:fa:0e:0d:0b:e6:e9:93:c7:ff:aa:fc:e4:bc:56:
                    72:12:24:46:58:27:a6:54:fc:81:8c:49:87:b4:74:
                    35:1d:d2:5c:30:00:fa:dc:33:5e:14:f8:82:95:bd:
                    03:00:59:dc:6b:f3:d8:fc:cb:f2:85:57:cf:e7:1b:
                    ba:11:4d:df:16:e0:33:e5:02:48:b4:a3:2c:ae:c3:
                    6b:ed:39:53:87:8d:f8:43:9b:8c:24:1d:d1:57:43:
                    50:bb:10:db:f3:24:39:4a:6e:29:64:b1:73:b3:d9:
                    88:5f:56:0d:11:33:27:de:41:98:d0:60:aa:c3:74:
                    30:f1:1d:43:0d:4d:08:02:f1:ba:ee:88:39:52:6d:
                    25:0e:70:af:2a:eb:a9:09:5a:fb:f7:ca:eb:70:e5:
                    cf:85:72:4d:7f:b3:8a:23:a2:76:4f:9b:53:b5:07:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1C:77:04:D4:62:C2:25:24:91:8E:4D:C7:4D:7B:4B:09:04:D1:C3
            X509v3 Authority Key Identifier:
                keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:2e:31:34:00:38:b7:0a:ac:74:a7:3d:9a:ce:80:b9:8e:
         16:0f:5c:84:36:54:f6:72:53:8f:b4:47:90:6f:79:54:fa:6b:
         36:32:f3:9b:5a:90:67:7e:b4:d9:01:b1:ec:5c:9b:bc:57:ba:
         38:5e:56:3a:f4:02:28:20:f4:54:db:5d:ee:d8:7c:1d:d0:7d:
         7a:66:1a:f3:b0:07:a8:2a:70:cf:17:5b:69:0c:38:85:23:f6:
         6c:a8:dc:a3:9c:4f:6e:73:2a:41:e6:4e:1c:10:22:c1:e0:c7:
         f1:cf:4f:5c:b4:71:3b:6e:12:0b:4d:a0:ca:74:f4:6a:f0:3d:
         40:af:25:5c:5a:0e:a7:3f:70:c3:55:a9:04:a5:3e:2d:df:5e:
         5b:ce:26:9f:a4:cf:82:68:f1:07:d8:40:a0:59:66:9c:b1:ee:
         9b:91:49:aa:dc:85:87:27:96:2f:27:3f:24:4a:ba:1d:39:c4:
         11:20:82:f2:d0:eb:96:b7:d7:d4:33:84:9b:c9:85:34:f7:27:
         6d:db:54:51:06:64:8c:bf:ed:29:80:af:64:44:10:f0:55:d7:
         34:d7:5b:eb:f1:b9:14:93:d2:66:4d:e0:18:e5:f6:c2:99:ef:
         6d:27:ff:64:9c:bd:8c:d6:7d:40:a2:a3:1f:a5:02:e3:cd:e6:
         06:e2:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:29 2025 by rpki-client