This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File:                     lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier:          1nlh6R1RviC96apYf7KkHA+7c8OHVIpH5MgF8Ly9SJQ=
Subject key identifier:   9E:73:EC:E3:14:88:BA:67:1A:82:14:C5:3F:BD:41:50:B8:1A:71:F6
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer:       /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial:       019AF1D2425727C6BFF857DE3881091CFF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 04:01:19 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:19 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:19 +0000
Files and hashes:         1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
                          2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
                          3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: O4RR/Hvy0+oG75sHgxX2HInLD8SD0X4vueqh8ttrZ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:42:57:27:c6:bf:f8:57:de:38:81:09:1c:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
        Validity
            Not Before: Dec  6 04:01:19 2025 GMT
            Not After : Dec  7 04:01:19 2025 GMT
        Subject: CN=9e73ece31488ba671a8214c53fbd4150b81a71f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:1d:03:9f:fb:1f:32:85:35:c1:3c:8c:2b:
                    e7:85:56:d0:35:a2:d0:42:37:b1:47:28:5c:cf:9c:
                    6f:cd:c3:3e:60:0f:f1:10:2a:65:e2:4d:f9:cf:00:
                    e8:0a:2b:fd:b4:3f:cb:4d:c5:7e:f0:c7:b6:b4:f9:
                    8a:87:bc:b7:c4:94:df:37:7a:14:29:02:ab:a6:fd:
                    cf:55:16:0a:b8:5d:8e:a3:d1:49:2c:45:bb:22:42:
                    a1:79:55:b8:ef:34:c1:44:2d:ff:8d:13:ce:c1:67:
                    2c:99:8a:8c:4d:4f:8a:6c:52:59:c3:51:5f:70:e8:
                    7c:2f:f9:56:2a:e0:63:92:a0:e3:c9:84:c8:78:bb:
                    aa:e0:d1:19:d1:c3:30:5a:44:46:3a:9b:f2:bb:64:
                    a7:ae:be:4e:72:1c:49:83:5d:50:64:3f:46:c9:19:
                    0d:65:19:76:92:1c:0a:9b:01:91:1b:df:44:38:04:
                    78:9a:83:fa:84:12:ae:69:0d:b6:59:d6:59:00:a1:
                    10:2e:e9:fd:e7:30:a0:f6:fc:59:ad:bd:9e:8b:fb:
                    66:81:01:b7:af:8a:10:11:c4:d8:79:62:60:3b:63:
                    3d:df:88:0a:d9:ca:dc:90:f7:c5:08:ca:63:49:c3:
                    f9:0c:48:84:81:f4:4d:63:0b:2a:63:e9:35:9c:01:
                    87:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:73:EC:E3:14:88:BA:67:1A:82:14:C5:3F:BD:41:50:B8:1A:71:F6
            X509v3 Authority Key Identifier:
                keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:2a:f7:cc:1b:43:8b:00:df:e9:ef:a2:ad:86:e7:2f:b3:
         86:1b:67:a5:15:77:6a:91:6f:49:87:82:ae:c1:4b:7e:60:16:
         6a:5a:bc:24:db:af:a5:f1:82:a6:85:37:cc:b4:0a:3d:9d:b0:
         49:70:e2:ed:60:61:f6:f1:ab:45:1a:9d:43:80:03:07:e9:d8:
         33:44:6f:dc:6e:c0:cd:42:16:e3:03:bc:76:89:d9:7c:c2:90:
         a4:3b:dc:b9:75:5b:cf:98:52:1f:02:93:bf:20:ef:32:13:0a:
         b2:eb:f6:a6:f5:05:28:7e:a1:31:2b:e0:07:b7:2e:9f:10:d8:
         95:40:e3:4d:ed:48:92:82:e9:3d:86:8f:aa:fd:47:5c:28:b4:
         52:ee:b5:a6:e1:f3:d3:f8:08:52:ba:a7:88:46:a7:13:d7:38:
         39:ed:c3:2a:a3:54:d0:42:cf:7f:08:f4:cd:a6:43:a0:ad:0b:
         16:ed:93:84:1d:47:ed:45:b6:00:f0:39:f1:1f:52:28:4b:fd:
         6b:75:0f:03:d8:8d:9a:d8:5b:28:25:11:7f:ae:e4:67:00:12:
         c7:50:c6:81:26:85:02:7f:ea:07:52:af:34:dc:1c:7b:23:e0:
         4f:d7:90:4a:03:10:02:d6:92:5f:b5:1c:de:06:38:e1:58:da:
         fe:62:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:21 2025 by rpki-client