This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
File:                     LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json)
Hash identifier:          2vc2vW8jyOcf/Z2VX5GjVc+Xc1ZUasUId8g9bAuJUhc=
Subject key identifier:   76:DC:77:26:7C:19:E6:76:7C:A6:5F:D0:13:E3:D0:66:51:6C:8F:2E
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019AF352A312CCE4DA413EFB12F7EFAC11A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 11:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:10 +0000
Files and hashes:         1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=)
                          2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=)
                          3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=)
                          4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=)
                          5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=)
                          6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 1KIzOvvWZgAcogrn3RvX1JMLZ03ki0nif9iUdXwIPmw=)
                          7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=)
                          8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=)
                          9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=)
                          10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=)
                          11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=)
                          12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=)
                          13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=)
                          14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=)
                          15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=)
                          16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:a3:12:cc:e4:da:41:3e:fb:12:f7:ef:ac:11:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Dec  6 11:01:10 2025 GMT
            Not After : Dec  7 11:01:10 2025 GMT
        Subject: CN=76dc77267c19e6767ca65fd013e3d066516c8f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:4b:e6:34:77:81:62:ca:56:ff:b5:1f:3d:
                    88:92:e4:56:b2:d8:2e:25:f5:f4:7b:86:a9:b8:41:
                    62:2a:d8:3e:44:e8:11:a1:d1:af:45:eb:2d:94:e4:
                    d8:39:3c:24:75:c2:0b:94:e4:86:49:2d:aa:8f:8f:
                    7d:7d:60:bd:85:66:01:93:4b:ae:a9:eb:04:23:44:
                    53:cd:09:9b:19:f7:b8:d8:0e:bb:e1:90:20:ee:2d:
                    7e:81:70:da:b7:5e:08:15:7f:13:2c:7c:1f:4f:f8:
                    1a:99:ef:c8:e7:dd:8a:69:aa:6c:43:de:2b:9c:b5:
                    bf:0b:18:e2:a2:d5:59:f9:7e:d0:b4:a7:77:43:e9:
                    9e:84:7f:1e:de:db:3a:52:16:34:a1:3e:05:88:8e:
                    86:b4:1b:12:2d:4b:ae:38:c1:2e:a7:6c:62:6b:66:
                    b5:ea:31:3e:96:fd:0b:83:7a:07:35:fb:9a:58:e0:
                    0a:6f:ef:da:f8:a2:2f:6a:5c:9c:05:38:35:98:34:
                    cf:9b:f6:f2:23:78:1a:70:ac:e5:ad:5e:07:a3:e6:
                    5c:fa:97:5a:a7:b2:21:09:37:99:8e:0d:f1:20:8a:
                    c3:3d:ed:bd:8c:e8:49:07:3d:92:32:56:b7:99:a0:
                    73:0a:79:2f:cf:20:17:51:86:10:21:ed:de:23:9c:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:77:26:7C:19:E6:76:7C:A6:5F:D0:13:E3:D0:66:51:6C:8F:2E
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:8a:92:c8:27:db:28:57:33:7f:ac:ad:ea:01:dc:04:b8:
         17:ed:57:c0:3d:8a:b4:6f:a4:25:be:86:4d:c9:9f:11:a7:2a:
         c2:d7:b4:18:95:ea:b6:96:db:75:37:c8:63:37:9c:79:93:54:
         ca:47:b5:76:77:4c:c7:6a:93:94:bb:88:6e:67:bc:26:55:3f:
         37:d0:90:0a:7f:04:7b:a5:a9:46:2f:6c:90:2e:96:3e:5e:2f:
         7e:a6:b7:d7:d1:c9:eb:87:ec:79:57:6b:06:a8:8f:d8:90:d8:
         aa:3e:81:bc:95:0e:a0:0f:49:e1:ad:16:f8:6e:a0:ba:ea:4e:
         ce:2b:44:7c:81:78:88:74:b1:a2:a9:13:4a:12:69:54:2b:5d:
         0b:d5:93:7c:20:17:41:72:fb:bc:df:4b:06:89:e8:0b:9e:0d:
         3b:89:a9:2a:57:11:4d:5f:5b:17:36:07:69:52:1b:2d:56:cd:
         82:9a:4f:41:a1:64:f8:3a:48:d6:4f:c8:db:9d:06:d9:5c:cc:
         b1:69:33:ba:8e:1b:e2:ce:cf:78:52:e5:e1:e4:18:05:ff:24:
         20:55:ae:02:80:ef:14:33:fc:df:3f:68:10:bf:55:c5:e3:06:
         5c:8b:f5:c8:7f:44:df:da:f2:86:dc:a1:d5:f5:3b:f1:b8:71:
         27:5c:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:01:31 2025 by rpki-client