This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
File:                     Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft (raw, json)
Hash identifier:          rLtDg/gL9v3eDd/cuYOuX2MvX6+6/kz00Daq+9QDgtQ=
Subject key identifier:   BB:80:40:89:47:FC:31:F9:C6:71:E9:7B:F7:79:E9:35:56:67:F7:7B
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Certificate issuer:       /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial:       019AF276D5C0B78ED44A4695B486EC0B0F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 07:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:05 +0000
Files and hashes:         1: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl (hash: jGUEv+RPNqtsu8RbbyumuUZJI3aa9QHfd63/u0hYIMA=)
                          2: hx1AobN52MdMauAKbwiof1BpngE.roa (hash: 69thDY3N1zb82iIdJWyRKD2mWa/WKlKqpVSoW/+g4+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:d5:c0:b7:8e:d4:4a:46:95:b4:86:ec:0b:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
        Validity
            Not Before: Dec  6 07:01:05 2025 GMT
            Not After : Dec  7 07:01:05 2025 GMT
        Subject: CN=bb80408947fc31f9c671e97bf779e9355667f77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:05:f3:b4:4d:91:8d:2a:58:c7:12:95:06:
                    95:b4:52:80:35:c3:58:5c:44:9d:b6:1e:d2:8e:ad:
                    f9:60:c4:2d:5c:12:9c:d3:c6:76:da:88:01:e0:96:
                    33:11:6b:eb:f0:a4:a0:fe:ee:5e:15:da:a9:a5:23:
                    55:45:8d:2e:f6:e1:b7:3d:5c:b4:97:84:7f:a1:e1:
                    f7:2f:91:13:d5:bf:9b:72:6f:4c:37:09:b8:1b:2e:
                    ca:01:2e:48:04:cf:5b:2c:4c:ad:9c:77:c1:49:ea:
                    3e:4b:15:a0:a4:dc:37:e2:97:53:aa:69:db:4f:bd:
                    e2:75:05:60:aa:ab:9e:03:ca:45:8a:12:86:f5:13:
                    fc:73:45:e2:59:f4:fd:d9:db:4c:d3:a9:73:1a:ca:
                    e1:dc:bc:0b:74:d6:46:df:77:3a:35:04:00:3d:0b:
                    f8:74:a9:7b:2d:da:18:e8:bd:b4:43:79:ab:f5:02:
                    31:ad:8a:57:a5:88:13:43:e5:af:e0:31:11:dc:28:
                    ec:7a:d8:37:c6:d9:4e:39:ea:68:4a:0a:e4:bf:69:
                    38:53:23:59:22:a4:fc:d6:67:c3:52:5a:9d:ae:ba:
                    14:21:9c:62:8f:70:05:1d:0a:42:58:7e:c3:e0:a1:
                    d7:0d:67:f4:a9:54:c2:51:60:71:cc:31:c1:20:d7:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:40:89:47:FC:31:F9:C6:71:E9:7B:F7:79:E9:35:56:67:F7:7B
            X509v3 Authority Key Identifier:
                keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:ce:01:47:9c:11:5a:25:5b:1e:01:d7:34:58:5d:6b:da:
         c9:3d:7a:1d:41:0f:e0:59:e0:6d:69:a4:ab:7c:36:78:5b:6b:
         af:67:20:2a:7c:ac:c7:eb:44:53:ee:d2:de:7a:b8:c7:21:5d:
         62:02:c7:19:ad:de:99:d7:ad:e1:1f:15:28:12:a0:a4:02:c3:
         a2:3d:d6:f9:70:40:95:0f:fd:2b:46:64:4a:19:64:bd:8c:2f:
         d1:36:14:1d:bc:90:ce:6b:de:4f:ad:a3:50:b0:48:5c:8c:d8:
         ad:5d:a7:34:ab:68:02:b7:56:2b:f4:4f:ab:dd:df:30:41:52:
         14:5c:d5:29:05:70:41:13:10:e9:e2:20:f4:8c:09:a1:38:f6:
         9d:cd:d0:3f:93:f2:43:97:01:ab:10:18:9d:2e:8a:f7:a6:9d:
         54:04:88:9c:89:1b:ca:6d:bd:36:99:ff:18:2c:2c:6e:6a:1d:
         27:93:a1:6f:8c:39:15:68:e5:7c:9e:97:9e:27:b9:d8:0c:16:
         c3:4b:a1:8e:a0:dd:f8:99:a9:b4:09:c7:ea:39:bc:e6:79:82:
         dd:ac:01:21:44:64:0b:d6:d8:b4:3e:55:8a:c4:d0:99:e2:c7:
         44:cf:59:9e:8d:1d:1f:a4:db:cf:05:bb:8f:6e:a1:4b:3f:78:
         43:f1:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:44:49 2025 by rpki-client