This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          VVuzi44NwuNBD8A6HCyagWVVBrBAnhpKiNMAlVT+VUI=
Subject key identifier:   57:4A:E8:9E:32:92:C8:4B:B7:FC:9C:15:69:57:A7:E3:B5:3F:F2:E4
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       019AF20983666F25133F48DA03F301FB6541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          0587
Signing time:             Sat 06 Dec 2025 05:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:40 +0000
Files and hashes:         1: 8uoobD-uNsoIUa3wePqJLnyhcpo.roa (hash: O0gO7wKip3iHzyPxgcMRO0gg6URqBUsF4wabpY8lFzs=)
                          2: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: dbNhSND7/lih0cm3y0/Cp66nDiBm6DPoR5SenWIu7yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:83:66:6f:25:13:3f:48:da:03:f3:01:fb:65:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Dec  6 05:01:40 2025 GMT
            Not After : Dec  7 05:01:40 2025 GMT
        Subject: CN=574ae89e3292c84bb7fc9c156957a7e3b53ff2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:64:67:a4:ca:ed:e7:4d:bf:24:e3:af:b6:
                    c2:c1:76:84:51:61:46:5b:41:ab:a0:ac:65:f6:a4:
                    48:eb:30:c2:45:88:65:db:94:07:b7:9f:8f:d5:89:
                    d4:8b:fc:e4:4c:17:84:ea:51:51:27:8c:4d:e5:75:
                    a8:9b:d9:76:0e:a3:fd:c5:80:f5:4d:0b:a1:65:0a:
                    14:1c:0e:57:b9:26:5c:00:a0:a3:ea:df:42:ad:8c:
                    bf:4a:22:e8:fb:0b:42:81:4d:7e:95:41:04:73:fd:
                    3e:0c:95:f8:dd:c3:12:c8:cb:d3:8c:4a:0e:10:eb:
                    28:45:72:57:e5:87:bb:44:58:ce:01:a0:e1:ac:cc:
                    4e:2f:30:48:46:eb:cf:c8:c3:5f:dd:d7:d3:12:25:
                    b6:fc:93:05:19:93:2f:50:52:19:6b:e0:b7:02:f1:
                    94:c5:3c:de:8f:3a:8b:6b:00:cd:be:34:fb:f2:08:
                    db:3b:5d:8e:2f:2f:71:34:45:b2:f0:34:c6:52:2b:
                    e0:ad:16:c0:00:24:e2:90:84:53:e5:79:e5:73:bb:
                    27:75:33:49:51:09:13:64:38:81:b0:71:1e:73:b1:
                    1b:cb:be:7d:e8:4e:98:1a:75:01:01:8a:72:49:b1:
                    20:2f:44:2f:2c:44:87:41:b4:50:7a:94:91:93:9f:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4A:E8:9E:32:92:C8:4B:B7:FC:9C:15:69:57:A7:E3:B5:3F:F2:E4
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:88:2b:69:08:be:1b:21:0f:4f:f7:5d:b1:54:04:9c:67:
         b5:55:02:c3:53:0a:2e:93:10:23:e1:45:56:d6:81:15:7d:b6:
         bf:7b:58:2f:80:08:b6:26:85:88:7c:c4:76:12:8f:a9:d9:1a:
         cd:92:0f:68:d4:2e:30:6e:2b:a3:4a:4e:52:d3:9d:4a:bd:f5:
         d3:17:3d:ef:8e:41:41:0f:cd:8a:7d:ff:c6:9e:90:50:04:50:
         e5:c1:bd:6c:ef:42:bd:e5:02:6d:ad:75:f3:22:f7:ca:c6:20:
         22:37:b7:17:59:28:03:08:e7:a5:aa:46:a1:b5:84:11:da:30:
         f7:ca:75:50:95:c3:23:43:96:73:24:6f:24:82:c0:94:c7:12:
         da:8a:af:1f:29:d4:ad:93:cf:27:c1:41:e4:05:58:a6:ee:22:
         8f:7e:e5:41:95:2a:9a:94:40:eb:d4:7b:8b:52:53:37:9f:56:
         84:a9:9f:e9:41:58:d4:5b:cf:99:5e:69:e1:a6:5a:d2:06:47:
         98:44:1d:8e:f8:d6:59:23:d8:b9:79:95:aa:64:5d:9c:eb:30:
         e2:60:bc:c3:c7:9e:ae:fb:5b:53:1e:c6:f3:ef:dc:3a:93:c9:
         6b:bc:6f:28:9c:db:77:4f:6b:15:ee:47:34:2c:d5:ef:99:5a:
         5b:3d:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:05 2025 by rpki-client