This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File:                     LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier:          9YSaVbYv/4yv/B/B9uaUVdzW0Er1L0Zt3iVbBStxNwA=
Subject key identifier:   81:0A:0F:55:C5:A9:92:84:C4:8C:D3:B5:62:72:4B:47:72:F7:9B:50
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer:       /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial:       019AF2AD3B502E6E9468499B5A3B1C65CEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number:          0205
Signing time:             Sat 06 Dec 2025 08:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:30 +0000
Files and hashes:         1: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (hash: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=)
                          2: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: 6OxaZpjRWKRWjuXotTE7WZtl6tXF2nKtMtmLx3TZFlw=)
                          3: OMjXgufGu7qz8nFaTx0akX2s_bA.roa (hash: BFAAWnjI4vlasJk/UdPdP2Sw5YmLCiP6pm/D70iwFGw=)
                          4: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (hash: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=)
                          5: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (hash: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:3b:50:2e:6e:94:68:49:9b:5a:3b:1c:65:ce:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
        Validity
            Not Before: Dec  6 08:00:30 2025 GMT
            Not After : Dec  7 08:00:30 2025 GMT
        Subject: CN=810a0f55c5a99284c48cd3b562724b4772f79b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fc:7e:33:32:f0:05:89:1c:23:d7:ee:3d:33:
                    26:0e:2b:11:b3:92:dc:1f:cb:ae:38:45:a6:af:f9:
                    2d:fe:28:99:02:9c:ff:81:ae:28:55:33:3e:7e:f2:
                    4e:96:c7:b4:a9:7e:bc:28:72:22:0d:af:49:c6:34:
                    a1:a0:9f:de:f6:1c:4e:94:b0:67:5a:c9:ba:95:ae:
                    36:43:93:86:da:e8:dc:06:e9:11:33:75:e7:f7:44:
                    23:b4:a4:66:08:f4:8f:9c:d7:12:3c:02:d3:e6:9e:
                    c6:33:51:b9:db:ea:6e:ac:04:31:c4:91:9a:88:9b:
                    16:8d:7a:7c:ff:2e:81:10:e3:86:fe:e6:90:88:44:
                    f1:5c:2d:59:58:9a:18:24:37:b7:be:93:8e:d8:41:
                    b1:e7:64:13:5d:8f:6f:61:a6:06:3f:21:39:35:3a:
                    96:95:48:d5:cd:45:57:31:41:e8:0f:0f:27:a3:b3:
                    2e:50:96:9c:56:8e:c3:ea:ba:2e:1e:61:d4:48:45:
                    90:42:52:00:68:ec:08:d1:1f:05:1f:63:f9:a3:1e:
                    56:66:85:a4:d9:13:80:01:4a:08:3a:16:e5:d9:8b:
                    55:50:ac:a7:22:2f:38:15:0a:a6:a3:82:d0:90:f5:
                    ce:9a:58:11:d4:64:72:d9:57:18:25:87:87:01:20:
                    f0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:0F:55:C5:A9:92:84:C4:8C:D3:B5:62:72:4B:47:72:F7:9B:50
            X509v3 Authority Key Identifier:
                keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:ac:4e:c3:da:c4:a9:6f:ed:44:a2:50:c2:db:97:f5:37:
         3d:e8:cb:55:10:fe:86:eb:7f:56:ca:e3:46:6c:c7:f9:5f:97:
         60:f2:b8:c1:c9:97:25:b1:17:2f:c8:0b:2d:b0:eb:ab:33:92:
         42:4d:31:b8:a4:03:46:ff:05:56:2c:50:c3:b9:2e:41:99:c8:
         34:80:3b:fe:48:71:bc:7b:cb:5c:39:8e:24:8f:09:62:9e:a9:
         91:73:22:f4:87:1e:77:67:5e:0c:51:dc:55:5e:20:d0:80:97:
         49:17:dc:43:90:7a:66:fc:78:77:cb:a1:00:01:28:27:ce:22:
         20:e3:5e:32:ff:7d:3c:4e:87:89:a3:7f:6f:fd:66:c2:70:af:
         69:11:0b:6d:a8:a1:8c:24:4d:04:51:c1:1f:d6:7a:e4:c5:92:
         d9:a9:9d:55:3b:63:ac:4f:c7:93:d5:ad:f8:1a:07:a9:92:01:
         73:2e:cb:d1:fc:b3:f9:08:7e:5a:6e:cf:3e:7b:ec:cb:1f:39:
         8c:34:fa:9f:6f:1d:b8:9f:f6:74:cc:7c:43:b2:b3:0d:3f:94:
         47:8d:84:83:77:23:35:fa:6a:be:e0:ba:a6:b0:9f:b4:f1:ed:
         1d:0d:f2:e6:ea:10:e9:b4:c0:d8:b6:ca:ed:b1:16:37:ac:7f:
         84:d4:1e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrTtQLm6UaEmbWjscZc7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmNjMTM5MzIxOTUxZGIyNzZmM2ZmYTI5M2FjMGEwZjNm
YThiZjcwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD
Eyg4MTBhMGY1NWM1YTk5Mjg0YzQ4Y2QzYjU2MjcyNGI0NzcyZjc5YjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fx+MzLwBYkcI9fuPTMmDisRs5Lc
H8uuOEWmr/kt/iiZApz/ga4oVTM+fvJOlse0qX68KHIiDa9JxjShoJ/e9hxOlLBn
Wsm6la42Q5OG2ujcBukRM3Xn90QjtKRmCPSPnNcSPALT5p7GM1G52+purAQxxJGa
iJsWjXp8/y6BEOOG/uaQiETxXC1ZWJoYJDe3vpOO2EGx52QTXY9vYaYGPyE5NTqW
lUjVzUVXMUHoDw8no7MuUJacVo7D6rouHmHUSEWQQlIAaOwI0R8FH2P5ox5WZoWk
2ROAAUoIOhbl2YtVUKynIi84FQqmo4LQkPXOmlgR1GRy2VcYJYeHASDw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEKD1XFqZKExIzTtWJyS0dy95tQMB8GA1UdIwQY
MBaAFC0swTkyGVHbJ28/+ik6wKDz+ov3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWIt
MjE2NGQ5OTk1MTk4LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWItMjE2NGQ5OTk1MTk4
LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfKsTsPa
xKlv7USiUMLbl/U3PejLVRD+hut/VsrjRmzH+V+XYPK4wcmXJbEXL8gLLbDrqzOS
Qk0xuKQDRv8FVixQw7kuQZnINIA7/khxvHvLXDmOJI8JYp6pkXMi9Iced2deDFHc
VV4g0ICXSRfcQ5B6Zvx4d8uhAAEoJ84iIONeMv99PE6HiaN/b/1mwnCvaRELbaih
jCRNBFHBH9Z65MWS2amdVTtjrE/Hk9Wt+BoHqZIBcy7L0fyz+Qh+Wm7PPnvsyx85
jDT6n28duJ/2dMx8Q7KzDT+UR42Eg3cjNfpqvuC6prCftPHtHQ3y5uoQ6bTA2LbK
7bEWN6x/hNQe/w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:12:41 2025 by rpki-client