This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          94pzp5CK0yabUQcXptRjpzsM7eEdBAjLcpnoC3IXgss=
Subject key identifier:   F8:BB:97:E0:37:E1:A8:AE:55:89:5D:90:D8:5E:DD:3D:86:AE:06:C3
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019B41372A54CB983C9F435068F5E3452FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          1798
Signing time:             Sun 21 Dec 2025 14:01:32 +0000
Manifest this update:     Sun 21 Dec 2025 14:01:32 +0000
Manifest next update:     Mon 22 Dec 2025 14:01:32 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 1faD4ZFBclwFzb0_TlcJqclRz3s.asa (hash: y6k6blyX9AW8efyFUzs0HB1pisBHAVkRvkrWnYMgslk=)
                          4: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          5: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          6: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          7: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: 4spW3czIBMZMqugjfDsaOu07eQ7bgIV+8f85xxp4xO0=)
                          8: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:41:37:2a:54:cb:98:3c:9f:43:50:68:f5:e3:45:2f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Dec 21 14:01:32 2025 GMT
            Not After : Dec 22 14:01:32 2025 GMT
        Subject: CN=f8bb97e037e1a8ae55895d90d85edd3d86ae06c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:70:20:40:f0:18:a2:10:63:70:5e:80:a5:
                    ff:8c:7c:d5:0a:b5:b4:39:e3:7a:fb:68:23:2e:78:
                    7b:f9:d0:e3:e8:bd:bb:18:22:cf:aa:68:10:58:e1:
                    e9:97:c2:1b:02:71:9a:e1:27:dc:e4:c1:53:40:2c:
                    f2:13:de:58:f6:f7:ad:22:97:a8:9b:4e:97:fc:c2:
                    4a:7e:be:15:0b:c1:5c:bb:d8:73:c7:b5:13:44:e1:
                    9e:a9:1e:32:1c:2c:78:f5:e0:7c:42:97:74:1e:55:
                    48:6e:f6:c2:eb:3f:82:79:d0:e3:09:cc:ee:7f:00:
                    62:dc:18:45:24:6f:53:e8:3a:7e:49:dd:de:31:b4:
                    e6:a3:aa:53:78:f5:d8:46:d7:08:88:b4:f1:a7:7e:
                    e4:7e:de:75:50:b9:26:da:64:25:11:aa:47:50:6e:
                    3e:67:23:0d:e2:8f:c1:ca:56:39:5a:ca:2c:91:86:
                    e7:ec:64:eb:d7:8c:3b:fd:21:51:a7:09:70:fd:8d:
                    47:b1:bc:f6:ea:71:70:3b:d6:38:7e:38:17:9a:eb:
                    f9:bb:bd:7e:f0:87:95:fb:cc:c0:de:bd:9b:e3:80:
                    17:15:8c:9a:9c:c9:22:29:a4:d8:2e:f6:8f:31:e9:
                    d7:4c:af:f6:df:cf:8b:18:6b:c5:3d:b1:5b:1c:a4:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BB:97:E0:37:E1:A8:AE:55:89:5D:90:D8:5E:DD:3D:86:AE:06:C3
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:82:4f:c3:f4:cd:2e:76:fa:bb:24:ba:74:d6:9a:bb:04:c3:
         13:97:f3:8b:88:44:f1:25:4e:b5:8b:fe:85:c5:b2:82:92:33:
         82:72:7b:f2:61:be:cd:cb:0b:94:28:9f:18:d1:39:bd:63:8c:
         b2:20:0b:a7:73:f6:de:33:48:26:52:26:0a:26:49:a0:34:c6:
         b4:e5:e5:82:a5:6a:4c:31:40:0c:68:c4:81:17:b4:e2:08:37:
         da:f5:c9:fe:b5:8d:c6:d1:da:bd:62:a3:e5:2f:7a:8b:a5:7f:
         40:26:2d:48:2d:1e:fe:fa:03:55:3d:a8:2e:4e:a8:bd:47:d0:
         9e:8e:fe:63:96:32:bf:17:0b:99:50:d3:14:0b:d1:52:da:73:
         6d:99:b1:c2:0a:db:f1:51:31:38:02:3f:56:34:0c:5a:eb:07:
         6b:a8:96:d7:5c:f8:24:b6:2a:d9:fd:fd:7f:2f:fc:23:ee:b9:
         49:40:14:48:bc:2d:ad:98:4a:fe:b7:33:73:67:1d:ed:4d:d1:
         7f:8d:8a:14:8b:63:e5:a4:43:57:2d:8e:2e:e9:f1:78:ab:8d:
         39:f5:4a:a3:e6:25:bb:fa:3b:20:89:d8:3a:48:b1:b7:08:ac:
         d1:19:38:e1:96:7e:4d:75:c1:11:fa:6a:3a:51:d1:25:a6:31:
         5a:4c:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:48:08 2025 by rpki-client