This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File:                     bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier:          +BnhnSbczqVOwhFXd/YgREhVQRuxvMG4lnYwhawA4Vk=
Subject key identifier:   FB:36:8A:0E:45:83:FD:7C:F0:74:D4:F0:6B:D9:2A:92:6D:48:FA:CE
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer:       /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial:       019B2552A42063D0B333EDEA3DC3D3233DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number:          0D84
Signing time:             Tue 16 Dec 2025 04:02:11 +0000
Manifest this update:     Tue 16 Dec 2025 04:02:11 +0000
Manifest next update:     Wed 17 Dec 2025 04:02:11 +0000
Files and hashes:         1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
                          2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: k2MzkP2wocSUT4MF+dLb2YU2sd8TMAlfdwzWHfLvS48=)
                          3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 04:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:25:52:a4:20:63:d0:b3:33:ed:ea:3d:c3:d3:23:3d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
        Validity
            Not Before: Dec 16 04:02:11 2025 GMT
            Not After : Dec 17 04:02:11 2025 GMT
        Subject: CN=fb368a0e4583fd7cf074d4f06bd92a926d48face
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:4f:95:d8:1a:82:de:0e:1b:50:7d:05:a0:
                    a5:40:0e:d2:bc:11:43:4f:3d:7d:97:ce:86:13:d1:
                    3d:f8:6c:e8:44:ce:3d:fb:04:29:49:38:29:14:19:
                    02:36:6c:4d:12:9e:93:17:19:2b:88:60:be:3b:35:
                    0e:73:09:1f:60:63:e7:0e:d8:86:6e:21:6d:92:20:
                    cf:e9:de:e1:e7:c6:dd:fb:d6:56:92:96:31:86:a5:
                    c5:4a:12:ad:4d:d7:75:f9:0f:74:29:2d:0d:e3:66:
                    8f:c8:a9:ba:63:1b:0f:fe:26:3d:54:d1:c1:ba:33:
                    8d:48:65:67:d7:6e:4a:4c:dc:fd:6a:93:8f:72:33:
                    da:cd:2a:ff:f5:dd:85:45:db:e3:12:c2:45:9b:62:
                    1a:29:99:7f:3a:59:16:55:3e:4f:d0:ac:44:50:07:
                    90:79:55:99:7e:c5:2a:20:2c:29:cb:ba:cb:94:61:
                    23:b0:39:50:90:bb:bc:80:1c:b5:7d:1f:49:e8:23:
                    fa:2c:fd:77:61:9e:6e:3e:74:78:aa:4e:34:0a:b0:
                    1e:36:0d:44:2c:a6:39:5f:8f:1e:ec:43:02:21:82:
                    d1:ab:49:2c:e5:d5:30:4f:a7:5b:ee:cb:70:86:2e:
                    17:14:fc:d7:56:07:c2:e9:74:a3:56:39:45:64:85:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:8A:0E:45:83:FD:7C:F0:74:D4:F0:6B:D9:2A:92:6D:48:FA:CE
            X509v3 Authority Key Identifier:
                keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:58:e7:67:02:78:ee:2c:dc:d3:0e:7b:17:fd:7e:a0:62:
         aa:1e:f8:cd:b1:6a:cb:5e:68:7d:84:f9:95:eb:d7:ac:e8:0f:
         c6:21:aa:6b:ef:bd:77:6c:1f:32:c5:c7:c5:51:e5:8c:ab:b5:
         a8:6c:97:4e:b6:f7:7f:83:20:1b:6b:fe:30:d0:87:ca:dc:a6:
         6a:44:d1:9a:58:ba:58:79:fe:3d:ea:7b:5c:f0:d6:41:9a:12:
         17:3f:80:c8:7d:02:24:fc:04:d2:0d:fc:dd:2a:35:5b:cd:45:
         e3:b8:81:e5:b5:58:94:47:92:fd:87:c0:14:5a:2f:44:70:9c:
         b9:b0:f9:63:a1:cc:f5:15:4b:6e:f6:ee:43:fd:f0:d2:51:f6:
         b8:e9:d8:5d:47:33:65:5c:b3:dd:43:6f:9d:8c:9e:e6:4d:6b:
         0b:ff:25:f3:41:ca:d9:50:31:b6:ed:d3:06:3f:68:11:68:35:
         15:63:80:09:20:32:91:95:06:6b:73:36:51:01:fb:8f:ca:9c:
         5d:69:fd:d6:f5:94:14:1a:58:79:bb:26:74:20:fd:f5:9d:95:
         ad:2c:c7:58:11:c8:89:39:3c:dd:d0:fb:9d:21:91:79:db:06:
         fc:5a:f7:9d:e7:05:41:2d:e9:b2:b9:dd:07:01:40:64:ff:5f:
         eb:ea:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:47:04 2025 by rpki-client