This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          cUyOKYVC2Acz5ZHm9c92AfDpI1ry4UGpqKuRIrrIe9w=
Subject key identifier:   91:0E:74:18:C4:36:CF:26:55:0C:63:A5:8F:DA:DE:02:D2:0B:04:06
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019B0445B5A11377855F62C6F4090EF27D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          0F66
Signing time:             Tue 09 Dec 2025 18:00:35 +0000
Manifest this update:     Tue 09 Dec 2025 18:00:35 +0000
Manifest next update:     Wed 10 Dec 2025 18:00:35 +0000
Files and hashes:         1: FqQkTFQWdBdjU6UXWoqexyJXArk.roa (hash: dqroengNWVJpTvi6imMlKuB2r0Lvi7vllPawj21jEC4=)
                          2: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
                          3: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: eqrF2lx3dvjaOJ7BtNNEQ+SQr2axQhqYyxSCgS6BOLM=)
                          4: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 16:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:45:b5:a1:13:77:85:5f:62:c6:f4:09:0e:f2:7d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Dec  9 18:00:35 2025 GMT
            Not After : Dec 10 18:00:35 2025 GMT
        Subject: CN=910e7418c436cf26550c63a58fdade02d20b0406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:ff:8a:33:d5:ac:ff:1c:cc:3b:78:8b:a9:
                    f4:dc:24:ba:fd:01:e4:6d:f5:bc:29:c3:ad:87:4b:
                    00:b4:f2:cc:77:96:28:e2:49:bd:e2:05:1a:2d:d8:
                    cb:61:87:da:9a:8e:74:bd:10:15:80:87:ac:df:e0:
                    da:78:25:09:db:6b:3e:1c:f7:71:7d:88:48:cc:51:
                    2f:ff:57:90:4e:fb:2c:1b:5a:7d:7e:ba:a0:0a:d6:
                    f3:7c:27:6d:d5:19:44:7f:41:2c:88:71:55:de:dc:
                    55:91:64:60:c6:23:d9:a7:20:5c:79:bb:fa:7a:0d:
                    8e:98:fe:fa:24:9e:37:47:7e:59:f6:9e:6b:1d:dd:
                    68:58:99:8d:f0:cd:8b:0c:44:8b:e2:e8:c3:bc:bc:
                    b4:c5:af:ed:39:8d:fc:b7:55:c5:04:b4:4a:a7:85:
                    21:3a:a1:3a:ea:49:03:29:44:35:d7:56:a6:00:ee:
                    4f:46:d9:44:3c:ae:83:82:eb:c2:fc:93:b2:bf:94:
                    f4:be:24:d7:8e:01:b7:76:39:b6:71:9c:f3:0b:cb:
                    de:f3:84:dc:d9:d6:b0:e1:c7:6a:db:90:c5:9d:eb:
                    6f:6f:85:ac:2b:cb:42:41:8b:49:f7:1f:7a:75:af:
                    67:bb:f1:9c:a9:a3:9a:a0:40:21:e3:be:ab:7e:2b:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0E:74:18:C4:36:CF:26:55:0C:63:A5:8F:DA:DE:02:D2:0B:04:06
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:69:36:10:b4:9c:0b:15:29:14:11:63:51:f1:5e:f5:91:47:
         d8:92:ad:50:eb:f9:8a:01:52:b5:65:90:bd:7f:6e:19:38:6c:
         b6:64:92:db:0c:ba:26:7c:a2:8c:69:e4:d1:43:5e:6e:23:7d:
         a9:da:67:41:e9:9d:03:13:fa:18:5f:c5:92:7d:89:8f:32:6e:
         d7:a7:ea:b2:5c:2a:7c:b1:20:36:0c:11:50:75:c5:17:b0:20:
         1f:3c:eb:21:5b:9e:5f:6e:68:8e:7e:cc:92:04:90:1f:a6:40:
         80:65:e3:a7:c5:41:b6:4f:b6:c2:89:57:99:81:9a:4b:21:30:
         91:43:da:d0:5d:9c:3a:a3:f3:40:23:b3:34:87:11:e5:40:9a:
         f7:81:24:5b:86:66:49:1f:3e:b9:5a:97:b6:f3:5e:fe:f0:43:
         17:b2:42:a2:63:88:8e:ff:ac:32:51:03:5a:16:cb:63:7e:e4:
         de:5d:30:07:78:41:e4:67:3c:35:0c:90:d1:55:70:a7:ce:1c:
         4d:93:c5:e0:db:c2:99:98:8a:13:f2:56:3b:a4:92:09:3b:de:
         77:0c:96:2d:42:c6:59:ac:e7:28:e9:6c:fc:08:92:e4:fa:86:
         7b:99:26:52:99:d8:8b:40:b8:d3:9b:88:f5:e6:23:0f:7a:af:
         69:8d:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 21:12:59 2025 by rpki-client