This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File:                     m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier:          cohS0I92RoP5C1z81s3ss1OnDyEhZmg5KrTDA0/wxQY=
Subject key identifier:   66:F4:B1:FD:EE:BE:F9:B5:C6:7C:84:34:16:FE:CB:17:9E:72:56:8C
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer:       /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial:       019B0E5C16432B2ADC38CA7C385BE3056CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number:          1773
Signing time:             Thu 11 Dec 2025 17:01:14 +0000
Manifest this update:     Thu 11 Dec 2025 17:01:14 +0000
Manifest next update:     Fri 12 Dec 2025 17:01:14 +0000
Files and hashes:         1: f7PbKdzww9eFqmnrI3piPy2autI.roa (hash: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=)
                          2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: tKgUtEWRVue0XCft9YfvQomcAYnDIukKSw68xm+FKko=)
                          3: xhmAfLkH5cXdTfyZ-bUPjRF4p2I.roa (hash: xl3A4+W1ikpeq98vDwW24/ZZ/cjGs93cM5HGe2yBy/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:5c:16:43:2b:2a:dc:38:ca:7c:38:5b:e3:05:6c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
        Validity
            Not Before: Dec 11 17:01:14 2025 GMT
            Not After : Dec 12 17:01:14 2025 GMT
        Subject: CN=66f4b1fdeebef9b5c67c843416fecb179e72568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:5c:8b:a3:f7:82:32:48:83:37:f3:db:11:
                    d7:7f:20:9d:39:64:6a:79:db:8b:24:ae:79:12:ff:
                    61:95:88:48:d1:ba:79:4e:48:45:ff:e6:15:12:2b:
                    e8:b5:61:22:94:44:84:61:9b:b6:6b:d2:2f:b1:ca:
                    f1:78:34:ea:86:db:72:f9:8b:0e:f8:22:14:69:2a:
                    9a:1a:fd:c4:e0:30:af:2b:11:89:47:5a:4c:b5:0f:
                    ee:28:92:db:48:18:80:63:47:cc:a5:2c:18:df:8d:
                    f2:56:7e:d6:b9:f7:3a:e0:12:8d:56:82:e6:bd:9c:
                    10:db:30:93:b5:69:fd:01:98:5d:61:d6:a1:23:d1:
                    8f:8d:7e:9f:e9:73:9a:54:e3:aa:4c:76:ba:78:39:
                    6c:c4:92:bf:63:62:25:1b:e5:c6:7e:c8:09:66:97:
                    bb:aa:8b:3f:6d:e8:ca:a8:76:40:e7:07:d3:e6:18:
                    74:66:99:85:57:a5:67:1e:4b:a1:6f:72:74:94:8d:
                    7f:b6:57:9b:30:4e:c2:55:8e:58:f1:c2:6c:46:ff:
                    03:2f:34:48:7a:48:e9:0b:ee:11:f9:0d:9e:36:e2:
                    3d:14:e6:be:d7:ec:1b:df:df:84:e0:bf:81:63:fc:
                    09:bd:34:79:61:3a:eb:04:7d:61:4b:6c:dd:8a:87:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:B1:FD:EE:BE:F9:B5:C6:7C:84:34:16:FE:CB:17:9E:72:56:8C
            X509v3 Authority Key Identifier:
                keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:2a:a6:78:3b:22:13:69:0a:c1:01:0d:a5:08:5e:43:90:
         52:84:c5:ed:07:32:1b:ab:39:eb:53:ee:0b:3e:69:3c:81:6c:
         5f:9e:a0:5c:22:94:fd:11:61:8d:cb:5d:25:d6:28:b5:d7:9d:
         ea:1b:5d:75:2e:bb:96:76:2f:70:f6:c1:bc:34:fd:8d:73:50:
         a7:49:53:09:32:93:d9:38:cf:ce:22:eb:eb:c9:8e:96:2d:8d:
         ea:ef:63:9b:2d:74:95:fb:57:77:91:dc:96:61:57:7e:cb:47:
         1d:8a:2c:cf:0e:d0:3a:d0:77:ba:96:d9:db:f8:9b:4d:d3:ec:
         ce:14:f5:87:6b:99:6b:60:ed:2b:a9:83:cd:09:65:b0:6d:90:
         1b:60:ee:20:71:d5:0a:34:c7:d7:ed:3f:60:28:75:ad:c2:a5:
         ed:5f:49:52:91:85:df:61:81:a9:22:38:80:8d:9b:55:2e:73:
         7f:a5:38:71:82:56:69:83:4b:89:db:1e:43:5e:ca:ee:1e:be:
         49:e4:1a:80:d6:4f:93:8c:84:55:b3:67:76:9c:6b:70:fe:18:
         0e:cf:8a:b8:5b:81:0e:d3:93:e2:d8:80:d7:0e:2e:dc:15:bf:
         af:7d:8b:24:d3:e8:35:db:b3:b5:0d:62:1e:a8:5a:68:23:ba:
         49:09:81:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOXBZDKyrcOMp8OFvjBWy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTkwZDY2ZDJkZGViNjQ2YTYxNDA2OTEyZmZkZGZhMTRl
Mzk5MTAwHhcNMjUxMjExMTcwMTE0WhcNMjUxMjEyMTcwMTE0WjAzMTEwLwYDVQQD
Eyg2NmY0YjFmZGVlYmVmOWI1YzY3Yzg0MzQxNmZlY2IxNzllNzI1NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlORci6P3gjJIgzfz2xHXfyCdOWRq
eduLJK55Ev9hlYhI0bp5TkhF/+YVEivotWEilESEYZu2a9IvscrxeDTqhtty+YsO
+CIUaSqaGv3E4DCvKxGJR1pMtQ/uKJLbSBiAY0fMpSwY343yVn7Wufc64BKNVoLm
vZwQ2zCTtWn9AZhdYdahI9GPjX6f6XOaVOOqTHa6eDlsxJK/Y2IlG+XGfsgJZpe7
qos/bejKqHZA5wfT5hh0ZpmFV6VnHkuhb3J0lI1/tlebME7CVY5Y8cJsRv8DLzRI
ekjpC+4R+Q2eNuI9FOa+1+wb39+E4L+BY/wJvTR5YTrrBH1hS2zdiofNrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb0sf3uvvm1xnyENBb+yxeeclaMMB8GA1UdIwQY
MBaAFJupDWbS3etkamFAaRL/3foU45kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAt
ODlmYjhmZTY5NjMzLzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAtODlmYjhmZTY5NjMz
LzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoIqpng7
IhNpCsEBDaUIXkOQUoTF7QcyG6s561PuCz5pPIFsX56gXCKU/RFhjctdJdYotded
6htddS67lnYvcPbBvDT9jXNQp0lTCTKT2TjPziLr68mOli2N6u9jmy10lftXd5Hc
lmFXfstHHYoszw7QOtB3upbZ2/ibTdPszhT1h2uZa2DtK6mDzQllsG2QG2DuIHHV
CjTH1+0/YCh1rcKl7V9JUpGF32GBqSI4gI2bVS5zf6U4cYJWaYNLidseQ17K7h6+
SeQagNZPk4yEVbNndpxrcP4YDs+KuFuBDtOT4tiA1w4u3BW/r32LJNPoNduztQ1i
HqhaaCO6SQmBzQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 02:23:33 2025 by rpki-client