This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
File:                     _6PlUUHBofny4ogR7X53-tN4pXk.mft (raw, json)
Hash identifier:          1L71DeBr1KTbIkZt2Da5Je8be7Imb0PpRQFuCXBrpnI=
Subject key identifier:   30:57:ED:27:AC:A5:55:8C:9D:19:60:F8:53:D5:C0:1D:37:9A:7B:86
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Certificate issuer:       /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial:       019AAEDF6F5D0E09BC889413C7D725152890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
Manifest number:          020E
Signing time:             Sun 23 Nov 2025 04:01:09 +0000
Manifest this update:     Sun 23 Nov 2025 04:01:09 +0000
Manifest next update:     Mon 24 Nov 2025 04:01:09 +0000
Files and hashes:         1: 18_cAqALLbeGjkZBydKs4yVEa04.roa (hash: 2j4zMvQfBeAmLY6Bhyc15ljZBNnJKvD1IRdd0wfaQ60=)
                          2: 2BvTXjgUGBdVazBl9R0rI8aVXH8.roa (hash: LwQNYNCiZ0elUuLsbCnZidi2QzQA6CyvxS0RU9ud07I=)
                          3: Bh3p9PN7bX04MpOdCZhqiYpBGpM.roa (hash: OEsd+BIuux/Amz7SUuNcWCDDcAkpS5Z2bjzH6KdhO94=)
                          4: CoAMK767WWVQcbHZJgxTqi_DwkU.roa (hash: 03G79qPRf1at5r20Sd2wR+cZRTeRJ0oZJvbwSSsO4wE=)
                          5: FPvHk-5xoAHc4H4YcVBwDRtBohY.roa (hash: 1eXklAxiTWfBmlit+CmMXJ1zXs3giUYtPRN9wO99uro=)
                          6: FYRqMOsLGDF-9umJGL6t02WTx4g.roa (hash: MVa/99y56C4rTycHwVQpzSBHqWGLA7VUZr0AcZBJQG4=)
                          7: ImZ71vkvK8QW6Gf8wBhmNCY82_Y.roa (hash: a22Yqft9nJnPT17qgkPlyZe+W7jNErrKGXQIN762r+I=)
                          8: JYJUNADtbNU2Yx7i0LBcobueyTE.roa (hash: 7c0QlTsEb8iwiFKiuK5La2S9GWIJ6N3/yOqTtQZH9hY=)
                          9: Jz85AN7DsUiRNmIqgF03io7PReI.roa (hash: O81WTEhtajm/bUP+G1F7OmyUOswqSuX+9lhe3hsR77A=)
                          10: LYmypTXYzd9CX9OfJ_i2Va1l0-M.roa (hash: Xl5PrqBjXRcuEs1Fp7qsAlc4OXwYnmd+u94NkAbsVD4=)
                          11: LwsXsShfNaTUMaTD3d8LweOhsbY.roa (hash: 6idSx9PZHrvFrf6f71TgyN5Nbwt47VoxtgQTjgThRm8=)
                          12: MdxXvYUX8k5RqO_aQOQ0V0PGoOg.roa (hash: UnoSA1dkwj84rNvlkzUjSUbEJYyWUrNEj7jpKVJfbrQ=)
                          13: OGzwu6qwYIdRS05vlX7kknNl9_s.roa (hash: olvSH9W8AC06J53K4BNV7UZl7w94avtzGF6giANPJdQ=)
                          14: PwVGcN7-AG25Z_EVB5mSMrRZw_U.roa (hash: n+BI0dcWDz0/rfHuwVL/W0fA3VHX5rbe3Re+nTfH5+g=)
                          15: R41rs6s-Tc1cDDxqdBI9fOM5Kl0.roa (hash: F2a3feWkqTKCmrLKvj4Yvt9DlfYEN9Xj78gy7DRuoA4=)
                          16: RN8dof_hFjV0jN3QEeZSwnJXwcU.roa (hash: Om0Hszq+aIYihfVdLjPYzSrThTKmHIulzzk/FchlcM0=)
                          17: SFjeqOASRO7UaTji1Zm6-RBu61g.roa (hash: Yx5TV1nxZdFx90sQHJN42KeWhaWZPKKBhbXLKBfzOb0=)
                          18: WqyCbDn3mH7Y8puLAdhhQtdufpc.roa (hash: J8A2x+0n1dpB8MrkkMN2gsBUUM1UPXbHfnJWBH/EHu0=)
                          19: X6xPCrsCRLv8UOVS5VxXAE6UASo.roa (hash: 5O8R+cyaD02PpvW0wsU6knZYGeeWEYH6jAmBJ7+mB2w=)
                          20: _6PlUUHBofny4ogR7X53-tN4pXk.crl (hash: BtgHbrBhPqbJuIGo/TLlAr+eTNgVrdHEfHqhtsM0Nkc=)
                          21: aDwNxvOxNZIF-20f3xmNIPjOCRk.roa (hash: o189CI4SpM4PLngzhztaOi0IDDAMJJ7NdbQ/3H4mWJs=)
                          22: c1QEBkwZJTZgFKUcbn3xIA8pdjo.roa (hash: 8kaxbWHuGnNv7ua7OOOvONsEfTPpavIlvOAV4+e3Mqw=)
                          23: dQb0F1u5mBPMG5LeEDlmBArl4_c.roa (hash: ch/l2lKRfk5F4Xdg3CcMMBUnCPuT7Z2xxq+N89Xyb4E=)
                          24: eipG1cFfCbtcmyeYg-afk6QQXCc.roa (hash: wzLWtbuK9fwc8okwovVPLb0fDJAOFKSCTS0vnEi6LYU=)
                          25: f97vb-YTeT_kKt4svgV-wYDtB8c.roa (hash: yuhAWcjK/cSLsxlmkkwjaaBBcc660qJFjk52ZE+FwvE=)
                          26: h7Nf1qSwsQyYMT9IVxfe4SUPYNQ.roa (hash: d/arS0MLZA1nCg+OWYh1wjNGYXmdM8BI33649IgkuIA=)
                          27: iILCLHyI0DMBB7xsRlgsIJuwTYg.roa (hash: tYGOsYLGRmqm/N/3bZJ/U+PnUaKH+8pajHWj/xnPci8=)
                          28: iN8iGmO4CUNsbBhQHu3VPVJZ8Os.roa (hash: Y3/Eyl4m4tujfRwZvVCkNud1HcodiucVo0kO5nOkMj0=)
                          29: ku41SyyQTNw1FC7ORt-eYxegkSQ.roa (hash: DiL2bTawOC4tigs2Wby8RstVWBoX7oIefg517dHHx1U=)
                          30: tW5_MsXD8Z4eNdzGvaYrrYbe0cU.roa (hash: WKSd60p8hM1W1T4D9foAZg6Eq4OfyzlxAtqhj0VcOJI=)
                          31: vMgf33TtuC0iGqOaF7lGCH4Ubkc.roa (hash: DL1hnWTy0OyJLTvwjIOafm6ak34UeE2oK+hX6iaqCwY=)
                          32: vW5WM4Rh3-cq9qiNtIEfCgDBOn8.roa (hash: mszi6X6Ep+NbkX7ZHi/7q8hVNjOIsmhoOAFigylmZQM=)
                          33: xeZFFxUTjeteUifcFQ6mdr_qQwI.roa (hash: L34O7i37taiDeG7Hrwja5e0wink9xi3XQdkjy3Bi8a0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Nov 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ae:df:6f:5d:0e:09:bc:88:94:13:c7:d7:25:15:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
        Validity
            Not Before: Nov 23 04:01:09 2025 GMT
            Not After : Nov 24 04:01:09 2025 GMT
        Subject: CN=3057ed27aca5558c9d1960f853d5c01d379a7b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:2a:f7:8b:37:91:8c:ca:a8:b8:8d:f4:6f:
                    ec:b5:d1:1c:9b:d8:dd:bf:79:92:77:c5:10:2c:9d:
                    d3:11:a0:02:01:5f:47:53:97:1b:71:22:d5:55:b6:
                    60:cb:af:b2:ac:6a:34:dc:69:ee:f0:94:8d:48:1f:
                    d9:18:f1:40:84:8e:9a:da:40:c5:d3:2a:36:b1:50:
                    d1:2b:bb:d1:65:5a:92:f8:21:75:2f:be:12:82:0f:
                    27:09:20:62:3e:5f:f5:de:f9:9c:55:58:68:50:1a:
                    8b:27:9a:59:d2:98:4b:cb:c9:e8:a1:7b:fd:f4:f0:
                    19:69:be:85:0a:db:0a:a5:2f:d3:da:d3:37:54:5d:
                    ca:74:d0:a6:eb:d0:8b:ad:ab:fa:d2:b8:f0:a4:d6:
                    b5:47:91:07:d1:4d:73:45:1f:99:3e:b0:be:f6:87:
                    24:de:32:c7:67:f0:2a:d1:6c:1a:07:fb:58:fd:a6:
                    d3:7a:0d:5a:de:d2:00:89:f7:d3:49:20:ae:f7:93:
                    a8:00:da:b4:46:47:47:d0:1e:58:53:a9:87:0d:dd:
                    a3:86:d6:01:d8:31:2a:f2:aa:ae:f8:23:80:fd:01:
                    76:e1:72:ff:c7:8b:95:b5:2f:7c:97:5f:11:ae:d6:
                    f4:0a:0f:7b:29:f7:6c:fd:3c:8a:bb:8c:3a:38:be:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:57:ED:27:AC:A5:55:8C:9D:19:60:F8:53:D5:C0:1D:37:9A:7B:86
            X509v3 Authority Key Identifier:
                keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:19:9d:91:1e:04:11:c3:1a:b0:20:41:01:05:43:f6:45:01:
         03:c0:35:75:91:f1:39:9b:33:69:50:36:49:54:70:10:41:d5:
         00:a0:a7:62:0f:4b:d6:63:a6:a7:45:d2:c0:bb:92:83:49:74:
         bc:34:11:58:a2:89:a5:14:da:6e:28:bd:6c:dc:71:bd:86:cf:
         bf:41:51:44:2d:43:f8:29:1e:68:c8:bb:70:3d:77:d0:73:14:
         42:67:18:bf:75:e5:d2:b6:c5:3f:5c:a0:a0:6a:5d:a1:8d:dd:
         c6:2b:a1:b4:5e:d1:c7:3d:55:82:18:be:e1:25:eb:fd:c4:a0:
         25:45:8b:d2:f0:7b:9e:28:9a:6b:8c:32:86:5e:d6:79:3d:2d:
         ad:3a:01:a6:81:50:42:20:7f:6e:06:94:56:fa:9d:a3:62:48:
         f4:a6:4d:69:69:3d:76:b9:b8:02:ae:ed:a4:b0:22:14:28:72:
         f5:f0:ff:34:84:8f:62:52:dd:44:46:a3:54:60:5c:db:5e:53:
         96:f7:52:44:83:b3:55:f0:13:7b:65:ae:b7:af:63:46:58:68:
         5c:26:81:b4:4b:89:3e:65:51:90:7f:3d:db:70:a1:2a:f2:09:
         e4:7d:48:ef:53:6e:30:96:78:3b:39:78:2b:f5:70:a0:8c:2a:
         9c:17:35:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 13:28:52 2025 by rpki-client