This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          +U9916XcbgvRQoML7JkJeump8yNPxkEWLgWj6fNRNXY=
Subject key identifier:   58:6C:CA:6F:77:23:63:05:5C:7B:28:7A:77:F4:8B:76:A9:D8:CC:2B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       019AF6F9008930621B01DECE1BC685074289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          0ABD
Signing time:             Sun 07 Dec 2025 04:01:44 +0000
Manifest this update:     Sun 07 Dec 2025 04:01:44 +0000
Manifest next update:     Mon 08 Dec 2025 04:01:44 +0000
Files and hashes:         1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=)
                          2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=)
                          3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=)
                          4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=)
                          5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=)
                          6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=)
                          7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=)
                          8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=)
                          9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=)
                          10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=)
                          11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=)
                          12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: DGJ3/Vf69DpwD403FQ8CN8nBySL67Arfo1csnwB1LUA=)
                          13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=)
                          14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=)
                          15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=)
                          16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=)
                          17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=)
                          18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=)
                          19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=)
                          20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=)
                          21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:f9:00:89:30:62:1b:01:de:ce:1b:c6:85:07:42:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Dec  7 04:01:44 2025 GMT
            Not After : Dec  8 04:01:44 2025 GMT
        Subject: CN=586cca6f772363055c7b287a77f48b76a9d8cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:14:3c:85:4a:8d:27:12:74:6b:9e:a8:09:
                    63:ae:72:82:e3:be:0a:98:3f:03:3e:99:10:38:6f:
                    37:88:2f:c4:f6:a2:7c:e8:c7:b9:94:76:8d:17:4d:
                    e2:c9:d0:0f:13:00:d3:da:bf:15:72:8a:38:35:fd:
                    bb:54:bd:e9:7b:f5:90:b2:1a:cb:41:18:a0:d7:c7:
                    fa:fc:1c:05:09:92:c6:89:fb:3d:b2:de:fb:1b:1b:
                    9a:de:b2:cd:ad:86:ed:5c:41:a2:22:bb:6e:4a:3f:
                    ba:bd:4b:6a:4e:a0:94:00:46:cd:7b:27:68:d7:c2:
                    ba:bd:a7:70:36:74:a3:1d:c8:47:6d:6e:46:c8:e8:
                    1f:cf:ce:3d:29:f0:18:8a:95:0e:62:c3:15:37:93:
                    d7:ba:24:a1:51:73:44:14:62:4a:ab:ce:87:9e:75:
                    4c:49:d5:5f:c3:05:04:70:5a:25:c5:1d:0a:96:62:
                    57:3f:6c:65:b7:4f:a6:d2:3a:5c:e4:1a:3a:55:4d:
                    e0:1d:a1:79:26:4f:f7:27:25:b3:00:01:9c:45:ab:
                    32:e7:16:a0:e0:02:d8:6a:d9:79:28:54:1c:46:4e:
                    a7:5b:d8:62:13:85:19:96:11:c9:2d:78:31:fc:01:
                    cf:94:8c:01:55:24:d6:61:8e:f4:b6:99:5c:a1:cc:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:CA:6F:77:23:63:05:5C:7B:28:7A:77:F4:8B:76:A9:D8:CC:2B
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:9d:68:2b:e6:73:d2:ad:6b:60:7e:0d:3b:6e:1c:93:8d:
         b8:15:d8:44:f0:95:b0:03:8d:9e:26:f6:64:f8:2f:fc:47:50:
         b4:7c:50:a9:d5:a2:9b:1e:06:9e:a5:34:75:7f:5d:4c:f3:44:
         40:ac:9d:14:09:c4:f7:1a:12:95:2d:68:e4:b5:4a:2f:0e:ee:
         03:07:c6:44:0e:e1:81:54:87:13:0e:cd:6f:d2:80:b5:32:4e:
         c1:ac:48:1a:20:88:e5:9b:bc:c6:29:b4:50:50:2b:ca:7e:ef:
         7b:c5:9e:8a:55:78:68:c7:37:73:c2:5c:27:dd:39:ea:d6:82:
         f4:46:1e:92:18:4c:f3:e5:8b:9f:c3:a0:db:69:40:70:08:84:
         bd:23:4b:bf:a8:18:0a:cf:8d:ec:2b:6f:69:35:d2:d4:65:f0:
         13:59:1e:2b:ec:5a:8b:37:f7:bb:2b:3c:c1:fd:55:98:4e:3b:
         d1:09:68:4c:b4:50:d4:70:45:ae:49:3d:6d:d4:69:02:b1:7d:
         4a:7f:37:72:b9:e2:29:c8:4e:48:fa:49:1c:1a:40:c8:7a:4d:
         28:a9:b4:8e:a8:d5:ef:49:bc:4b:7e:f3:4d:24:80:82:7a:8d:
         c7:30:52:53:fe:ab:6c:5d:39:47:cb:83:7e:72:32:7e:2f:b8:
         0d:61:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:52:29 2025 by rpki-client