This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File:                     bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier:          L8xOcQgbk6ki/06s6JHkWkbah/lIhIU5jAZ8lfeIlcg=
Subject key identifier:   73:5E:AB:0C:75:45:1D:88:92:6D:7A:86:20:F4:93:01:7E:B1:3C:C6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       019B3231D04B71647B388B49F19E9D0D5866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number:          12E9
Signing time:             Thu 18 Dec 2025 16:01:23 +0000
Manifest this update:     Thu 18 Dec 2025 16:01:23 +0000
Manifest next update:     Fri 19 Dec 2025 16:01:23 +0000
Files and hashes:         1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=)
                          2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=)
                          3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=)
                          4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=)
                          5: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=)
                          6: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=)
                          7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: nEJAiKrRtysxtJ2BCb60sXFkYs4L6qk275Wdlm0R/0w=)
                          8: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=)
                          9: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=)
                          10: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=)
                          11: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=)
                          12: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=)
                          13: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=)
                          14: xk24sUHQVb71yI2UfvmzcCtWHtc.roa (hash: NCeertpXSMYB22IQmK4V1zrtFAhIOGm4D7paLxR3ljI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:31:d0:4b:71:64:7b:38:8b:49:f1:9e:9d:0d:58:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Dec 18 16:01:23 2025 GMT
            Not After : Dec 19 16:01:23 2025 GMT
        Subject: CN=735eab0c75451d88926d7a8620f493017eb13cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:16:4b:6d:77:83:69:39:d2:20:e3:11:c2:
                    0d:01:c4:74:e7:c7:97:67:4c:dd:d6:b4:1c:e9:d1:
                    89:87:ef:ff:d8:7c:7b:4e:c7:69:5b:b3:6d:c5:46:
                    d5:c8:6c:75:de:ba:50:f0:6c:37:06:53:54:fc:28:
                    b3:fb:3d:e1:47:36:6f:c4:29:ed:0b:40:60:9e:ec:
                    00:42:39:94:e7:83:17:e7:f9:e0:54:bb:8e:d1:4b:
                    0c:22:34:97:9b:ba:62:79:61:4d:d0:90:1a:45:63:
                    25:93:ad:7f:87:2d:b9:03:91:1f:3d:20:4b:70:3a:
                    76:5f:c6:6a:f5:2f:fd:2a:c0:31:db:a8:a8:6c:51:
                    c1:3d:55:96:cf:d7:d0:4e:f2:67:91:1e:41:8f:2a:
                    ff:66:47:18:c0:c9:71:7a:93:ea:fa:69:2d:90:b2:
                    1b:0e:94:cf:cf:93:4b:0a:c1:8c:11:e8:84:1c:30:
                    a8:c3:b0:2d:94:74:0d:42:4b:f4:c1:6f:fc:8c:9e:
                    83:c8:03:29:49:25:ce:fc:12:d5:01:3c:9d:88:4a:
                    b7:00:d2:77:cc:f3:1c:4a:2d:37:08:50:21:cc:a1:
                    20:8f:ae:5f:4b:5f:7b:aa:a4:32:dc:45:58:ff:77:
                    6f:12:36:6f:9a:cf:98:1b:c6:5e:67:a0:92:41:ab:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:AB:0C:75:45:1D:88:92:6D:7A:86:20:F4:93:01:7E:B1:3C:C6
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:23:35:e3:ed:9e:78:02:ef:c1:4c:f4:df:7c:5b:a4:71:
         66:5a:e5:58:e1:b0:5a:f6:a7:41:84:96:1b:2c:b4:8f:7f:1c:
         7a:85:16:fa:e1:8d:c5:79:e8:ad:47:4c:9d:86:ac:0a:5f:34:
         5e:46:95:b0:f7:01:d7:e1:7e:c1:3f:84:c4:8a:02:41:7d:4d:
         e3:bf:38:27:85:5a:0a:e6:fc:d2:49:0b:f7:62:74:3f:32:c4:
         3c:7e:11:6f:81:72:91:16:55:54:6a:d4:9f:67:bc:d3:99:d9:
         68:8c:6b:24:8a:92:b6:a3:7e:bf:a4:c8:65:b0:34:ab:29:c3:
         21:6f:85:dd:9b:e5:10:54:4f:5d:d1:e1:39:c2:66:0d:cf:ed:
         a6:3f:dd:22:ec:94:4e:92:3f:28:31:0a:c0:1f:4f:78:37:4e:
         84:2a:eb:cc:30:c8:33:d6:8b:39:da:b5:83:96:90:ba:3a:85:
         23:e9:32:83:c3:e2:75:27:57:2c:c2:2b:ee:20:fd:01:0e:58:
         9b:f3:bd:40:ea:cb:d2:f3:5b:15:53:e5:f7:11:ef:0b:9f:70:
         37:61:4a:00:91:34:48:9b:74:65:40:f3:93:b0:30:95:8a:15:
         9b:9c:77:a1:05:0c:61:fc:68:4c:81:50:ff:21:70:57:4a:9a:
         6e:e5:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:36:51 2025 by rpki-client