This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          +Hin6iqk6Z2iBY1UQ9DeIIWQQSiyGKAGbXBDk4/8hdY=
Subject key identifier:   9F:70:E1:8C:74:1C:6A:AD:0B:88:C6:2F:B2:2F:E3:C3:B3:15:E0:18
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019B59768195BF7F922C1D74E04F2A30243F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0B7F
Signing time:             Fri 26 Dec 2025 07:01:37 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:37 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:37 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: qYjFbtmK64o+XJIyG1ZKfEMhYjkFapkzP5a/+8rpCi0=)
                          2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:81:95:bf:7f:92:2c:1d:74:e0:4f:2a:30:24:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Dec 26 07:01:37 2025 GMT
            Not After : Dec 27 07:01:37 2025 GMT
        Subject: CN=9f70e18c741c6aad0b88c62fb22fe3c3b315e018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:89:bb:9d:24:15:78:d3:f5:4a:2e:39:3e:
                    35:29:ad:e2:af:ae:10:d3:02:16:58:0a:fa:95:b4:
                    d3:39:07:de:b4:61:a0:4b:08:a4:f5:ee:ca:4f:8e:
                    70:43:c2:74:85:9a:b5:06:49:f1:39:f8:79:1f:e8:
                    b9:25:1c:e0:60:30:da:e0:66:e3:6f:8b:9f:b3:0d:
                    fa:a3:76:29:79:80:eb:e5:a0:fb:e2:f9:47:9b:b3:
                    55:94:6b:1b:c8:a2:42:4b:f5:32:ce:d6:48:0e:c5:
                    d2:0e:1b:6c:12:91:0d:5d:59:23:04:84:c0:b9:c3:
                    b0:e6:87:58:a0:ab:02:3f:1c:53:34:e6:95:ce:41:
                    02:70:ba:74:ec:53:46:6a:15:a7:85:d3:4a:99:6f:
                    b3:a5:b4:5e:f9:42:74:a1:32:04:78:45:88:2f:87:
                    70:b2:46:e9:97:e4:45:94:f2:32:4f:96:bd:8b:6c:
                    fe:c9:db:4a:af:49:20:1b:3c:de:4f:a9:52:f1:d2:
                    4f:70:72:bc:ac:aa:09:67:a5:b6:9d:8c:79:48:f9:
                    43:9c:8e:46:9f:00:0a:96:b8:56:ef:2a:21:e0:4a:
                    9d:da:6b:98:0e:36:1a:0e:92:ec:5f:ad:e3:dd:4e:
                    2d:50:9a:a8:cf:ca:1c:69:9d:ef:f3:1b:4a:7c:0f:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:70:E1:8C:74:1C:6A:AD:0B:88:C6:2F:B2:2F:E3:C3:B3:15:E0:18
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:6a:a8:09:da:f0:7f:f8:07:62:99:d5:d6:ea:fc:51:24:
         6d:c7:ec:66:fb:44:0c:50:e4:19:24:b2:33:17:e8:48:80:22:
         f4:ef:f1:ba:a2:15:9b:35:ba:f6:c0:82:d5:44:cb:59:b2:d1:
         d9:4a:f9:17:0c:24:2a:5f:cc:0d:af:e0:e5:9c:fb:54:4a:89:
         16:4b:54:e2:6f:c9:9f:1f:e3:0f:94:82:08:4b:0a:19:ab:3c:
         4d:50:ee:9c:00:ee:b1:2b:7b:09:c4:cb:ff:91:9c:df:b0:98:
         86:08:a2:b7:5a:a4:8e:ea:d5:62:09:29:b6:5b:53:a2:9e:c4:
         da:3b:f6:89:c0:f7:3b:5a:47:c9:79:0e:fa:40:a9:e6:a6:6a:
         06:c4:f2:32:37:c2:0e:07:12:c9:91:df:4c:96:b5:61:43:48:
         c9:26:2b:9e:98:8e:b6:63:de:d8:b2:32:b3:68:be:1e:18:3e:
         e9:8a:03:e4:1c:a2:c1:55:70:fb:19:5c:1f:d2:c3:93:2f:37:
         9e:72:da:d4:4d:12:3e:04:9f:06:73:9c:27:1b:f5:ca:33:bc:
         2b:32:d6:6c:a1:dd:5f:21:a6:8c:b7:9e:a9:9e:54:41:aa:bf:
         f4:10:96:ff:58:7d:16:c3:2e:d1:a2:83:32:60:a4:3f:4d:d2:
         a6:90:4c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtZdoGVv3+SLB104E8qMCQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmU5YWI0N2NhOTFmYTEzMjU2NTg2MGJjZGQ5YTEwN2Jh
MDMyZTQwHhcNMjUxMjI2MDcwMTM3WhcNMjUxMjI3MDcwMTM3WjAzMTEwLwYDVQQD
Eyg5ZjcwZTE4Yzc0MWM2YWFkMGI4OGM2MmZiMjJmZTNjM2IzMTVlMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouiJu50kFXjT9UouOT41Ka3ir64Q
0wIWWAr6lbTTOQfetGGgSwik9e7KT45wQ8J0hZq1BknxOfh5H+i5JRzgYDDa4Gbj
b4ufsw36o3YpeYDr5aD74vlHm7NVlGsbyKJCS/UyztZIDsXSDhtsEpENXVkjBITA
ucOw5odYoKsCPxxTNOaVzkECcLp07FNGahWnhdNKmW+zpbRe+UJ0oTIEeEWIL4dw
skbpl+RFlPIyT5a9i2z+ydtKr0kgGzzeT6lS8dJPcHK8rKoJZ6W2nYx5SPlDnI5G
nwAKlrhW7yoh4Eqd2muYDjYaDpLsX63j3U4tUJqoz8ocaZ3v8xtKfA+68wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9w4Yx0HGqtC4jGL7Iv48OzFeAYMB8GA1UdIwQY
MBaAFORumrR8qR+hMlZYYLzdmhB7oDLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUc2YXRIeXBINkV5VmxoZ3ZOMmFFSHVnTXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMTY4MDItZThmOS00Y2JjLTlkNjUt
YjkyNTJjZjJjYzQ3LzEvNUc2YXRIeXBINkV5VmxoZ3ZOMmFFSHVnTXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yMTY4MDItZThmOS00Y2JjLTlkNjUtYjkyNTJjZjJjYzQ3
LzEvNUc2YXRIeXBINkV5VmxoZ3ZOMmFFSHVnTXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErxqqAna
8H/4B2KZ1dbq/FEkbcfsZvtEDFDkGSSyMxfoSIAi9O/xuqIVmzW69sCC1UTLWbLR
2Ur5FwwkKl/MDa/g5Zz7VEqJFktU4m/Jnx/jD5SCCEsKGas8TVDunADusSt7CcTL
/5Gc37CYhgiit1qkjurVYgkptltTop7E2jv2icD3O1pHyXkO+kCp5qZqBsTyMjfC
DgcSyZHfTJa1YUNIySYrnpiOtmPe2LIys2i+Hhg+6YoD5ByiwVVw+xlcH9LDky83
nnLa1E0SPgSfBnOcJxv1yjO8KzLWbKHdXyGmjLeeqZ5UQaq/9BCW/1h9FsMu0aKD
MmCkP03SppBM6g==
-----END CERTIFICATE-----
Generated at Fri Dec 26 15:45:20 2025 by rpki-client