This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          s3ksMdY3etndXywuS43slXkoYZh8smscV8Mz3lK/W68=
Subject key identifier:   D0:96:2C:03:7F:A1:9C:CB:F3:F8:53:26:36:6A:DD:E7:7C:A5:40:9F
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019B34C4A9040F4D080783B270C686CDE2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          1710
Signing time:             Fri 19 Dec 2025 04:01:01 +0000
Manifest this update:     Fri 19 Dec 2025 04:01:01 +0000
Manifest next update:     Sat 20 Dec 2025 04:01:01 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: ZyA5wOFSYdqwr1QnVJNjqZ0FZPWQsWTN6pzdaom3jpY=)
                          2: 8MrJou4jHWMvbrgNdX-4pxWfc90.roa (hash: WNU23R3SY6kHyJmbcKZj6sAJrT/H2apTu6VsmiUGadk=)
                          3: I2TVT7DNE2G9XXNPIvC7ssj4vy0.roa (hash: 5m+YSBm5ZTcuXSiyQRLawLxfa0qfeuRlBCs8VexXa7Q=)
                          4: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (hash: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=)
                          5: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (hash: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=)
                          6: w4zzq3GKAiXTtkaxwc19NwVaitc.roa (hash: J/2FTFkZfxRTxJNhlHUgf8n7TYgo+AXQ4IVYmjTCUKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c4:a9:04:0f:4d:08:07:83:b2:70:c6:86:cd:e2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Dec 19 04:01:01 2025 GMT
            Not After : Dec 20 04:01:01 2025 GMT
        Subject: CN=d0962c037fa19ccbf3f85326366adde77ca5409f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:30:56:fb:04:ed:aa:6f:7e:54:79:e2:be:
                    af:a4:31:7a:1d:ae:df:17:70:5b:10:ee:33:0a:71:
                    1c:b3:b7:05:58:dd:a6:15:41:0b:56:5f:90:53:d4:
                    5e:8d:46:44:4d:f7:a2:8f:fa:03:64:d9:7a:bf:31:
                    43:53:5a:91:b8:9a:53:f8:50:20:c1:85:96:9f:2e:
                    bf:80:ce:0c:4b:7a:4a:a1:db:33:bd:16:6a:88:f3:
                    83:bf:7a:07:ef:44:d2:ae:5c:fb:9c:51:ca:d8:ac:
                    9c:44:a9:e0:8d:d7:0d:d7:af:bd:0f:11:df:5c:16:
                    32:a4:ba:cd:30:ea:ff:4a:09:1d:9e:29:00:4f:8e:
                    ea:7d:4d:51:a8:dc:96:aa:56:4b:cc:71:48:5d:ed:
                    c2:90:74:1a:60:7c:0e:04:d7:b1:6d:7c:78:7e:46:
                    09:68:4d:31:7f:81:a4:7f:57:98:11:19:74:6f:a4:
                    b2:26:54:1a:76:be:12:1a:5c:d9:f4:9b:b6:f8:7e:
                    cf:1d:c4:6b:92:df:c2:b6:ec:20:91:84:a0:a5:4a:
                    5c:66:20:e9:a7:ad:0b:7b:96:5d:02:4d:da:b2:f1:
                    7a:03:a4:f6:8d:1a:3b:4e:7c:1d:b7:85:53:a0:46:
                    d2:bb:13:ca:ee:db:2f:f4:02:e2:b1:35:3b:6d:9f:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:2C:03:7F:A1:9C:CB:F3:F8:53:26:36:6A:DD:E7:7C:A5:40:9F
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:88:cc:5e:41:58:e0:1d:52:20:49:8d:dd:b6:1e:06:29:
         a7:73:df:7d:0e:6e:f3:3c:b0:3d:a6:76:a5:96:56:a6:79:2d:
         a4:f0:f1:21:7a:58:6a:8e:90:a8:5a:ee:b7:db:f6:ba:34:3c:
         5a:32:d3:15:6e:7e:aa:94:07:8d:f8:3e:8a:a6:ca:40:ae:f9:
         19:6c:61:22:10:64:54:cf:03:a8:37:f3:5e:e7:fb:dc:c5:df:
         d7:d4:c5:18:8f:6a:f4:62:8b:4d:9e:18:fd:dd:8e:28:c8:2f:
         d5:8c:72:85:fd:a2:76:ef:9f:17:1a:37:41:c7:2c:6f:81:3a:
         2e:09:1e:b2:fe:39:da:ff:1a:2a:04:07:7d:84:21:ef:59:e6:
         17:86:93:7b:b9:34:8e:87:e1:4c:51:09:44:dc:20:6a:34:aa:
         74:03:1d:08:90:67:c0:c4:72:1e:75:53:91:3e:36:ae:1d:bd:
         e4:91:ef:47:b9:1d:f7:9f:11:2a:3a:e2:8a:bb:bd:79:fd:ed:
         ec:b4:4e:fb:bb:2c:72:f9:44:e7:f8:b0:3c:9a:08:cd:c3:c0:
         70:6f:ff:1e:56:f8:95:89:00:76:3c:2d:d2:a0:23:c1:08:2b:
         5e:28:4e:86:ed:6b:ad:cf:30:b4:1b:3e:ea:aa:ae:b1:56:b6:
         ca:be:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:02:20 2025 by rpki-client