This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          rM7ElOqx8F+k6haMQxbkxDxxW8VdwQNqN+5xBIfXqYw=
Subject key identifier:   C5:B6:43:78:67:B1:EC:6D:20:C1:A1:C6:E3:6C:B9:97:8E:FE:8F:70
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019AAC15459B54C2469E7DD3CBA13B7337E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          0831
Signing time:             Sat 22 Nov 2025 15:01:06 +0000
Manifest this update:     Sat 22 Nov 2025 15:01:06 +0000
Manifest next update:     Sun 23 Nov 2025 15:01:06 +0000
Files and hashes:         1: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: Sw0Z9CP3Tl1QlvOgszeqkTx0a2wclnhmYuMm5TdfTR4=)
                          2: DKwuyeTzcXlsjfEEUBHaEvjmjlY.roa (hash: xehl5t/wnL1MYEirEc3rgYVSjSjy0B0WsVEtPaCVdVQ=)
                          3: SQDJFyKznGtCKVmkEUnYaLhptpU.roa (hash: XEPlk5OXn/XLJYfgloRDlJ7X9N7ypjZHyh9xzsTH0Bw=)
                          4: WjYfnGn8JNGnSmX7_ykN8mRYE1Q.roa (hash: UrBT6jttsWOx1wSA3yMUtuOUpT7eYOhn9yPDk92V6lA=)
                          5: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (hash: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ac:15:45:9b:54:c2:46:9e:7d:d3:cb:a1:3b:73:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Nov 22 15:01:06 2025 GMT
            Not After : Nov 23 15:01:06 2025 GMT
        Subject: CN=c5b6437867b1ec6d20c1a1c6e36cb9978efe8f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:c2:d9:2c:2a:50:19:29:4c:7b:49:77:08:
                    ba:15:7e:6a:d7:de:f5:79:4c:43:b5:fc:97:38:03:
                    49:ad:e2:e2:cf:f1:7e:ba:ec:65:c0:58:6f:c3:b0:
                    85:84:73:c3:5a:66:7b:cc:2b:b2:19:d8:c1:1b:60:
                    62:06:55:4e:d6:82:4d:a9:c8:07:ae:6c:23:b0:0c:
                    a1:06:80:8a:49:0f:13:f9:cc:18:a0:2c:bf:f9:bc:
                    e5:5b:a6:ec:2b:10:42:a5:60:f2:ce:bb:ba:6f:3c:
                    4f:3e:d9:b4:cb:58:92:de:17:4f:b8:0c:f2:dd:29:
                    88:d4:54:72:c5:1b:3b:d8:d0:f5:04:2c:d3:7a:23:
                    30:4a:29:83:ec:47:5c:ea:4c:95:e2:ca:7b:62:fc:
                    1b:b7:0b:5f:ff:4f:97:bd:d9:62:6a:ff:e8:c7:e2:
                    5c:05:24:0b:ad:33:af:db:be:08:19:5b:45:e7:1c:
                    ba:33:1c:59:99:02:b7:24:06:46:62:cd:1d:29:3b:
                    64:44:6a:21:65:fd:50:51:30:07:fb:72:1f:1b:47:
                    69:cb:c6:46:65:8a:c3:7f:8d:ee:94:8a:53:7d:da:
                    08:f6:2d:63:94:12:04:71:2a:8a:2a:37:9e:53:3a:
                    1d:39:39:f7:58:36:41:a2:e6:0c:72:21:c5:27:a5:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:43:78:67:B1:EC:6D:20:C1:A1:C6:E3:6C:B9:97:8E:FE:8F:70
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:68:7f:5d:52:fd:45:c7:1a:a0:01:ce:20:9e:35:53:ae:
         b8:33:ba:05:24:ad:95:a5:46:c1:29:e0:c3:42:f6:c4:50:2e:
         09:78:8e:05:46:78:ba:a9:ab:df:4c:64:89:2f:fd:22:b9:a7:
         36:04:76:e1:9b:88:ad:a8:e7:5b:58:a7:ed:a5:79:1b:7e:eb:
         db:39:2d:67:b5:ee:10:70:fc:87:96:1e:ca:9f:d3:c1:2a:49:
         4a:4c:4e:53:f5:48:90:88:32:3a:d6:e1:06:d0:94:7c:65:e6:
         77:0c:82:e1:45:db:d1:e0:17:a8:72:86:57:29:c4:b7:2b:47:
         2e:30:e0:bc:16:7f:66:d7:5d:8a:1b:fc:0d:7f:14:d8:42:98:
         51:78:0f:65:82:8e:3f:84:09:9b:8d:94:22:79:69:71:1d:fe:
         46:27:35:eb:cf:90:7a:c8:16:eb:14:57:2d:ba:04:78:80:08:
         c4:68:09:17:ba:19:59:20:8f:05:a9:df:18:41:59:ac:1d:f4:
         1e:50:93:b1:b1:f6:7a:d7:b1:ed:4b:9b:c0:d3:5a:5e:28:6e:
         4a:bd:a9:8e:4b:fa:3d:79:0b:7f:8c:db:37:4a:36:91:08:e8:
         3d:15:da:7c:1e:89:98:2a:cd:da:e8:c2:96:58:20:ea:a3:a7:
         63:35:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:44:50 2025 by rpki-client