This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
File:                     mT6BRnbzLyZHccetdnpN-H08Y-I.mft (raw, json)
Hash identifier:          e/N8XKQhZyHI3a46yEDsPZpdW05DAOjE1ik/2c/xXlw=
Subject key identifier:   BE:75:A0:4E:15:21:77:06:40:C6:EE:41:CF:3C:30:70:6A:D5:DE:8C
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Certificate issuer:       /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial:       019B2E1D77749F5737ECDF1E50E09EBD85C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
Manifest number:          11
Signing time:             Wed 17 Dec 2025 21:00:41 +0000
Manifest this update:     Wed 17 Dec 2025 21:00:41 +0000
Manifest next update:     Thu 18 Dec 2025 21:00:41 +0000
Files and hashes:         1: Ei-xeQIJ_CUuo9COS_FddR1cYpg.roa (hash: 0JD3XKJ3f1eW5d7eZqTtuTXgAEoVYtq+QEjuvwgC7t0=)
                          2: kw3KvvgPTUTV0V309H9CvDuEBIQ.roa (hash: 4ftZLUJ9xcgzwuUMgO3uFG9wTcVNdec0m6eUXJ7nQsI=)
                          3: mT6BRnbzLyZHccetdnpN-H08Y-I.crl (hash: aHYK6Qh3fNunILGFMgKkhNfF0q1pnFODuH2UpTYP0rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:1d:77:74:9f:57:37:ec:df:1e:50:e0:9e:bd:85:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
        Validity
            Not Before: Dec 17 21:00:41 2025 GMT
            Not After : Dec 18 21:00:41 2025 GMT
        Subject: CN=be75a04e1521770640c6ee41cf3c30706ad5de8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:7c:9e:b8:56:c3:f1:68:7a:05:23:52:bf:
                    43:8a:92:37:ec:6d:aa:4d:8a:b5:7b:5d:29:3e:e1:
                    20:bf:f0:ef:46:3a:ae:73:4f:ae:75:b2:00:71:df:
                    ae:ff:3d:6f:4f:10:9f:1e:b4:a2:60:ef:30:f4:6a:
                    25:33:78:35:a1:f8:36:f0:55:27:82:1b:5e:94:09:
                    90:52:0e:4e:77:97:f6:af:f3:58:2a:77:12:53:e7:
                    8c:e3:c7:0c:a3:a2:7e:54:19:f4:63:7c:79:61:be:
                    38:7d:aa:ca:69:e7:59:c8:27:47:a9:7a:67:22:d2:
                    4d:fd:57:35:bd:d4:38:6a:9f:5f:1e:90:19:de:4f:
                    28:78:f3:97:1c:07:30:35:aa:fd:1a:b7:cb:65:de:
                    35:d3:c1:4f:74:6d:9d:5e:c5:2a:bf:4e:bd:b1:48:
                    41:26:d4:20:6c:6c:91:7e:17:3f:86:e9:42:5c:87:
                    ae:6d:ca:31:43:56:14:31:05:64:88:f1:98:55:e0:
                    00:c5:74:58:8f:cb:07:ca:e2:f6:e7:14:27:a5:bb:
                    fe:a3:70:3b:65:91:af:30:02:64:98:c8:0e:7d:6e:
                    03:26:e6:e1:23:c8:b8:79:51:6e:a3:bc:3b:96:9d:
                    25:ff:af:ea:65:f3:04:aa:86:d9:1a:65:e8:53:ee:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:A0:4E:15:21:77:06:40:C6:EE:41:CF:3C:30:70:6A:D5:DE:8C
            X509v3 Authority Key Identifier:
                keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:37:51:c1:ca:24:eb:3d:cf:71:a4:54:69:62:ce:4c:3c:
         79:80:e3:e0:4a:c8:99:c3:3f:8b:d2:d8:a0:0e:35:ce:18:82:
         a0:34:e3:9a:b1:c3:6a:5d:84:09:b5:bb:77:5b:e6:f0:f3:5e:
         f0:4b:57:94:91:2c:98:7a:4f:0d:d9:58:20:b9:6f:c6:d5:f9:
         af:6d:cf:9d:6f:3d:cc:b9:88:fb:13:a5:b7:cb:45:58:b1:e6:
         af:fa:03:bf:a5:71:cd:64:c7:7c:8e:be:c7:a7:a4:88:d2:24:
         f8:d5:53:b1:bc:1a:31:18:d4:ad:2a:41:ae:4d:41:a7:f0:74:
         fe:62:03:14:23:07:bf:6b:2e:38:45:6f:99:2d:cd:59:14:b8:
         cb:e8:6b:5b:a5:70:95:7d:cb:86:27:de:77:ea:d0:8b:4c:0d:
         e6:8f:34:8c:ec:0d:4d:14:8f:70:5a:6e:23:a0:bf:50:b5:65:
         70:e6:d6:07:7b:7a:c3:16:23:dc:aa:90:0b:cd:3d:cf:93:5a:
         d6:b5:75:b8:f3:36:8d:86:cf:8c:c3:b5:29:f2:53:d2:ee:af:
         04:8e:13:fa:2f:17:ce:0d:88:59:cb:2e:f3:ad:36:85:76:cc:
         94:42:3a:15:d2:c0:6d:3d:d6:47:f2:83:5c:6c:82:e7:78:72:
         37:bd:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 23:04:22 2025 by rpki-client