This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
File:                     t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft (raw, json)
Hash identifier:          zM/+2KN3F4+cZqXqvaJZ/AvcqxI1tUhY3erPrMchYn0=
Subject key identifier:   BA:76:82:8E:AB:52:0C:48:23:01:A9:22:89:BC:C2:28:55:99:D1:C3
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Certificate issuer:       /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial:       019B07B4E812264EAC914C8397991E8B65DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
Manifest number:          1570
Signing time:             Wed 10 Dec 2025 10:00:54 +0000
Manifest this update:     Wed 10 Dec 2025 10:00:54 +0000
Manifest next update:     Thu 11 Dec 2025 10:00:54 +0000
Files and hashes:         1: NsZjsu2WDCD4J07ujcjp4ji-VOU.roa (hash: VU4MSu0eDWsfOu4NUIfDAf48zntyybA1JsYveD+Po8w=)
                          2: gwXTY0LJ22_8yhfOOeJP7JMePkA.roa (hash: C8Ad/tS32eCjtx+fJLVbrf6IcLPHhfeHNWH2HlHojI4=)
                          3: t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl (hash: NoeOmrk2BaX8dgdST34x+XasNdlYeoVS05GhjtrUFzw=)
                          4: tYoEMyoFgANiNY7nw4zfzPaPtkI.roa (hash: PX+Kyq98vaXV0wz8tTuZQEWdK7K2Hq3OD8ndatlexb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:b4:e8:12:26:4e:ac:91:4c:83:97:99:1e:8b:65:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
        Validity
            Not Before: Dec 10 10:00:54 2025 GMT
            Not After : Dec 11 10:00:54 2025 GMT
        Subject: CN=ba76828eab520c482301a92289bcc2285599d1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:d4:07:85:3c:63:d3:aa:7a:44:02:1d:99:
                    d6:58:00:c4:2d:f1:dc:ab:61:86:df:0a:d3:c6:08:
                    11:d0:94:8c:53:e6:3f:2d:09:7e:22:15:fa:af:d2:
                    1e:30:23:8a:6a:72:9c:de:c1:b3:fa:18:7c:4c:e5:
                    22:b6:37:94:1d:89:06:8f:c6:fa:0c:16:bc:d7:b6:
                    a5:54:7d:ee:2d:35:1f:24:c0:17:ba:91:e9:b9:2a:
                    cf:1d:09:b7:4c:d3:1f:c1:ae:c5:45:64:3f:21:fc:
                    89:53:54:50:67:91:15:1d:ff:07:99:46:b5:f4:1c:
                    70:d6:13:7c:7c:44:a3:8c:91:e3:6f:cc:06:72:15:
                    c3:9a:38:7b:2d:c0:25:47:d7:d2:f9:06:72:ab:6b:
                    30:1e:37:bc:77:d2:a7:74:b4:39:74:58:a4:12:8d:
                    12:6a:28:23:42:8c:c9:a0:bf:b5:25:03:1b:00:3a:
                    df:27:20:7e:9d:c4:1f:0b:28:0e:44:38:32:1f:7d:
                    f2:08:32:27:54:0d:25:60:09:2a:25:e7:a1:39:49:
                    fe:e1:b1:3f:b0:12:56:76:3d:29:97:e1:0d:cf:64:
                    b1:b6:0f:dd:0c:8d:8c:2b:38:e0:1a:63:ae:6a:41:
                    f2:80:5f:84:96:fd:63:a8:a4:7a:cb:e3:08:9d:97:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:76:82:8E:AB:52:0C:48:23:01:A9:22:89:BC:C2:28:55:99:D1:C3
            X509v3 Authority Key Identifier:
                keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:c7:23:67:83:45:51:37:4a:c9:e2:d9:6c:b4:c1:22:43:
         ce:fa:a8:bf:4f:02:a0:a2:ad:9b:0c:b7:3f:bb:bb:f4:a8:70:
         e5:79:a9:94:42:50:04:1c:d8:f2:1d:b6:23:d5:8e:c1:5d:99:
         08:cd:90:7a:39:71:60:f8:00:78:95:3c:87:e1:fd:2b:6f:78:
         9b:c0:9a:8f:b4:78:d8:e7:84:1b:53:50:ac:9b:5d:c2:26:b6:
         9a:b8:84:48:73:96:a4:c8:ba:0e:da:7b:36:26:be:16:e4:d4:
         7f:a6:24:8e:3c:48:6e:9d:e0:66:25:e8:45:11:97:ce:9d:0c:
         47:dd:db:d4:23:08:b1:37:bc:bb:d9:d2:4c:c9:5a:05:7d:50:
         67:7d:a6:b4:18:04:c4:bb:2b:4f:cc:81:c2:ed:07:42:f3:12:
         0a:3e:df:eb:45:83:a8:29:d3:5d:29:17:ad:7a:4c:05:2e:2b:
         0d:73:93:29:09:4f:99:32:5e:72:c0:7f:95:d9:97:bf:04:08:
         fb:8b:73:4b:07:eb:64:7b:a2:7c:70:44:37:af:d5:ae:57:15:
         96:aa:6f:44:6b:35:ea:06:65:da:1b:8e:f1:08:f0:8b:4b:5a:
         93:35:56:3b:f8:03:04:0b:18:04:fe:80:08:ee:44:9f:09:80:
         30:92:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:52:34 2025 by rpki-client