This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
File:                     6p03bVRB9Is91QhRWxb-lcWhF4I.mft (raw, json)
Hash identifier:          wF/qo8qhvGexvpBmNNiSFZUvKyoU4TZD2Mq5h9M8eCM=
Subject key identifier:   6F:40:97:21:49:E6:C6:FC:CB:98:7F:82:64:84:35:1E:7C:88:81:F8
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Certificate issuer:       /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial:       019B0E5B80C910C414317015BE31EB0B57A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
Manifest number:          1772
Signing time:             Thu 11 Dec 2025 17:00:36 +0000
Manifest this update:     Thu 11 Dec 2025 17:00:36 +0000
Manifest next update:     Fri 12 Dec 2025 17:00:36 +0000
Files and hashes:         1: 6p03bVRB9Is91QhRWxb-lcWhF4I.crl (hash: W6C4Z1Zkmx35mo91o/Q07qwE0UlHQDQ1FI97oPh0X60=)
                          2: 8pu1S9NA1of2GGVEvVp-RUa0FEo.roa (hash: 7Cy8rzfsYt/Ykbo4h6qYjlEEH8Huk90pnaOgN5uaM+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:5b:80:c9:10:c4:14:31:70:15:be:31:eb:0b:57:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
        Validity
            Not Before: Dec 11 17:00:36 2025 GMT
            Not After : Dec 12 17:00:36 2025 GMT
        Subject: CN=6f40972149e6c6fccb987f826484351e7c8881f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:a4:6c:e6:f9:ad:77:e5:ca:a7:84:14:63:
                    ab:d2:87:5a:f4:e0:4e:11:1d:17:f3:a5:4e:bc:69:
                    e1:6b:ea:94:95:6b:44:4e:c0:2a:43:05:b9:68:60:
                    39:9f:63:73:ab:d3:0a:a7:f7:46:7e:cb:1a:60:57:
                    96:2e:83:fc:24:73:85:10:18:25:91:3e:5b:f7:fc:
                    34:b3:b2:93:24:de:fc:b8:4c:bc:3f:4c:03:29:93:
                    84:e3:40:3c:ac:3f:b2:f7:a7:34:de:3a:6a:e3:a8:
                    e7:43:cf:e3:41:5c:65:80:fa:67:7c:2b:b3:78:32:
                    b3:dd:a4:93:ab:34:38:28:12:0f:38:b1:31:2d:69:
                    37:ec:2a:f7:5e:79:cb:3c:ce:3d:7a:cb:eb:a7:23:
                    39:52:05:4c:30:fc:f3:e2:93:c8:c9:a9:c6:34:44:
                    dc:42:49:15:42:7d:36:8e:b5:62:b4:81:38:cc:6b:
                    0a:24:7d:96:b4:69:8b:26:92:29:19:ed:ec:71:c1:
                    92:04:4e:ee:6c:07:d7:c4:45:a9:93:74:84:d4:eb:
                    05:dc:33:25:57:cd:ae:98:85:73:62:5a:23:4e:5f:
                    ba:b5:f6:51:e6:f6:03:67:64:52:44:b3:98:c4:93:
                    dd:24:86:5e:62:a1:f3:1c:1f:ff:6d:aa:db:83:0a:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:40:97:21:49:E6:C6:FC:CB:98:7F:82:64:84:35:1E:7C:88:81:F8
            X509v3 Authority Key Identifier:
                keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ce:36:89:03:21:40:1e:1a:1e:39:54:ec:88:a8:1c:87:2f:
         1a:03:e2:b4:ea:80:3a:4d:f0:92:88:dc:d0:b9:7d:13:c3:2b:
         5e:86:96:39:e4:26:2d:aa:6a:40:21:6f:27:c3:c6:65:d0:8b:
         1c:af:e8:f3:aa:e8:ea:a7:20:81:fb:4e:0b:4f:4d:4f:04:2f:
         de:bc:c8:b0:19:04:e1:0a:da:be:9a:f7:b8:e2:49:97:0c:80:
         64:ac:7c:19:60:8c:c7:41:26:23:ef:b0:65:4b:f2:11:77:47:
         82:55:71:cf:60:7b:42:33:4b:8d:e4:ce:1b:c6:a0:cf:9c:ec:
         94:6a:ca:4d:f0:ea:52:91:53:e0:86:b1:22:af:cd:74:0a:b8:
         bb:63:cc:2e:60:fb:99:5c:d1:59:58:6f:e2:ba:66:26:b2:e3:
         b1:25:40:4c:76:e5:0f:ab:91:6f:1c:97:0f:34:a0:87:aa:9f:
         04:ef:88:47:f5:b1:da:64:1f:cb:1a:db:08:95:66:05:c2:7d:
         84:a3:d3:0c:c8:ee:7d:66:07:4e:fc:8a:82:88:c7:b0:e3:54:
         35:ce:07:3d:f5:56:91:70:4f:21:5d:08:82:2c:50:d8:de:03:
         1d:55:e7:eb:68:02:fb:bd:e7:e9:d2:54:19:ae:f3:b9:9d:ed:
         20:58:c0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOW4DJEMQUMXAVvjHrC1ehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWQzNzZkNTQ0MWY0OGIzZGQ1MDg1MTViMTZmZTk1YzVh
MTE3ODIwHhcNMjUxMjExMTcwMDM2WhcNMjUxMjEyMTcwMDM2WjAzMTEwLwYDVQQD
Eyg2ZjQwOTcyMTQ5ZTZjNmZjY2I5ODdmODI2NDg0MzUxZTdjODg4MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ikbOb5rXflyqeEFGOr0oda9OBO
ER0X86VOvGnha+qUlWtETsAqQwW5aGA5n2Nzq9MKp/dGfssaYFeWLoP8JHOFEBgl
kT5b9/w0s7KTJN78uEy8P0wDKZOE40A8rD+y96c03jpq46jnQ8/jQVxlgPpnfCuz
eDKz3aSTqzQ4KBIPOLExLWk37Cr3XnnLPM49esvrpyM5UgVMMPzz4pPIyanGNETc
QkkVQn02jrVitIE4zGsKJH2WtGmLJpIpGe3sccGSBE7ubAfXxEWpk3SE1OsF3DMl
V82umIVzYlojTl+6tfZR5vYDZ2RSRLOYxJPdJIZeYqHzHB//barbgwoeUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9AlyFJ5sb8y5h/gmSENR58iIH4MB8GA1UdIwQY
MBaAFOqdN21UQfSLPdUIUVsW/pXFoReCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnAwM2JWUkI5SXM5MVFoUld4Yi1sY1doRjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85MmM4YTQtNGE5NS00ODZkLTk5OTMt
M2Y3YWE0NDZmN2E4LzEvNnAwM2JWUkI5SXM5MVFoUld4Yi1sY1doRjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85MmM4YTQtNGE5NS00ODZkLTk5OTMtM2Y3YWE0NDZmN2E4
LzEvNnAwM2JWUkI5SXM5MVFoUld4Yi1sY1doRjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu842iQMh
QB4aHjlU7IioHIcvGgPitOqAOk3wkojc0Ll9E8MrXoaWOeQmLapqQCFvJ8PGZdCL
HK/o86ro6qcggftOC09NTwQv3rzIsBkE4Qravpr3uOJJlwyAZKx8GWCMx0EmI++w
ZUvyEXdHglVxz2B7QjNLjeTOG8agz5zslGrKTfDqUpFT4IaxIq/NdAq4u2PMLmD7
mVzRWVhv4rpmJrLjsSVATHblD6uRbxyXDzSgh6qfBO+IR/Wx2mQfyxrbCJVmBcJ9
hKPTDMjufWYHTvyKgojHsONUNc4HPfVWkXBPIV0IgixQ2N4DHVXn62gC+73n6dJU
Ga7zuZ3tIFjA6A==
-----END CERTIFICATE-----
Generated at Thu Dec 11 22:53:37 2025 by rpki-client