This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          MDnTaCjTEO7gM/bOEqjJjauEEoQoXnPgjghL54Zo2/c=
Subject key identifier:   A6:71:96:2A:B2:80:D6:37:47:2F:66:44:94:5E:4D:7D:94:DB:B0:49
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       019B2219894F6C3C709CF617A3E3D4BA6D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          177F
Signing time:             Mon 15 Dec 2025 13:00:57 +0000
Manifest this update:     Mon 15 Dec 2025 13:00:57 +0000
Manifest next update:     Tue 16 Dec 2025 13:00:57 +0000
Files and hashes:         1: McJBsphQoDhzeVnNZjQXJIWaZ6Y.roa (hash: yKUH9/jSgEvNGo/3nepkm1/S5OFTD0l9/lzqCHYZgCY=)
                          2: QbMtJCyeS1UwQoNdxpT73PMGteE.roa (hash: KMhN38u0GEau5JeuxrI2EEIJMxGmIw0+9n/GLuFP0so=)
                          3: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (hash: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=)
                          4: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: OP3eL2Z6ZUB5ducDfIh0YSiMy7b0KaEKLGMQppkEV04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:19:89:4f:6c:3c:70:9c:f6:17:a3:e3:d4:ba:6d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: Dec 15 13:00:57 2025 GMT
            Not After : Dec 16 13:00:57 2025 GMT
        Subject: CN=a671962ab280d637472f6644945e4d7d94dbb049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:96:10:2a:86:51:f9:8f:54:ec:4f:22:e9:7f:
                    d2:e0:52:1d:d6:42:29:8c:eb:d3:d4:f2:90:9e:c6:
                    a3:b1:35:42:2a:d0:1a:8f:87:9e:93:dd:0c:d0:7d:
                    a3:fb:48:6e:75:33:f4:f4:93:d6:f8:49:ed:a4:f1:
                    df:27:3f:00:d9:dd:3b:40:d4:ca:62:3c:7a:be:06:
                    c1:23:7e:1b:6d:ec:6b:e9:cb:9f:fd:c2:be:cc:70:
                    0a:6b:ed:a3:df:14:32:b6:ee:61:93:f9:0d:19:81:
                    73:1a:20:36:99:db:a4:ee:e6:43:c2:33:90:5b:bc:
                    b9:12:e8:a2:2f:85:13:66:b3:2d:ce:d8:72:2c:ce:
                    fe:65:58:8d:23:97:30:87:29:ad:46:d0:3a:2e:3c:
                    85:a5:f9:61:56:c5:6a:3f:2b:dc:05:63:8d:cf:e1:
                    a4:cd:c6:74:b7:58:f0:75:e0:71:0d:9f:3a:4c:d4:
                    a4:02:66:e9:27:37:0a:b0:2f:db:59:a9:04:37:69:
                    a2:0d:c0:0a:80:ef:a7:cc:b2:b5:57:ee:0f:0c:41:
                    e2:79:90:3e:4d:37:25:63:96:68:45:78:64:29:7c:
                    3c:a7:77:3e:d4:d4:75:44:ff:34:41:54:1f:a0:79:
                    8d:b1:aa:28:bc:92:d0:24:94:02:99:a4:29:16:fd:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:96:2A:B2:80:D6:37:47:2F:66:44:94:5E:4D:7D:94:DB:B0:49
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b1:12:6b:e6:19:60:11:83:db:b7:8d:46:f7:47:ce:20:9a:
         f5:2a:ef:04:39:88:3d:a3:be:73:59:47:5a:61:cf:6f:33:16:
         32:1d:f8:0b:98:54:38:19:b9:c6:38:a5:e0:75:d3:ce:0f:26:
         79:29:8b:54:39:c6:51:f0:83:a5:d2:9d:93:68:c3:78:1b:f2:
         0e:0b:8c:35:65:33:eb:9f:12:68:f3:af:70:fe:7e:55:d4:22:
         de:56:9e:ff:2c:ea:95:65:21:15:e0:1b:bc:1e:b9:c0:75:dc:
         85:f4:60:55:98:7a:77:a7:f2:e9:8f:ca:51:98:c4:1b:e0:68:
         8f:99:d9:16:0b:73:fa:b8:36:f7:12:5a:2f:8e:0d:ee:94:9f:
         42:fc:3b:85:a6:7a:01:12:85:e1:49:bd:c5:1d:7f:a4:e0:d3:
         87:a2:e3:7c:05:26:82:19:b0:23:ab:c2:12:d1:96:01:c9:ea:
         02:46:0b:40:b4:96:6a:c5:2f:cf:f0:3a:d3:a3:e5:84:06:26:
         d5:de:82:fc:35:07:43:6c:6c:5f:f4:b2:25:3c:93:6f:85:95:
         df:ac:dd:04:6d:4f:48:a6:11:4d:50:79:b7:2a:0c:da:da:75:
         d0:c4:39:c8:ce:d8:0a:bb:5d:f0:41:a3:29:7a:0d:45:3a:d5:
         4d:e3:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:01:46 2025 by rpki-client