This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
File:                     amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft (raw, json)
Hash identifier:          cc6blwbhPwn1Ofu0nc9+lq3ykJjnbKpi5Y0tYWjaNAA=
Subject key identifier:   9B:96:29:3E:7E:E5:45:43:08:68:16:A8:E5:4B:6B:6F:1D:17:9F:48
Authority key identifier: 6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3
Certificate issuer:       /CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
Certificate serial:       019B311ED5B81446EC0BAF37F4C8B891F731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
Manifest number:          F5
Signing time:             Thu 18 Dec 2025 11:01:02 +0000
Manifest this update:     Thu 18 Dec 2025 11:01:02 +0000
Manifest next update:     Fri 19 Dec 2025 11:01:02 +0000
Files and hashes:         1: amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl (hash: 9vDMmq4bD28V2sE7crjwskcXdi2/pPqoBbYyV7AP310=)
                          2: qS9lbWxycbZu6RoyXldJwuJR6TM.roa (hash: qx382/Be7wHuXq5Yjg5wuqIZocz2BMbKerwk1urC5hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:1e:d5:b8:14:46:ec:0b:af:37:f4:c8:b8:91:f7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6a0c9f2778a887868b743a2b5ffa8c627e55f3
        Validity
            Not Before: Dec 18 11:01:02 2025 GMT
            Not After : Dec 19 11:01:02 2025 GMT
        Subject: CN=9b96293e7ee54543086816a8e54b6b6f1d179f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:fb:f6:5d:72:b1:dd:c6:c6:3e:98:cd:5d:
                    44:10:76:98:52:8c:b6:f1:00:4b:1c:0e:bf:e9:eb:
                    f6:e8:8d:29:60:47:cd:02:65:0b:08:35:ab:1c:26:
                    70:ff:27:48:20:1b:a6:e4:4d:82:cb:89:ff:0a:40:
                    2e:0d:95:46:08:6b:b8:7b:b9:1d:91:b4:b8:3d:ff:
                    21:27:66:9a:d1:52:f4:a9:7f:74:fa:7f:49:30:7f:
                    ed:ca:f3:c7:91:88:16:85:84:5b:15:64:8e:16:f3:
                    e1:b5:bc:78:84:90:69:eb:43:09:24:1d:26:e2:66:
                    fb:70:a2:90:55:5e:b6:1f:eb:f2:ae:d3:04:dc:6a:
                    b9:f7:2c:19:f0:c7:16:b6:d0:b1:28:1f:12:a7:f9:
                    03:e8:48:cf:b8:de:3d:3d:dd:5a:c0:a0:d3:c9:95:
                    90:b4:82:07:3d:df:78:45:19:03:f8:be:eb:f7:75:
                    a1:8b:02:4f:3e:72:f1:99:44:ac:d1:c0:98:5f:b7:
                    d1:ba:29:3e:b6:22:52:64:e7:8d:0b:39:0a:71:43:
                    3e:21:94:2e:9d:3b:9d:68:f7:49:0a:01:6e:3b:6e:
                    7c:c2:29:84:06:07:5d:eb:52:80:71:48:b6:7f:b2:
                    b6:72:47:d3:4d:b5:ed:2b:be:d3:1f:bc:5a:07:72:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:29:3E:7E:E5:45:43:08:68:16:A8:E5:4B:6B:6F:1D:17:9F:48
            X509v3 Authority Key Identifier:
                keyid:6A:6A:0C:9F:27:78:A8:87:86:8B:74:3A:2B:5F:FA:8C:62:7E:55:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/980f77-7d75-4fc3-b45e-112a48570f40/1/amoMnyd4qIeGi3Q6K1_6jGJ-VfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:29:5e:6a:e3:af:55:72:32:3d:69:f0:14:e2:2c:ba:a2:
         49:60:fd:82:8a:5b:4b:3d:7f:95:fc:87:01:4a:6b:b1:70:6e:
         17:35:2c:e6:6f:de:c4:10:45:f6:11:14:98:fd:5a:8a:94:b7:
         f9:6c:f0:7a:32:53:ac:f6:fb:8e:37:81:ac:1f:6a:dd:04:51:
         b5:81:75:91:56:b8:23:a5:7c:a6:9f:1b:0d:6a:b6:e4:af:d0:
         e1:8b:a1:e8:18:1d:54:eb:69:58:fe:7e:26:9c:d4:cf:25:ff:
         a7:eb:1f:1f:12:ec:7d:f6:98:18:21:10:44:48:a5:19:1f:3d:
         77:92:7f:81:4d:c3:fc:bb:60:f7:a0:c6:8f:0f:50:fc:7d:7b:
         d3:78:dd:c9:68:2c:5a:2d:a0:e7:e8:5a:39:c9:12:d9:0b:89:
         29:89:c8:8d:3c:98:48:4a:4d:cd:af:ea:03:43:73:f1:55:ed:
         77:46:d2:94:a1:bb:57:3f:ca:a2:4d:c1:67:5b:48:22:9c:53:
         44:b2:ce:f0:d1:99:3f:e9:ae:9e:c4:3d:ac:2e:24:c9:96:76:
         36:4a:c2:ee:a3:04:f1:07:d1:e1:1b:ab:9f:2d:c6:04:d7:87:
         3d:2c:bb:b1:e6:7f:9f:e7:e2:84:7d:12:3f:fb:fb:cd:31:c9:
         b2:15:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 12:46:35 2025 by rpki-client