This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File:                     s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier:          sdN1w3YuR1sqewZbrS8V1yQSp8Z3w3+ud880saXpR5w=
Subject key identifier:   06:F3:59:D9:B3:8D:5F:2C:D7:1C:63:13:C0:3F:AE:05:50:BE:BB:87
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer:       /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial:       019B2E54456245CD258D529CF21A99719C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number:          14EC
Signing time:             Wed 17 Dec 2025 22:00:33 +0000
Manifest this update:     Wed 17 Dec 2025 22:00:33 +0000
Manifest next update:     Thu 18 Dec 2025 22:00:33 +0000
Files and hashes:         1: UIgf9ajrQrDmAPpLPV90kRuj32I.roa (hash: AlX36a6BnwjhKrdVjNHSqwcRq3yixFLnOubI+UNJ9cQ=)
                          2: cBeaN8r92MWoqfdvhQH_ewA_rkk.roa (hash: yNYMjmHLoWXkkp0dQFYuWRyyRjSNzH1ulJxUwxp290s=)
                          3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: DArKT6lLyuZ+sLEtY1QD8HlGguRUoWvcymRZTgn7Hc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:54:45:62:45:cd:25:8d:52:9c:f2:1a:99:71:9c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
        Validity
            Not Before: Dec 17 22:00:33 2025 GMT
            Not After : Dec 18 22:00:33 2025 GMT
        Subject: CN=06f359d9b38d5f2cd71c6313c03fae0550bebb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:6d:c7:b8:1f:54:f0:55:f3:e2:85:91:aa:
                    a0:44:2a:55:3c:b7:98:e1:63:c4:6b:10:9d:40:f7:
                    8c:94:96:db:26:5d:e7:1c:89:88:b0:83:a9:a0:b8:
                    f4:23:7d:a8:19:bc:4a:f0:fb:6a:17:cd:e1:e5:97:
                    b8:1e:a5:f3:d0:92:15:33:90:20:c0:7f:aa:4a:99:
                    05:98:5f:f5:8b:89:23:41:b9:c4:86:8a:2f:dc:ba:
                    61:7e:1d:c9:8a:cf:62:df:e8:16:6e:f1:a3:c9:8e:
                    47:7f:16:a4:0f:dd:5e:d2:02:9d:1e:64:78:c6:d3:
                    73:19:07:c5:c7:b2:5e:8c:a4:d4:8c:4c:07:73:97:
                    ec:b7:5f:05:f3:0d:af:f2:45:ad:67:06:83:a4:a2:
                    2c:e3:f0:f1:1a:39:c7:96:ba:60:02:8a:ba:95:13:
                    1d:13:f8:9f:53:dc:66:18:21:d5:c2:52:78:81:6e:
                    89:3a:b8:59:e8:c6:bc:b4:44:f2:09:a4:e7:44:11:
                    95:8f:62:6e:d4:5c:06:02:fc:81:1b:0b:a8:89:83:
                    79:7b:0e:45:df:5e:f5:6b:14:d0:43:a1:df:5c:20:
                    f2:a1:67:e7:4e:d0:88:e9:f2:a0:5d:b0:03:6e:ae:
                    b6:d2:f9:df:30:37:d2:7f:5d:27:e8:b4:31:81:d1:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:59:D9:B3:8D:5F:2C:D7:1C:63:13:C0:3F:AE:05:50:BE:BB:87
            X509v3 Authority Key Identifier:
                keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:3d:8c:9a:7e:dd:eb:53:69:84:23:b3:8e:16:da:2c:26:
         df:09:19:e0:d3:bd:ed:c7:b9:c6:74:37:b5:41:77:0a:ec:fa:
         2b:e9:45:3f:3d:d6:58:f3:e4:94:ed:a5:77:72:e4:8d:f1:92:
         c7:cb:c7:e6:1b:e2:2f:a9:49:2c:b9:9e:b2:3f:75:09:17:13:
         89:5c:b0:6c:a7:ec:6d:05:61:c5:04:82:b8:a1:e6:f7:ba:a3:
         42:eb:b6:e8:a8:62:ac:e6:56:27:ce:8a:59:a3:97:9e:64:06:
         4b:85:af:4b:70:9a:a3:c4:39:72:f9:82:2e:76:cb:94:41:9f:
         bc:ad:44:fd:b9:6b:1c:ef:2f:e5:1a:78:3f:95:05:31:55:50:
         3a:17:d1:70:ed:03:6e:69:5d:4a:83:b5:d7:6f:87:40:e1:fc:
         b5:07:b4:c1:1c:31:6f:c0:94:a9:67:0e:a1:8a:b7:a1:4e:12:
         db:3a:7b:3e:30:74:34:be:bd:f2:53:36:ea:2a:34:9a:da:91:
         b7:38:31:6c:74:ff:78:e0:3a:76:29:21:e1:a4:f4:9c:c6:ab:
         fa:00:66:aa:14:f9:a7:9f:25:3f:45:5b:ba:66:f5:3a:6e:b1:
         f0:1a:b9:a4:ae:06:7b:f1:2c:b1:07:f3:91:d7:f9:84:4f:b6:
         5d:c7:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 23:44:26 2025 by rpki-client