This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier:          GJDXF9eCUJ38Yt4lsuYxln49yBgmPAPJ5Z1OouBPuLI=
Subject key identifier:   F4:C9:A6:0B:96:7C:B0:51:54:44:BD:94:56:15:3B:CA:C5:79:5E:3D
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer:       /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial:       019B1E73A095315FFE0A90FF7F0B7AEF83FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number:          101E
Signing time:             Sun 14 Dec 2025 20:00:52 +0000
Manifest this update:     Sun 14 Dec 2025 20:00:52 +0000
Manifest next update:     Mon 15 Dec 2025 20:00:52 +0000
Files and hashes:         1: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: O2FeeVi/IAUhG0LCcaeIk/21NVZFi80WYjjrKkCVuSY=)
                          2: tZnHKvR--oQspHXiMTb_7j-JYds.roa (hash: /ZQxh+STzzVQTIGd7v/o5S5T+TwpT7pJx116SvjP5MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1e:73:a0:95:31:5f:fe:0a:90:ff:7f:0b:7a:ef:83:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Validity
            Not Before: Dec 14 20:00:52 2025 GMT
            Not After : Dec 15 20:00:52 2025 GMT
        Subject: CN=f4c9a60b967cb0515444bd9456153bcac5795e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:ac:27:f7:26:68:fe:47:fa:4c:8f:4b:f7:
                    bc:3e:10:a3:b6:e1:1e:eb:94:b4:84:1e:71:71:95:
                    f5:e6:8a:96:ab:35:b8:f8:6a:bb:b7:c8:25:78:0d:
                    03:b1:d2:e4:6c:6a:c4:06:e9:7c:fb:8a:3a:b9:1a:
                    6c:ec:2b:f9:9b:12:b1:06:63:23:be:52:1d:86:36:
                    46:aa:0b:a5:9a:b8:d9:47:6c:28:08:09:fd:1f:84:
                    1d:b5:b6:c1:b0:66:00:1f:09:07:96:78:8b:32:0b:
                    57:14:34:28:90:86:9b:71:3f:ed:e2:8e:a7:65:96:
                    84:ae:c6:ed:e9:80:34:21:ac:19:63:7a:21:0c:4d:
                    39:7a:a0:47:3d:fe:f9:a4:5e:b8:1b:4a:b5:d0:15:
                    f6:60:fc:7a:4b:a6:7b:c2:ef:06:69:0c:97:f2:2d:
                    58:59:b5:ff:4a:56:4a:24:e0:a8:15:e2:e8:85:f8:
                    1b:db:41:b4:cd:b2:4f:79:d3:b7:ec:2f:8e:21:e8:
                    36:31:84:e5:79:27:40:af:27:9a:bf:7c:e3:94:ef:
                    d7:66:7a:22:83:4e:c4:69:d7:5b:91:c7:95:1f:f7:
                    cf:3a:a2:df:61:a3:00:70:b6:be:fd:78:e5:94:9c:
                    b9:c1:96:05:f0:b5:78:fd:99:d4:3f:f9:1f:34:da:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:A6:0B:96:7C:B0:51:54:44:BD:94:56:15:3B:CA:C5:79:5E:3D
            X509v3 Authority Key Identifier:
                keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f0:69:d9:53:16:31:f1:64:9f:94:9c:24:cf:b9:0c:69:d2:
         42:6c:59:ca:9d:7c:57:58:27:8a:69:00:89:1d:7c:04:e0:81:
         a0:b9:d9:a7:a6:fd:c2:75:16:03:bf:cd:98:98:31:7b:25:83:
         b7:5c:a8:45:23:87:00:8b:e5:31:cd:92:c7:58:78:86:4d:c1:
         c6:94:26:bc:48:2e:82:07:07:3f:ad:a1:d6:ac:31:31:12:92:
         38:c0:f4:d3:7d:1a:c0:63:26:40:d6:da:90:fc:b1:42:1b:40:
         1e:95:bd:a4:20:1d:c3:e9:06:5e:fe:1c:f3:d5:20:6b:55:7a:
         45:a1:c7:60:b7:91:b5:6b:14:98:96:0a:31:58:9c:d6:99:2f:
         db:77:1e:87:72:14:7d:3e:86:a4:37:27:b9:eb:52:bc:df:25:
         ae:11:26:2c:6a:2b:52:90:6b:92:94:45:93:d8:84:69:b6:3c:
         44:4d:18:47:70:67:87:19:ec:62:50:76:75:42:13:e9:33:d0:
         ab:45:65:01:6d:54:ad:7f:ec:9f:4d:d2:24:59:55:8b:6d:a8:
         b8:3c:52:38:0a:a5:a6:d7:b7:45:23:14:ef:3f:c5:76:48:b2:
         d2:11:cc:76:66:3f:90:4d:ec:9a:64:d8:26:ee:0b:72:39:e8:
         8d:33:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 23:20:49 2025 by rpki-client