This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
File:                     b69IsCuX3C0xIlCqI0CDuMG7noE.mft (raw, json)
Hash identifier:          YFXQ5imqtsaN/gQNpAjBojpD4NAqVIGk4pLRJJfgPVM=
Subject key identifier:   68:3C:13:B0:C4:26:D0:5A:4E:2F:23:97:1D:F8:54:00:AB:00:AA:39
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Certificate issuer:       /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial:       019B1D988B89C1C937F9EA1B93CEA215057A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
Manifest number:          04A1
Signing time:             Sun 14 Dec 2025 16:01:34 +0000
Manifest this update:     Sun 14 Dec 2025 16:01:34 +0000
Manifest next update:     Mon 15 Dec 2025 16:01:34 +0000
Files and hashes:         1: EYicsUpHakuVJ85rHI3z9ChbOyE.roa (hash: +iUcQNM+1WS62zr3/+AkENonSCdw/nmYbxbfMIf3eUE=)
                          2: TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa (hash: 2zLKJ3umZ3JW8k4DM0pjot15c8VbxAJ5HTL+V7YT3A0=)
                          3: b69IsCuX3C0xIlCqI0CDuMG7noE.crl (hash: i3c3zo9Sqfcv0SsSaJUhbaDSvQI1YahEB6cjUGinQOY=)
                          4: yxe7My0NcRZq-SpiFdXNNwBJYL4.roa (hash: 0k/Fz33zsau4ewiit92jbfHfEKu+7iJrH4IQAHIlxUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:98:8b:89:c1:c9:37:f9:ea:1b:93:ce:a2:15:05:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
        Validity
            Not Before: Dec 14 16:01:34 2025 GMT
            Not After : Dec 15 16:01:34 2025 GMT
        Subject: CN=683c13b0c426d05a4e2f23971df85400ab00aa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:9c:aa:5f:e8:a1:26:1c:a3:05:3a:46:7b:
                    ba:66:e1:fe:f2:8b:2a:24:8d:2f:d2:0a:40:11:5e:
                    92:8b:02:e2:3e:6d:89:54:41:80:51:1e:0e:33:44:
                    a6:1d:ee:ae:ac:fb:70:b1:00:ae:b2:9a:7b:b3:e8:
                    fb:ab:b2:27:d5:e4:27:e1:72:b1:72:a2:8d:93:af:
                    a9:a4:a0:f4:b6:d1:1f:1c:2a:b1:34:d9:8e:7f:2f:
                    c1:42:87:99:c8:59:12:bd:a0:93:f9:82:03:de:4f:
                    2f:94:ee:6a:6b:a7:25:08:5b:bf:68:98:6e:0a:84:
                    c5:83:f4:cd:a8:81:a6:43:04:9d:95:4c:ff:08:71:
                    a6:46:22:74:5b:5f:1b:9f:8f:03:7f:81:a3:ad:44:
                    d0:31:50:57:60:de:08:3d:11:e0:61:79:3d:e5:08:
                    e5:ba:52:85:c1:8d:f1:dd:dd:14:e8:46:73:c3:d6:
                    79:b1:b3:56:e2:2b:24:02:33:bc:98:16:43:24:f1:
                    b0:89:6d:9c:16:ce:c3:5f:25:16:d2:28:2f:a9:b4:
                    80:cb:e3:cf:7d:4d:ed:5c:02:04:79:a8:63:5c:cc:
                    d4:16:d4:96:fb:00:be:33:c8:67:6a:de:fe:cf:a7:
                    66:b9:ec:63:fb:1a:c6:71:b2:34:d5:d7:82:f1:dc:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:13:B0:C4:26:D0:5A:4E:2F:23:97:1D:F8:54:00:AB:00:AA:39
            X509v3 Authority Key Identifier:
                keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:3a:54:c2:60:e4:8f:48:de:5c:1b:53:97:8b:e8:ad:b1:
         6e:2c:d8:9e:e1:56:16:21:83:32:64:a2:b5:98:1b:12:88:9b:
         1f:8c:fd:0c:a7:0c:0c:5b:9a:ac:c9:54:b1:cf:f5:b1:ff:9e:
         27:0d:73:0b:f5:d3:f8:d6:29:f2:e8:f8:ba:ff:37:45:c5:28:
         76:ef:0b:23:36:7e:cd:e9:b0:d4:c2:ae:3b:12:b2:b6:89:c8:
         42:bb:7a:0d:a4:50:6d:15:71:ea:5f:39:3a:68:2f:53:59:36:
         d4:c2:4e:4f:08:32:f2:59:09:33:2f:35:ac:df:6c:8d:dc:1a:
         48:3f:41:53:4e:64:29:95:ad:4e:c6:38:f1:f5:9c:5b:98:0f:
         88:b4:b8:a0:c8:70:3d:e3:d6:82:62:31:d1:5e:13:fd:66:39:
         9c:da:b0:75:f2:e6:bb:d5:70:12:f7:ad:de:03:a9:f8:7d:b9:
         73:a5:40:b2:a3:24:b8:df:6e:f3:a3:19:71:2d:64:07:d9:cb:
         32:d0:ad:63:f2:10:ae:12:d8:f7:b2:10:a4:31:e7:fb:7c:7c:
         80:16:d3:38:49:2c:89:e4:f5:89:b6:d9:be:e9:e1:e7:6f:ac:
         09:8e:f9:4d:f9:4d:9b:9e:0a:18:40:24:51:e2:7e:f3:c9:e8:
         26:de:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:55:57 2025 by rpki-client