This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          c5V6UwxyQiRlc5EoSV35/kYVbg3bl4Qhq8ilK7kregk=
Subject key identifier:   4F:7A:F6:00:80:A9:87:24:59:C5:D4:5B:3F:D6:BB:30:D6:53:EA:01
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       019B0E929635146EED699DABF62CAB15C71A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          036B
Signing time:             Thu 11 Dec 2025 18:00:46 +0000
Manifest this update:     Thu 11 Dec 2025 18:00:46 +0000
Manifest next update:     Fri 12 Dec 2025 18:00:46 +0000
Files and hashes:         1: 00xI0DtCAFHWBOE_bejIQNTJW6M.roa (hash: sfs0yal7NGV6TxNOqMPsIoLdmjrSnjF4P2BuDUW5yfw=)
                          2: 96dDSS3_XkJdE42tPgTQFeNVDec.roa (hash: dwHN2EcjJrtCZAcPzokJT4sxYyyBsiYHG30Cc+Xp5Yo=)
                          3: AF5LwWg1dao3w02VHECRUerpukU.roa (hash: Ncs14Dy32ScG4H2HyXyIY4G9gDsZB0rdLa7JZ2atlmg=)
                          4: Gzw1ArufvsV7lun_0Q-rUPOXBGM.roa (hash: t/o+neptKVKiKxJpFxuQvJ/wrQhsyyO3eWWynGJs2d0=)
                          5: H6KJXCzsVKBCex8bdjdpcPzKj4k.roa (hash: ayVcJHTWFx5ebEEYZQnqngJlO1dTOXNsn34hSHck390=)
                          6: Mmq2k4rDZVQ6_RZ6xEg6s_CKyQI.roa (hash: QoV5X7trUXhZYeLInnoKWzjWSqN0CR1PU587z2IB9wY=)
                          7: OHctpNz_hhm9bPX3cKVQ1EtLD-c.roa (hash: 8FZm1tGVETXKlmG85vdoH3UOxX9O19NVBR+Lz7FCIVA=)
                          8: VsI_AW9EylW2fiJ1YDcH0sZTdk4.roa (hash: 66hyyMtNTHFirc0cG1RdPc+2uiQi7LyhRHEQCng1VvU=)
                          9: WVv2k3TSQJbPsK5iSpOdvStU1fw.roa (hash: nllHKEsBD6hhWuVOALIXGX0W82p+v661gYIvqMzP3I4=)
                          10: WhSTApE7RFBAMmW_xVnPdgMAiWQ.roa (hash: Bd3C/960PK8QK60Tck52Vy8z1GDbIMwLZtVlP2UrssE=)
                          11: YBiBtpmThwVsKrMK6Z9khGmRy1Q.roa (hash: na/c6NWSHkDjhmZUiY/WjKrk6y+DwMkb2h5xDcgHESc=)
                          12: YZ5OkmOZqmOi769FEB0BCefbosM.roa (hash: T/9Rx2+z8lpNcTzmX4V/kvT+6IwNCbUFxhSZhaIwQvw=)
                          13: lkvywQn4TW4L9lkE7bYcNqmXY0Y.roa (hash: s4brEsiLVJQXgD883/yiLA0Z0ctXhJodTNwAgNakFBg=)
                          14: moO5Ks17ZAWVDkWAO-sZOL7jYGk.roa (hash: vNDGafiza1LZ3cM48PDM+kPW+0J6IrOV2MqoIZsseo4=)
                          15: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: 8OKZcOEPfz6ZWWYddP5aqn5Ln5yoeX/ze97DTduayBU=)
                          16: tAUwOh7-bFAje0ge2CsLFBhij_I.roa (hash: wxXEKUHCbWw2dnlts0k+6en+iFwSRN99/5HuuqUJ79U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:92:96:35:14:6e:ed:69:9d:ab:f6:2c:ab:15:c7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Dec 11 18:00:46 2025 GMT
            Not After : Dec 12 18:00:46 2025 GMT
        Subject: CN=4f7af60080a9872459c5d45b3fd6bb30d653ea01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:e3:d3:f2:b0:c7:cb:60:71:3f:da:d0:c8:
                    f7:5c:df:f9:08:0a:08:8b:eb:42:1b:90:a8:be:35:
                    b0:ad:22:59:8a:8c:6d:11:f7:61:46:86:e3:26:a2:
                    53:7e:05:fa:9b:3f:56:a2:21:f7:84:e9:98:86:a0:
                    aa:bb:ee:83:cc:6b:f5:d7:b2:ed:96:b2:18:55:fd:
                    7d:60:12:1a:1e:67:13:b4:d7:b0:0b:b1:dc:c5:27:
                    ff:36:ea:66:2f:e9:13:21:0e:97:cd:0f:da:b4:cb:
                    8c:4a:30:b3:fc:a5:e9:67:09:9d:52:c5:da:1d:3e:
                    bb:13:1c:c1:e9:18:6f:bf:42:f1:51:d4:dc:4a:52:
                    53:74:07:33:3a:03:1d:99:1c:ba:ea:a6:0e:19:83:
                    bb:59:fd:90:1d:98:66:8d:f2:04:c1:7e:e8:ce:8b:
                    1b:66:38:6a:57:ea:6e:22:6b:84:a4:a7:f4:75:fb:
                    97:bc:e8:4a:2a:68:cb:ed:e1:a7:73:af:fc:49:31:
                    a1:67:6f:2d:62:0e:ba:b8:70:47:92:1e:c0:35:bc:
                    7c:49:ea:f6:86:b0:80:9a:61:76:6b:9a:63:9a:02:
                    fe:12:d7:47:ec:21:2a:93:25:0a:96:48:55:70:82:
                    7b:d3:7d:48:be:21:1f:53:92:cb:ee:df:e1:72:79:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:F6:00:80:A9:87:24:59:C5:D4:5B:3F:D6:BB:30:D6:53:EA:01
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:10:f7:62:15:cc:65:1b:28:35:a8:c7:42:dd:c7:8a:64:
         06:d3:b4:25:e9:9e:b8:4f:37:e9:db:9a:fe:da:05:a9:7f:53:
         de:35:e2:5d:bb:40:a3:01:c5:7f:53:80:77:00:1b:53:b2:3a:
         87:f5:0e:d9:9c:2e:69:bf:23:78:04:96:ad:66:b4:03:90:ed:
         2d:17:21:4d:48:a3:06:83:08:86:5e:a9:de:69:1b:f2:51:0f:
         f8:1c:f9:53:95:e8:27:18:b3:29:35:3b:81:46:4d:b5:e6:72:
         d8:00:f0:fc:e4:0f:01:e9:9c:c6:fb:1f:30:e4:d2:37:96:32:
         4d:cb:33:6f:f8:39:61:a5:a1:4c:1c:36:09:45:65:90:09:4e:
         25:eb:80:a7:bc:ae:4e:2a:61:70:d0:97:74:5c:40:4e:51:32:
         7e:e8:98:8e:73:89:10:bd:ef:2e:93:0e:af:0a:a7:06:6c:3a:
         a6:1d:4e:2f:c7:88:3e:e7:0e:66:b7:97:a6:07:ba:8d:d5:a8:
         4d:23:54:d6:76:d2:29:7a:b9:94:4d:bd:ec:99:cc:95:a1:68:
         e7:4c:91:9f:f7:78:eb:8e:e6:60:e3:fe:ff:95:dc:59:cd:92:
         30:73:15:e9:2c:da:1c:79:c6:a0:9e:df:af:7a:00:d0:a9:2f:
         e7:44:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:57:27 2025 by rpki-client