This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File:                     boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier:          l7rHBwXHLX/SL+XRNwjWVxnz0JGAlYoXZ54WFPHDBNI=
Subject key identifier:   9A:BE:2F:2D:15:45:F6:76:8F:1E:C8:4F:56:CD:D6:E3:16:5A:BE:11
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer:       /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial:       019B36455A21144027CD2C278D5AF58B946C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number:          16DE
Signing time:             Fri 19 Dec 2025 11:01:13 +0000
Manifest this update:     Fri 19 Dec 2025 11:01:13 +0000
Manifest next update:     Sat 20 Dec 2025 11:01:13 +0000
Files and hashes:         1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
                          2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
                          3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: tV0BGuqHk4QS8UO+uO1cXw/uJn2c5UJtHj/aAubpFuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:45:5a:21:14:40:27:cd:2c:27:8d:5a:f5:8b:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
        Validity
            Not Before: Dec 19 11:01:13 2025 GMT
            Not After : Dec 20 11:01:13 2025 GMT
        Subject: CN=9abe2f2d1545f6768f1ec84f56cdd6e3165abe11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:00:bc:f8:c6:1e:0b:76:db:44:d3:df:4a:
                    76:8f:2f:25:4f:22:0e:40:b7:d2:06:e7:ea:dd:46:
                    8a:57:83:3d:17:fd:3a:d9:83:d9:70:49:0a:8c:b5:
                    d2:13:41:b8:a5:a6:18:c9:50:3f:d7:67:7a:5d:cd:
                    1c:94:ff:e8:d2:82:ee:4c:f1:02:08:6c:06:22:d4:
                    e7:73:e8:06:5f:d3:7a:1d:c8:de:23:2b:a0:f5:3a:
                    e2:0e:85:65:32:87:f0:3d:0c:85:e6:c0:77:24:9f:
                    75:b6:ff:50:10:de:3d:28:40:ce:50:32:2f:9e:3e:
                    a4:bf:28:e8:5d:14:3a:12:4c:17:15:77:31:fd:49:
                    26:a6:02:4a:f3:0b:19:dd:79:21:a1:a9:84:fb:db:
                    3f:62:59:c3:87:ca:b3:fa:68:3d:1a:61:c9:77:3e:
                    7e:c7:2b:d5:46:b1:30:d4:18:63:b2:34:d7:3b:2b:
                    68:04:df:12:14:e1:91:ab:35:ac:79:93:15:d8:33:
                    f4:c8:63:af:29:a8:da:fe:67:10:48:7f:b9:e6:a8:
                    5a:19:91:47:05:d8:ea:99:0c:d1:62:d5:dd:22:4b:
                    ac:2d:a6:08:d2:9c:cf:00:c4:2a:aa:69:0e:7d:44:
                    22:bf:4f:75:61:3a:e3:f1:b4:be:15:a7:30:c3:eb:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:2F:2D:15:45:F6:76:8F:1E:C8:4F:56:CD:D6:E3:16:5A:BE:11
            X509v3 Authority Key Identifier:
                keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:34:3c:5b:c2:c5:b7:f2:58:40:5e:7d:c2:7a:eb:92:78:
         3a:e3:f1:9a:88:f7:c6:7d:d0:2c:ee:6c:6f:77:c5:11:ec:57:
         0c:ab:03:7a:f8:ce:e2:cc:4e:70:9d:1f:3a:38:2a:de:4d:28:
         26:e5:64:91:b3:dc:53:67:7c:cb:49:f1:50:07:69:41:39:5d:
         2c:91:a4:9a:8f:f7:19:52:fc:e8:87:c1:8a:0d:7a:43:29:15:
         bd:ed:4b:de:87:9a:c9:f3:29:be:a8:6c:46:b6:94:21:c0:72:
         92:12:81:04:95:e5:5c:d9:d3:a3:88:59:17:7a:b1:68:26:a0:
         27:7c:80:e6:d1:65:a0:ca:c5:02:17:c1:28:ff:80:48:72:29:
         f1:71:a4:a6:22:f9:3d:e6:00:73:20:9f:cb:8e:9d:55:0f:40:
         93:d4:c3:17:39:c6:cd:07:a9:f7:a9:37:92:9f:36:c5:4b:84:
         da:eb:11:d8:e0:30:b1:25:af:5a:ca:d9:e4:e8:e5:9a:af:df:
         16:28:90:7f:d4:a8:d1:d2:fd:3d:34:cd:ce:fc:dd:18:01:58:
         b4:5c:47:c8:6a:cf:55:f3:1b:a8:23:5f:7b:9c:5f:79:6d:dd:
         cb:5e:04:6a:c7:6a:dc:5e:09:ef:6c:5a:77:27:33:5c:23:c3:
         e7:df:d2:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs2RVohFEAnzSwnjVr1i5RsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm
YTdjN2UwHhcNMjUxMjE5MTEwMTEzWhcNMjUxMjIwMTEwMTEzWjAzMTEwLwYDVQQD
Eyg5YWJlMmYyZDE1NDVmNjc2OGYxZWM4NGY1NmNkZDZlMzE2NWFiZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu48AvPjGHgt220TT30p2jy8lTyIO
QLfSBufq3UaKV4M9F/062YPZcEkKjLXSE0G4paYYyVA/12d6Xc0clP/o0oLuTPEC
CGwGItTnc+gGX9N6HcjeIyug9TriDoVlMofwPQyF5sB3JJ91tv9QEN49KEDOUDIv
nj6kvyjoXRQ6EkwXFXcx/UkmpgJK8wsZ3XkhoamE+9s/YlnDh8qz+mg9GmHJdz5+
xyvVRrEw1BhjsjTXOytoBN8SFOGRqzWseZMV2DP0yGOvKaja/mcQSH+55qhaGZFH
BdjqmQzRYtXdIkusLaYI0pzPAMQqqmkOfUQiv091YTrj8bS+Facww+tbhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq+Ly0VRfZ2jx7IT1bN1uMWWr4RMB8GA1UdIwQY
MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt
NWMwMTgxN2ZiODIyLzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy
LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs80PFvC
xbfyWEBefcJ665J4OuPxmoj3xn3QLO5sb3fFEexXDKsDevjO4sxOcJ0fOjgq3k0o
JuVkkbPcU2d8y0nxUAdpQTldLJGkmo/3GVL86IfBig16QykVve1L3oeayfMpvqhs
RraUIcBykhKBBJXlXNnTo4hZF3qxaCagJ3yA5tFloMrFAhfBKP+ASHIp8XGkpiL5
PeYAcyCfy46dVQ9Ak9TDFznGzQep96k3kp82xUuE2usR2OAwsSWvWsrZ5Ojlmq/f
FiiQf9So0dL9PTTNzvzdGAFYtFxHyGrPVfMbqCNfe5xfeW3dy14Easdq3F4J72xa
dyczXCPD59/SmQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:27:15 2025 by rpki-client