This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier:          xKWns7QL/3TaRtTxYOe+WZ4d2/7UBRReLyfuxu1wB78=
Subject key identifier:   C1:6D:1A:64:51:0D:47:AE:E6:A1:A8:34:4B:E0:82:79:8F:52:3F:FB
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer:       /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial:       019B3757A4F6521E1C27571B8C1B4109E71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number:          06FA
Signing time:             Fri 19 Dec 2025 16:00:49 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:49 +0000
Manifest next update:     Sat 20 Dec 2025 16:00:49 +0000
Files and hashes:         1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: Vgh+wf523JsHTOolVCM/xJ/zkZcsnvQevTWEztUEXU0=)
                          2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
                          3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:57:a4:f6:52:1e:1c:27:57:1b:8c:1b:41:09:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Validity
            Not Before: Dec 19 16:00:49 2025 GMT
            Not After : Dec 20 16:00:49 2025 GMT
        Subject: CN=c16d1a64510d47aee6a1a8344be082798f523ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:a6:a1:f4:a3:ea:cf:ee:bd:bb:1f:61:84:
                    77:94:14:fd:05:1b:9a:ce:9c:d0:5c:52:b9:32:83:
                    d9:11:87:85:8d:79:67:ac:54:6f:73:b0:fb:b2:48:
                    3a:2a:41:b9:55:85:c6:74:3b:8d:f9:04:5b:35:ea:
                    79:e7:31:ac:93:bf:4f:d0:20:49:fa:5c:47:e9:fb:
                    06:12:3e:76:45:37:0c:47:13:2f:d6:e1:70:95:93:
                    ed:ef:41:92:97:52:32:b5:94:bb:dd:83:d7:dd:3f:
                    83:9d:09:dd:2d:96:98:24:ef:cf:a8:c8:8d:50:f4:
                    d4:50:5e:ab:71:60:f9:db:a4:d2:5a:ce:40:7a:6b:
                    08:d1:9e:98:ee:23:c9:23:fd:5c:44:cd:1b:d7:c6:
                    42:43:49:10:2e:c3:9c:f4:a1:9f:85:7e:82:47:65:
                    dd:70:a9:bf:2f:30:98:d4:d4:4f:8b:5e:69:8e:34:
                    96:f2:92:2d:27:63:b9:40:d0:66:ea:92:91:c5:a1:
                    34:2f:50:6b:e3:81:4d:46:26:5e:1d:ba:04:6c:b8:
                    c4:bf:6d:94:a8:bc:d4:c8:b5:ff:ec:be:b0:9c:9c:
                    f8:e1:9d:d0:54:b3:f9:ad:7b:cd:56:47:22:88:bb:
                    35:a9:17:8a:e4:df:6f:da:22:e8:1b:a3:8e:69:2f:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:1A:64:51:0D:47:AE:E6:A1:A8:34:4B:E0:82:79:8F:52:3F:FB
            X509v3 Authority Key Identifier:
                keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:49:15:e7:4a:5f:7f:84:33:60:07:3b:e3:71:21:d1:e4:c5:
         46:41:0a:5b:2b:a7:56:39:64:34:35:f8:15:fb:1c:4c:af:41:
         51:b9:48:c0:74:85:1e:fc:ba:63:5a:57:c8:b8:d6:0f:b8:ef:
         bb:d7:a6:09:e0:71:30:5c:d2:cf:4c:d6:9f:59:f8:d2:fc:71:
         d8:98:f5:32:71:94:16:31:c9:7b:e4:2b:41:3c:b9:3a:5f:8c:
         62:45:c0:f1:d1:04:9c:c5:fb:f6:41:0c:99:5d:9c:bd:08:44:
         5e:2b:d4:a7:2b:01:e8:d2:81:b3:05:39:3c:2c:f3:2e:7d:90:
         24:f4:ac:62:0f:2a:2c:c3:9f:b3:32:4b:66:37:c9:fa:75:a0:
         e3:3e:00:56:ee:56:06:1f:7e:d1:49:a4:a7:49:0f:f0:91:4c:
         a2:07:e5:e6:c7:86:aa:f3:1b:ec:de:c1:d2:a2:ad:78:70:c5:
         3c:94:1c:0d:34:86:dd:e0:ed:9f:b8:3d:16:cc:dd:c1:e1:55:
         e7:69:23:87:de:fe:20:91:da:8a:23:a3:15:c3:a1:dc:d4:96:
         10:56:a5:7a:5a:93:44:8c:73:bc:b2:71:25:80:95:ba:6d:42:
         78:ba:cc:7c:28:0a:c3:20:b8:f8:c4:0a:3e:c9:a1:72:db:37:
         47:4d:03:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3V6T2Uh4cJ1cbjBtBCeceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTk4OWMxN2IyZGEwYzUxNDMxNTU4MjBlYmM1NmJmZTcz
YTNhZGYwHhcNMjUxMjE5MTYwMDQ5WhcNMjUxMjIwMTYwMDQ5WjAzMTEwLwYDVQQD
EyhjMTZkMWE2NDUxMGQ0N2FlZTZhMWE4MzQ0YmUwODI3OThmNTIzZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6OmofSj6s/uvbsfYYR3lBT9BRua
zpzQXFK5MoPZEYeFjXlnrFRvc7D7skg6KkG5VYXGdDuN+QRbNep55zGsk79P0CBJ
+lxH6fsGEj52RTcMRxMv1uFwlZPt70GSl1IytZS73YPX3T+DnQndLZaYJO/PqMiN
UPTUUF6rcWD526TSWs5AemsI0Z6Y7iPJI/1cRM0b18ZCQ0kQLsOc9KGfhX6CR2Xd
cKm/LzCY1NRPi15pjjSW8pItJ2O5QNBm6pKRxaE0L1Br44FNRiZeHboEbLjEv22U
qLzUyLX/7L6wnJz44Z3QVLP5rXvNVkciiLs1qReK5N9v2iLoG6OOaS9yNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFtGmRRDUeu5qGoNEvggnmPUj/7MB8GA1UdIwQY
MBaAFJOpicF7LaDFFDFVgg68Vr/nOjrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQt
NjM3YjI2MWFiMTc5LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQtNjM3YjI2MWFiMTc5
LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEkV50pf
f4QzYAc743Eh0eTFRkEKWyunVjlkNDX4FfscTK9BUblIwHSFHvy6Y1pXyLjWD7jv
u9emCeBxMFzSz0zWn1n40vxx2Jj1MnGUFjHJe+QrQTy5Ol+MYkXA8dEEnMX79kEM
mV2cvQhEXivUpysB6NKBswU5PCzzLn2QJPSsYg8qLMOfszJLZjfJ+nWg4z4AVu5W
Bh9+0Umkp0kP8JFMogfl5seGqvMb7N7B0qKteHDFPJQcDTSG3eDtn7g9FszdweFV
52kjh97+IJHaiiOjFcOh3NSWEFalelqTRIxzvLJxJYCVum1CeLrMfCgKwyC4+MQK
Psmhcts3R00DNQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:12:57 2025 by rpki-client