This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          j6RjqpLeQ0CSdZoZ54GKFLfYcvrAJtjehr7pqK+WXsQ=
Subject key identifier:   0C:7E:FC:FA:87:AC:0A:5D:2F:5C:DD:89:BC:BE:43:11:CC:3F:BA:A0
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019B2D0AF396F3EFD1451D87D1DF421D5978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0E0A
Signing time:             Wed 17 Dec 2025 16:00:50 +0000
Manifest this update:     Wed 17 Dec 2025 16:00:50 +0000
Manifest next update:     Thu 18 Dec 2025 16:00:50 +0000
Files and hashes:         1: B6alie6EioBSI4GRuYA153USJyU.crl (hash: XC80Fl2jY9uzFaiugpZwR0Lb41lm8kyy4AVf5VPEXlA=)
                          2: HKdVcnfVobsdIXBp0QDt_Z0qTCg.roa (hash: HCRvOv3w8ga9OyNraAL7FomJBvkDq6oZ4SO2+hazIX0=)
                          3: bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa (hash: Q+f3a2oxT0KKWV1uGYhiJcbNDy66Hv8e1IwzRSkuGAQ=)
                          4: v_PdLbSX8ZHIQnizLKlK_LjiFwk.roa (hash: QYDWnKklCrm6Tmmu7t+N3uXIV62Se3s60vMnFoxqLzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0a:f3:96:f3:ef:d1:45:1d:87:d1:df:42:1d:59:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Dec 17 16:00:50 2025 GMT
            Not After : Dec 18 16:00:50 2025 GMT
        Subject: CN=0c7efcfa87ac0a5d2f5cdd89bcbe4311cc3fbaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:3a:0b:e6:36:ca:6d:e4:c9:3d:1d:88:e3:
                    71:93:ac:18:e6:38:8e:48:cc:78:11:da:2d:d2:ea:
                    c6:a4:2c:76:bd:24:77:e0:87:ed:6a:e3:61:41:ef:
                    61:f0:f6:0f:d0:81:b6:0c:b0:81:84:de:da:91:65:
                    3a:3a:23:7b:6c:93:bb:fb:58:f9:50:4a:42:4f:00:
                    d6:08:16:5b:4e:6a:02:7e:4e:41:04:85:97:7d:ea:
                    8c:fa:74:19:c5:e7:5a:59:bf:be:8f:2c:21:a4:12:
                    24:c4:12:e2:de:db:ed:ec:c1:62:a2:e4:0b:fa:ec:
                    22:22:7b:72:0d:7f:ae:c7:0d:c1:df:18:78:06:51:
                    7e:57:5b:ee:eb:22:c3:e8:3c:0f:51:f8:89:db:cb:
                    e0:53:1f:74:9a:2b:39:ab:18:11:d9:d0:79:f9:07:
                    c2:b8:83:2b:7c:6a:b9:61:4e:7a:38:24:c8:d1:07:
                    f7:53:58:cc:ed:45:d8:31:86:91:dd:db:5c:39:14:
                    fb:8d:c8:0c:83:a2:37:02:66:7f:cc:9e:76:55:05:
                    0c:6b:e9:22:93:1e:9d:4b:d9:d8:b1:bd:05:0e:15:
                    50:95:28:a3:de:98:5e:1c:f4:ab:44:d1:5d:ff:c7:
                    cd:0a:bd:f2:dc:f5:1a:e6:9f:ab:0f:15:8f:b4:96:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:FC:FA:87:AC:0A:5D:2F:5C:DD:89:BC:BE:43:11:CC:3F:BA:A0
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:a9:ed:5d:ad:4c:ef:06:64:7e:16:1d:fc:96:7f:ab:82:
         50:97:57:17:ad:8c:07:d7:a7:ea:cc:eb:7f:d1:27:49:a3:3a:
         f5:20:f6:5d:b5:99:d9:25:5c:6c:41:2e:11:dc:1b:cd:6e:38:
         74:32:0c:70:45:96:66:e6:9a:c1:4a:43:17:67:49:24:07:74:
         fa:59:d0:ff:18:e3:20:f2:b8:c6:2f:dd:a0:9d:2d:13:25:f1:
         60:d1:3b:32:33:ed:42:01:f0:59:1f:c6:da:b6:67:3e:a2:e8:
         8a:6b:33:5c:6a:8b:fd:83:3e:4f:f1:fa:16:37:b9:ad:aa:e6:
         a4:b0:a5:a1:39:34:85:2f:ba:b6:63:62:b9:4a:8a:13:30:f4:
         b9:59:1d:de:b5:e3:f1:1a:4f:77:f7:4a:a3:62:20:ad:01:70:
         e9:26:1f:3b:a5:e3:78:ab:94:8f:ad:79:f7:eb:55:9c:a6:62:
         cb:d5:b1:4e:ca:86:ca:df:80:f8:d1:a5:c6:15:bc:33:fb:8a:
         e3:28:c9:a2:ee:a3:3d:c8:72:09:91:7d:6c:bf:1e:ad:00:4b:
         2f:4d:3e:86:f3:ee:8f:aa:27:24:6b:40:ad:70:6f:89:38:1d:
         11:cd:6c:4d:89:c7:c6:5c:63:60:d0:29:a1:ac:0c:ad:ea:59:
         4a:c8:4a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZstCvOW8+/RRR2H0d9CHVl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTZhNTg5ZWU4NDhhODA1MjIzODE5MWI5ODAzNWU3NzUx
MjI3MjUwHhcNMjUxMjE3MTYwMDUwWhcNMjUxMjE4MTYwMDUwWjAzMTEwLwYDVQQD
EygwYzdlZmNmYTg3YWMwYTVkMmY1Y2RkODliY2JlNDMxMWNjM2ZiYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40Y6C+Y2ym3kyT0diONxk6wY5jiO
SMx4Edot0urGpCx2vSR34IftauNhQe9h8PYP0IG2DLCBhN7akWU6OiN7bJO7+1j5
UEpCTwDWCBZbTmoCfk5BBIWXfeqM+nQZxedaWb++jywhpBIkxBLi3tvt7MFiouQL
+uwiIntyDX+uxw3B3xh4BlF+V1vu6yLD6DwPUfiJ28vgUx90mis5qxgR2dB5+QfC
uIMrfGq5YU56OCTI0Qf3U1jM7UXYMYaR3dtcORT7jcgMg6I3AmZ/zJ52VQUMa+ki
kx6dS9nYsb0FDhVQlSij3pheHPSrRNFd/8fNCr3y3PUa5p+rDxWPtJa+tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx+/PqHrApdL1zdiby+QxHMP7qgMB8GA1UdIwQY
MBaAFAempYnuhIqAUiOBkbmANed1EiclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZhbGllNkVpb0JTSTRHUnVZQTE1M1VTSnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83ZmFmNWUtNzQzNS00OWZlLWFjZDct
MjBmYmM5MDY0OTRiLzEvQjZhbGllNkVpb0JTSTRHUnVZQTE1M1VTSnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83ZmFmNWUtNzQzNS00OWZlLWFjZDctMjBmYmM5MDY0OTRi
LzEvQjZhbGllNkVpb0JTSTRHUnVZQTE1M1VTSnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiCp7V2t
TO8GZH4WHfyWf6uCUJdXF62MB9en6szrf9EnSaM69SD2XbWZ2SVcbEEuEdwbzW44
dDIMcEWWZuaawUpDF2dJJAd0+lnQ/xjjIPK4xi/doJ0tEyXxYNE7MjPtQgHwWR/G
2rZnPqLoimszXGqL/YM+T/H6Fje5rarmpLCloTk0hS+6tmNiuUqKEzD0uVkd3rXj
8RpPd/dKo2IgrQFw6SYfO6XjeKuUj6159+tVnKZiy9WxTsqGyt+A+NGlxhW8M/uK
4yjJou6jPchyCZF9bL8erQBLL00+hvPuj6onJGtArXBviTgdEc1sTYnHxlxjYNAp
oawMrepZSshKNA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 22:58:41 2025 by rpki-client