This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          TMGJ/5yXp1cPoAdwdX6+n0nI/W8vvXZ582E6xP5CqJc=
Subject key identifier:   B7:D8:D1:19:B2:84:87:E9:8C:10:BB:26:72:33:87:8C:CF:3F:B7:41
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019B34C49AE41C286997208DABC2A95921AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          1799
Signing time:             Fri 19 Dec 2025 04:00:58 +0000
Manifest this update:     Fri 19 Dec 2025 04:00:58 +0000
Manifest next update:     Sat 20 Dec 2025 04:00:58 +0000
Files and hashes:         1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: HOGlRSW44CBDwoUsdHZm8SZPvnTo0Hj+keos73rH7ro=)
                          2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
                          3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
                          4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
                          5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
                          6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
                          7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
                          8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
                          9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:c4:9a:e4:1c:28:69:97:20:8d:ab:c2:a9:59:21:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Dec 19 04:00:58 2025 GMT
            Not After : Dec 20 04:00:58 2025 GMT
        Subject: CN=b7d8d119b28487e98c10bb267233878ccf3fb741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:25:c2:47:16:f5:43:a2:a3:10:03:fb:28:
                    4e:76:04:00:2f:e2:c4:5d:d9:77:ba:a3:84:77:97:
                    1a:02:fd:34:23:83:29:96:fa:94:62:2f:28:17:db:
                    06:b3:96:8c:5c:44:4f:c0:07:22:ae:b9:77:ac:63:
                    90:48:8b:1d:9b:8f:cf:ff:07:13:43:46:4f:a0:e6:
                    9d:34:91:f4:2f:3d:34:89:5e:8c:a7:e4:c1:6a:50:
                    4f:70:22:e7:6c:6a:6c:d5:6f:94:b9:56:f7:e3:b9:
                    a8:be:b3:41:57:6f:4a:df:7d:c3:7b:c8:e4:16:f8:
                    ef:5a:9b:8f:06:5d:41:61:99:4c:0b:ca:db:26:4a:
                    c6:67:9e:4a:cb:07:af:d0:ba:c3:f6:bb:91:75:ea:
                    80:b4:f2:0e:30:c0:3e:d1:4b:65:db:69:ca:d1:2a:
                    bd:7d:92:aa:bc:e4:85:02:35:79:d8:0d:12:22:5c:
                    ab:2f:bf:f6:c1:d3:41:ff:1e:28:5e:1e:86:a7:3c:
                    bf:8e:a2:d1:7d:5c:9c:28:d4:33:a8:cf:14:61:77:
                    13:76:92:3c:32:62:10:83:1b:7e:34:b2:5b:a3:82:
                    9d:c7:cf:cf:e5:7f:72:4b:94:a2:cc:41:b2:6c:bf:
                    04:93:19:7e:2b:c7:54:74:a7:7d:8d:df:86:03:9e:
                    64:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D8:D1:19:B2:84:87:E9:8C:10:BB:26:72:33:87:8C:CF:3F:B7:41
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:58:90:c3:6c:0e:49:fb:cd:95:e1:d8:16:fa:9b:5f:f7:92:
         6f:2b:3f:7c:b0:09:d4:ac:d9:95:2f:90:1d:bc:e5:b1:06:03:
         ac:63:06:49:ff:fc:c0:cb:ec:8a:11:45:ac:e6:ac:46:9f:13:
         b8:52:e9:ea:45:ca:99:9c:0e:fc:ec:b7:56:aa:58:1f:e3:bd:
         0d:da:2e:47:c8:f1:9b:7d:07:e8:bf:6f:ec:b5:c0:fc:61:58:
         db:8e:ee:bd:c9:53:83:7b:36:da:8a:00:bd:43:04:87:9e:41:
         c9:2d:13:b4:ad:8d:a4:3f:78:04:36:32:a5:a0:a2:5c:26:cf:
         72:7d:56:44:c5:15:4f:32:66:8c:96:8d:7e:97:27:a1:0e:5b:
         ab:67:46:07:f2:6f:e4:ce:12:e0:f7:4d:1f:53:8b:62:d4:9c:
         d6:c8:40:19:c7:e5:04:a7:f8:e6:36:33:a1:8e:01:dc:a1:13:
         28:dd:47:68:30:20:13:0e:19:0c:2d:63:a8:e9:fd:6d:49:75:
         91:3c:4d:c8:a7:82:06:0c:d7:84:d7:89:e3:52:9e:99:f7:00:
         6a:36:cd:37:f9:4f:ab:54:24:8d:b9:02:81:6e:5d:f5:53:e0:
         86:00:d4:81:10:e5:7d:27:bd:d9:6e:85:a6:74:5f:db:8b:be:
         a3:51:fb:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs0xJrkHChplyCNq8KpWSGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUxMjE5MDQwMDU4WhcNMjUxMjIwMDQwMDU4WjAzMTEwLwYDVQQD
EyhiN2Q4ZDExOWIyODQ4N2U5OGMxMGJiMjY3MjMzODc4Y2NmM2ZiNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5ElwkcW9UOioxAD+yhOdgQAL+LE
Xdl3uqOEd5caAv00I4MplvqUYi8oF9sGs5aMXERPwAcirrl3rGOQSIsdm4/P/wcT
Q0ZPoOadNJH0Lz00iV6Mp+TBalBPcCLnbGps1W+UuVb347movrNBV29K333De8jk
FvjvWpuPBl1BYZlMC8rbJkrGZ55Kywev0LrD9ruRdeqAtPIOMMA+0Utl22nK0Sq9
fZKqvOSFAjV52A0SIlyrL7/2wdNB/x4oXh6Gpzy/jqLRfVycKNQzqM8UYXcTdpI8
MmIQgxt+NLJbo4Kdx8/P5X9yS5SizEGybL8Ekxl+K8dUdKd9jd+GA55kbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfY0RmyhIfpjBC7JnIzh4zPP7dBMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2liQw2wO
SfvNleHYFvqbX/eSbys/fLAJ1KzZlS+QHbzlsQYDrGMGSf/8wMvsihFFrOasRp8T
uFLp6kXKmZwO/Oy3VqpYH+O9DdouR8jxm30H6L9v7LXA/GFY247uvclTg3s22ooA
vUMEh55ByS0TtK2NpD94BDYypaCiXCbPcn1WRMUVTzJmjJaNfpcnoQ5bq2dGB/Jv
5M4S4PdNH1OLYtSc1shAGcflBKf45jYzoY4B3KETKN1HaDAgEw4ZDC1jqOn9bUl1
kTxNyKeCBgzXhNeJ41KemfcAajbNN/lPq1QkjbkCgW5d9VPghgDUgRDlfSe92W6F
pnRf24u+o1H7Tw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 14:42:09 2025 by rpki-client