This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          3cp4i+Z3a+VVuFppMUov+4EuVSTW8K/Hp4Kd+pAlw5Q=
Subject key identifier:   4E:F5:6C:82:70:E5:36:8D:ED:7B:62:E3:F1:F4:B1:6A:B0:DF:A7:2A
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019B10EF85685C5C7D0F71D016A9D376A469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          177F
Signing time:             Fri 12 Dec 2025 05:01:31 +0000
Manifest this update:     Fri 12 Dec 2025 05:01:31 +0000
Manifest next update:     Sat 13 Dec 2025 05:01:31 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 1faD4ZFBclwFzb0_TlcJqclRz3s.asa (hash: y6k6blyX9AW8efyFUzs0HB1pisBHAVkRvkrWnYMgslk=)
                          4: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          5: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          6: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          7: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: 9EXMUZuWbrRf+J5pu/AOnWiTOasWslYFlPIv+aL2Je4=)
                          8: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:ef:85:68:5c:5c:7d:0f:71:d0:16:a9:d3:76:a4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Dec 12 05:01:31 2025 GMT
            Not After : Dec 13 05:01:31 2025 GMT
        Subject: CN=4ef56c8270e5368ded7b62e3f1f4b16ab0dfa72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:cb:a3:da:fa:ba:ad:0c:d8:f6:05:2a:ea:
                    24:3d:be:90:7b:dc:d8:1c:5f:2f:0e:db:4a:40:77:
                    5e:7c:1d:14:77:08:dd:0d:14:18:1d:07:17:31:6f:
                    6b:07:8a:33:75:ed:b9:08:66:4d:c9:de:39:33:3c:
                    ce:c0:0f:c6:8b:2f:91:eb:17:18:4a:ca:df:b0:cf:
                    15:18:9b:5d:c1:3f:9d:81:75:ad:2d:e5:46:4a:ba:
                    5f:90:48:c5:a9:af:38:bb:db:91:ce:e2:b0:12:28:
                    57:86:46:8f:ab:d0:d1:ee:40:57:54:dd:6c:9e:52:
                    5d:d6:92:7e:0d:b4:4b:05:fc:d0:2b:9c:38:18:b2:
                    d6:41:fa:cf:eb:d9:11:24:fa:91:fa:ab:9c:9e:92:
                    c2:6e:6b:a4:81:ac:8f:00:ba:ed:b3:68:1f:ac:dd:
                    c9:f4:4b:4a:6c:13:72:10:95:7a:d9:68:19:9e:8a:
                    b6:d6:75:e5:40:8b:2d:1c:93:69:cd:08:e9:8b:0d:
                    9f:b3:34:fc:ba:4d:4a:3c:91:d6:13:e5:5c:e5:23:
                    39:90:5a:55:50:5e:cd:8c:43:77:73:21:81:77:15:
                    47:ea:d2:29:64:ca:c6:77:49:a4:de:07:98:da:ea:
                    00:55:9e:ad:38:3f:7a:d7:31:9d:8e:1d:79:c1:68:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:6C:82:70:E5:36:8D:ED:7B:62:E3:F1:F4:B1:6A:B0:DF:A7:2A
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:89:8f:3d:67:e9:21:d0:91:9e:78:ed:e6:c2:64:1b:91:9a:
         02:06:31:c3:b1:53:66:4e:00:fe:d0:55:39:5c:9c:75:c4:22:
         3d:51:61:43:83:c1:0f:e9:a9:38:18:1b:6f:fb:06:87:c9:50:
         fe:f5:9a:44:de:02:04:c2:69:f9:42:da:6d:19:d0:74:34:0d:
         10:ed:dd:a9:79:44:2e:b6:47:63:ce:5a:36:d6:fb:37:42:47:
         14:09:e3:a9:e4:80:f9:fe:f3:d3:6b:d7:8f:f2:1b:dc:29:75:
         bb:d6:21:22:0b:28:af:c7:d8:64:83:f9:26:a1:14:79:67:ef:
         d0:10:36:cf:c2:2e:81:1c:3a:db:77:26:60:55:82:35:e9:80:
         17:51:96:f2:b3:7d:eb:43:53:38:85:82:d8:fe:25:e0:e0:bb:
         9f:e0:d3:27:cb:35:6d:65:6f:25:a3:92:7d:71:66:cf:87:ad:
         8e:07:9e:52:5e:05:59:f3:31:3c:f4:74:e7:06:3b:02:6d:57:
         0e:f6:87:d6:3d:4c:a9:aa:8e:9e:16:04:e3:1d:bc:d0:f0:86:
         12:b0:f8:66:a4:89:ad:85:0c:57:a6:39:6b:8c:17:46:03:ea:
         fd:27:a3:63:12:be:ac:e5:e0:52:a7:84:c6:48:c8:e9:a0:d2:
         61:cc:4e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsQ74VoXFx9D3HQFqnTdqRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjUxMjEyMDUwMTMxWhcNMjUxMjEzMDUwMTMxWjAzMTEwLwYDVQQD
Eyg0ZWY1NmM4MjcwZTUzNjhkZWQ3YjYyZTNmMWY0YjE2YWIwZGZhNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AjLo9r6uq0M2PYFKuokPb6Qe9zY
HF8vDttKQHdefB0UdwjdDRQYHQcXMW9rB4ozde25CGZNyd45MzzOwA/Giy+R6xcY
SsrfsM8VGJtdwT+dgXWtLeVGSrpfkEjFqa84u9uRzuKwEihXhkaPq9DR7kBXVN1s
nlJd1pJ+DbRLBfzQK5w4GLLWQfrP69kRJPqR+qucnpLCbmukgayPALrts2gfrN3J
9EtKbBNyEJV62WgZnoq21nXlQIstHJNpzQjpiw2fszT8uk1KPJHWE+Vc5SM5kFpV
UF7NjEN3cyGBdxVH6tIpZMrGd0mk3geY2uoAVZ6tOD961zGdjh15wWjMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE71bIJw5TaN7Xti4/H0sWqw36cqMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYmPPWfp
IdCRnnjt5sJkG5GaAgYxw7FTZk4A/tBVOVycdcQiPVFhQ4PBD+mpOBgbb/sGh8lQ
/vWaRN4CBMJp+ULabRnQdDQNEO3dqXlELrZHY85aNtb7N0JHFAnjqeSA+f7z02vX
j/Ib3Cl1u9YhIgsor8fYZIP5JqEUeWfv0BA2z8IugRw623cmYFWCNemAF1GW8rN9
60NTOIWC2P4l4OC7n+DTJ8s1bWVvJaOSfXFmz4etjgeeUl4FWfMxPPR05wY7Am1X
DvaH1j1MqaqOnhYE4x280PCGErD4ZqSJrYUMV6Y5a4wXRgPq/SejYxK+rOXgUqeE
xkjI6aDSYcxOyg==
-----END CERTIFICATE-----
Generated at Fri Dec 12 08:02:22 2025 by rpki-client