This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          QYmlPLKSnoUQzb03zh6+wAGf1gTSxGcatXkGP/ku2BQ=
Subject key identifier:   67:D8:3F:A4:57:C4:CC:2E:E1:D2:FB:F0:5F:49:DE:7C:B5:40:54:40
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       019B37C5963DA7F52CC432E1DC197E495E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          0AF0
Signing time:             Fri 19 Dec 2025 18:00:54 +0000
Manifest this update:     Fri 19 Dec 2025 18:00:54 +0000
Manifest next update:     Sat 20 Dec 2025 18:00:54 +0000
Files and hashes:         1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
                          2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: slsMcGhA9hIoSMPfm6NCeQrzKSiKOoMPiIBoluTp08Q=)
                          3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:96:3d:a7:f5:2c:c4:32:e1:dc:19:7e:49:5e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Dec 19 18:00:54 2025 GMT
            Not After : Dec 20 18:00:54 2025 GMT
        Subject: CN=67d83fa457c4cc2ee1d2fbf05f49de7cb5405440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:cf:2a:f9:98:1d:c7:2b:5c:79:b1:1d:56:
                    ef:23:e9:85:cf:92:b8:6c:5b:11:74:fa:b6:56:6a:
                    46:2a:ac:e9:74:d7:a6:e7:ee:ba:23:9d:6f:88:be:
                    52:6c:79:b4:f2:87:68:c7:9b:5a:30:2f:f9:72:99:
                    02:e1:30:78:b2:a2:60:80:cc:c3:64:ee:10:30:bc:
                    a5:4f:33:2d:c4:4d:86:18:6a:51:5c:83:5e:f2:97:
                    3c:50:95:d1:bd:b0:a4:e4:69:9b:a3:2e:2f:bd:8a:
                    20:ef:c9:0c:a1:df:e4:fd:c8:e0:8a:42:9c:98:33:
                    70:03:6a:9d:e3:17:93:12:ba:f2:d8:fe:d6:af:18:
                    68:e3:35:03:37:fa:0c:7c:68:53:c8:6e:ec:c1:83:
                    85:8d:9b:8d:98:4f:7c:8c:72:92:9c:ea:a2:46:aa:
                    54:cf:e2:2f:3b:d2:ce:ec:28:19:bb:1d:c6:fb:27:
                    d5:25:07:77:16:51:86:43:71:43:92:96:ee:a2:84:
                    a4:3f:8c:7c:1c:4c:34:83:34:27:d7:8b:00:cb:a9:
                    85:82:b9:b4:47:1f:38:db:0d:07:02:f2:41:9f:7d:
                    75:c7:59:3f:f7:1e:31:5c:4a:1b:4f:bd:a3:42:11:
                    b3:2b:72:34:e1:d1:07:86:0b:07:6a:6b:c4:b3:ca:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D8:3F:A4:57:C4:CC:2E:E1:D2:FB:F0:5F:49:DE:7C:B5:40:54:40
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:dd:c3:f7:d6:e0:6a:5d:0b:9d:32:b1:10:20:5f:c5:b9:
         67:5a:76:78:b5:ea:aa:bb:72:40:a0:e9:db:36:03:06:da:04:
         44:93:5e:33:3c:9b:88:62:22:57:7c:8e:7a:fe:9d:c4:9b:60:
         c8:0d:a6:43:69:fc:b1:c4:cb:1a:16:65:9d:dd:28:0f:d6:5d:
         aa:65:79:b4:da:f3:00:52:a2:24:90:b8:d2:f3:66:7f:b4:eb:
         10:a0:42:af:48:dd:d5:ef:99:f1:a3:3b:6b:61:07:55:00:66:
         21:9b:60:9e:db:66:70:c5:a6:09:4c:69:16:09:43:21:9c:ac:
         b4:23:39:a2:c6:ed:7d:11:08:4a:32:59:91:eb:be:47:91:95:
         94:c8:b9:04:58:3b:77:3f:bd:ef:80:6f:98:7b:90:3b:5b:97:
         31:8c:f2:76:d8:0f:0a:f7:a5:12:1a:2d:75:ec:90:be:09:ce:
         88:13:41:cd:b2:da:c4:66:ac:0e:40:af:43:3d:08:c1:37:c6:
         cb:c0:ed:f9:f2:d7:87:eb:61:e5:64:23:55:9c:89:b5:56:2b:
         23:75:24:43:aa:10:f9:f9:a6:c2:d6:31:df:34:47:d7:bc:c9:
         d4:4f:c1:b8:f3:d5:f4:f0:1b:fb:28:76:8d:94:21:77:05:e0:
         1d:c6:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:57:57 2025 by rpki-client