This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File:                     6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier:          2balleuTozD+21R6OFXExE3m7Cgbc1UbrYr7+Oghzko=
Subject key identifier:   F8:56:B0:11:AA:83:EF:DA:40:21:7D:9C:27:C1:A2:23:B2:D9:78:AF
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer:       /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial:       019B2A412CFA0FE89E55BAA676CC80981842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number:          0D2B
Signing time:             Wed 17 Dec 2025 03:01:12 +0000
Manifest this update:     Wed 17 Dec 2025 03:01:12 +0000
Manifest next update:     Thu 18 Dec 2025 03:01:12 +0000
Files and hashes:         1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: Rs2lVvwmRz9RfbUWE2Ld/6TMbUUtjTOOYTQL0aOgjqM=)
                          2: aNZ_w4ct0s6F9JNwvU81Pvph6xA.roa (hash: DMpkzc/SEQWOGXDtkCkwGEzbNT7zz+eYHoA6cnEiN1w=)
                          3: mUi0nnAum7kZ4MV9jKDfBhFb4JY.asa (hash: bojd8Moh0D6d4DIF/avFXQDI+7GBVfVdL/RyMurONoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2a:41:2c:fa:0f:e8:9e:55:ba:a6:76:cc:80:98:18:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
        Validity
            Not Before: Dec 17 03:01:12 2025 GMT
            Not After : Dec 18 03:01:12 2025 GMT
        Subject: CN=f856b011aa83efda40217d9c27c1a223b2d978af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:4d:bf:b3:b5:40:28:8d:b7:8e:a2:ca:8c:
                    13:75:9d:d4:d5:a0:ef:37:99:b5:e7:f3:93:df:6d:
                    45:f5:c4:05:77:41:d0:1e:a4:a2:8c:7e:20:dc:29:
                    81:ec:b9:93:0b:4c:da:b6:f6:87:be:da:6c:82:ab:
                    25:be:c2:1d:0e:9a:8a:3b:94:81:21:7d:d6:45:5b:
                    24:4c:92:19:17:c0:f2:46:b1:66:e1:52:e9:7f:e9:
                    aa:13:70:49:71:d0:77:a4:95:23:5e:c0:90:0b:ad:
                    03:3c:ff:25:71:9d:84:71:1f:8e:aa:da:f7:c2:98:
                    af:f5:9d:06:01:b6:bb:7a:04:1f:20:47:44:83:91:
                    78:28:72:d9:2e:de:a5:a2:5e:48:91:4a:35:64:12:
                    70:4a:5c:67:b8:49:f3:47:b6:c6:88:8c:74:d7:c8:
                    87:22:06:d4:3f:12:ca:ec:82:71:2d:be:bc:e2:be:
                    37:6e:22:8a:1f:4d:57:20:c7:a1:b5:07:5c:69:34:
                    2e:72:56:64:30:03:85:be:3c:22:ec:d7:ca:e5:3d:
                    7e:9a:09:93:de:be:ce:ec:c9:d5:97:1f:6a:5c:16:
                    ec:40:c4:38:ef:b6:de:d2:34:8c:64:ac:e3:6c:fd:
                    ff:8c:89:a2:6a:fb:0b:dd:eb:a4:17:82:91:73:41:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:B0:11:AA:83:EF:DA:40:21:7D:9C:27:C1:A2:23:B2:D9:78:AF
            X509v3 Authority Key Identifier:
                keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:96:fa:c9:72:4e:51:ab:3d:12:b1:e8:49:c4:ef:f9:dd:
         9f:5b:a2:2c:5f:11:ff:a6:41:e5:33:61:49:3e:ce:ab:a9:26:
         ae:87:ac:44:9a:2e:9d:d2:8a:84:b9:94:79:f4:ad:d3:5f:40:
         ab:d0:37:0b:89:1b:48:bb:fd:91:29:f4:d2:bb:5e:b8:64:23:
         22:0e:13:22:1a:a1:6c:75:0c:8b:19:45:c0:ab:7e:13:b8:19:
         b9:5f:d8:9d:f7:78:74:51:4d:e0:d9:6a:e9:93:65:85:bc:82:
         85:4d:71:23:5a:68:85:87:07:0b:72:c8:18:2b:5c:cb:be:9f:
         50:18:bf:1d:01:86:1c:ed:a4:e8:73:9b:de:48:10:ba:33:52:
         c8:3c:e7:1e:01:a6:00:05:90:a8:77:f4:09:5f:fb:4b:c7:bd:
         f2:8c:82:41:d7:a4:5a:73:0b:d8:91:af:d7:ea:1b:fa:19:7f:
         8a:1e:12:d9:a8:9d:d3:47:39:04:9f:3c:74:fe:03:8e:8c:84:
         b1:46:0f:94:31:00:79:8a:d2:19:a9:92:10:de:d4:13:e9:3b:
         82:38:a4:e5:6b:05:1e:7c:49:30:b3:b8:a8:85:0a:02:7d:91:
         99:49:14:df:1d:dc:76:4e:be:08:40:60:2f:d3:b3:3c:70:0e:
         ab:38:11:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsqQSz6D+ieVbqmdsyAmBhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMGViOGY1NDg3ZDc0MWE4Y2M2ZDZkZjNiMzkyMTkxZWQz
ZWVkM2YwHhcNMjUxMjE3MDMwMTEyWhcNMjUxMjE4MDMwMTEyWjAzMTEwLwYDVQQD
EyhmODU2YjAxMWFhODNlZmRhNDAyMTdkOWMyN2MxYTIyM2IyZDk3OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6VNv7O1QCiNt46iyowTdZ3U1aDv
N5m15/OT321F9cQFd0HQHqSijH4g3CmB7LmTC0zatvaHvtpsgqslvsIdDpqKO5SB
IX3WRVskTJIZF8DyRrFm4VLpf+mqE3BJcdB3pJUjXsCQC60DPP8lcZ2EcR+Oqtr3
wpiv9Z0GAba7egQfIEdEg5F4KHLZLt6lol5IkUo1ZBJwSlxnuEnzR7bGiIx018iH
IgbUPxLK7IJxLb684r43biKKH01XIMehtQdcaTQuclZkMAOFvjwi7NfK5T1+mgmT
3r7O7MnVlx9qXBbsQMQ477be0jSMZKzjbP3/jImiavsL3eukF4KRc0G0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhWsBGqg+/aQCF9nCfBoiOy2XivMB8GA1UdIwQY
MBaAFOsOuPVIfXQajMbW3zs5IZHtPu0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnc2NDlVaDlkQnFNeHRiZk96a2hrZTAtN1Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMTZiNDYtYjhjYy00NDU2LWE0NTAt
MjdlMjdjMTYzMTAyLzEvNnc2NDlVaDlkQnFNeHRiZk96a2hrZTAtN1Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kMTZiNDYtYjhjYy00NDU2LWE0NTAtMjdlMjdjMTYzMTAy
LzEvNnc2NDlVaDlkQnFNeHRiZk96a2hrZTAtN1Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXWW+sly
TlGrPRKx6EnE7/ndn1uiLF8R/6ZB5TNhST7Oq6kmroesRJoundKKhLmUefSt019A
q9A3C4kbSLv9kSn00rteuGQjIg4TIhqhbHUMixlFwKt+E7gZuV/Ynfd4dFFN4Nlq
6ZNlhbyChU1xI1pohYcHC3LIGCtcy76fUBi/HQGGHO2k6HOb3kgQujNSyDznHgGm
AAWQqHf0CV/7S8e98oyCQdekWnML2JGv1+ob+hl/ih4S2aid00c5BJ88dP4DjoyE
sUYPlDEAeYrSGamSEN7UE+k7gjik5WsFHnxJMLO4qIUKAn2RmUkU3x3cdk6+CEBg
L9OzPHAOqzgRHg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 08:28:16 2025 by rpki-client