This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          1NxlojGfF2CeQ0uAdGoIEdwGnu1Bou1i3w7Q9BCjGdI=
Subject key identifier:   2F:B1:D1:ED:5D:6C:F0:86:2E:21:F5:60:2D:9D:44:09:67:DB:52:2F
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019B1238998C4D332936C14B4BF3FBD460DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          1556
Signing time:             Fri 12 Dec 2025 11:00:57 +0000
Manifest this update:     Fri 12 Dec 2025 11:00:57 +0000
Manifest next update:     Sat 13 Dec 2025 11:00:57 +0000
Files and hashes:         1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
                          2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: XerNuDOjdof/kVxHZtaUa2YVtmiO6Ea9vSotXrZZiT0=)
                          3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
                          4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
                          5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
                          6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
                          7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
                          8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:38:99:8c:4d:33:29:36:c1:4b:4b:f3:fb:d4:60:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Dec 12 11:00:57 2025 GMT
            Not After : Dec 13 11:00:57 2025 GMT
        Subject: CN=2fb1d1ed5d6cf0862e21f5602d9d440967db522f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:3f:ab:5d:50:f0:e3:b4:67:01:05:5f:5b:
                    e3:33:26:49:6a:05:08:44:14:8e:8b:9c:17:dc:16:
                    fe:be:13:9b:76:d6:b2:d7:b3:fa:fd:29:f6:e2:4d:
                    52:35:34:eb:61:46:49:23:1d:1e:cd:a3:28:58:00:
                    eb:36:dd:a3:ba:7a:bf:16:24:08:9a:63:84:dc:77:
                    e1:23:b3:c7:81:2c:87:91:79:9c:50:50:47:84:00:
                    36:8f:f1:37:81:c3:42:0f:0e:87:f4:2a:90:ed:20:
                    e1:36:0e:8e:5d:f5:d9:9c:6e:f4:ed:e1:2a:5f:a3:
                    33:f1:c6:9b:0b:45:18:d8:15:0a:42:a1:7d:54:7d:
                    0b:b2:d9:1e:81:78:09:b3:e1:2e:2d:ff:71:ff:c7:
                    49:82:dc:b4:cc:5f:35:44:78:43:b1:ec:f4:2f:ee:
                    53:5f:36:d1:f0:9f:5b:c5:5c:cd:ec:8c:8d:88:69:
                    03:00:4b:3a:af:74:ae:9b:2f:58:a9:60:01:62:62:
                    ec:81:5a:19:97:31:ef:83:6b:99:76:c9:79:80:e1:
                    36:6e:3f:ee:e4:19:41:fc:d8:aa:e0:df:5f:c2:85:
                    16:ce:85:55:f2:fe:3f:a4:cc:42:f2:eb:7a:24:a1:
                    4d:8c:f1:57:2a:5b:15:11:23:1f:69:b1:38:2c:57:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:D1:ED:5D:6C:F0:86:2E:21:F5:60:2D:9D:44:09:67:DB:52:2F
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:25:35:2b:42:db:9d:6e:3a:81:a8:4a:4e:10:36:88:a3:94:
         d9:e7:8d:ee:5c:72:ea:9d:cc:09:84:57:9c:64:f0:9e:5b:86:
         40:39:8b:f8:cb:29:e9:6f:51:c8:61:70:bf:83:12:00:3a:7b:
         0b:4c:c5:e0:8c:7c:70:dc:a5:e7:7c:d5:78:d2:08:8e:3c:21:
         3f:5a:25:a8:8e:c3:6a:54:1f:94:5f:de:35:02:f5:7d:a4:45:
         01:0e:fb:ff:18:e7:ff:50:d3:f0:22:b3:aa:a5:a7:83:8b:44:
         d8:17:4d:a5:a9:64:c2:70:6e:1c:7e:8b:a7:1e:4c:f3:2d:3a:
         13:8d:4a:a2:46:65:1c:4b:3a:23:47:2f:aa:1f:c4:52:ec:e3:
         a8:23:7c:d9:d1:c8:d6:af:09:1d:c8:45:30:53:fc:5c:45:a8:
         4b:42:57:2d:2c:cb:a3:e1:99:89:7d:f1:f7:c3:1c:58:8f:73:
         1a:e9:d9:88:62:b4:41:d1:33:76:a5:3a:53:ab:f9:dc:f1:c4:
         63:5d:de:95:ef:1b:4d:aa:fd:1d:08:20:02:30:37:a4:52:ad:
         22:78:9a:3a:68:5b:59:ec:a5:e9:cb:fa:11:a8:b4:ae:58:6d:
         f9:b2:27:0a:4d:be:d8:28:a1:9a:fe:39:31:12:74:66:f8:a1:
         66:0e:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 17:10:12 2025 by rpki-client