This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File:                     a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier:          VZ3mqXyaRvPedgTAYx6TfKrptDIn/xSnA9GuC6Hwn6c=
Subject key identifier:   34:5D:86:0D:CE:81:39:55:7B:98:1E:09:D1:9E:2B:E2:58:82:A5:36
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer:       /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial:       019B59E461B07E841EE83F1D35F835C04823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number:          1457
Signing time:             Fri 26 Dec 2025 09:01:37 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:37 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:37 +0000
Files and hashes:         1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
                          2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: KSEWfIa8Vmf087L9l811AQs2G0Wmlx/XzfksPW2bLnc=)
                          3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e4:61:b0:7e:84:1e:e8:3f:1d:35:f8:35:c0:48:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
        Validity
            Not Before: Dec 26 09:01:37 2025 GMT
            Not After : Dec 27 09:01:37 2025 GMT
        Subject: CN=345d860dce8139557b981e09d19e2be25882a536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:c8:b3:20:37:65:b6:21:d9:fc:ad:0b:16:
                    fb:9a:9c:40:65:d0:5c:b9:cf:58:67:75:eb:90:2d:
                    e9:75:b3:26:c3:82:19:6f:71:08:97:3f:bf:3b:a6:
                    17:88:4a:d7:9e:b2:88:62:b7:e5:ed:18:37:3b:f4:
                    34:af:52:b8:8f:95:c8:fe:3a:6f:72:1a:39:4f:d5:
                    8b:53:97:12:9d:36:4c:72:c1:c6:73:0b:a3:7b:da:
                    70:37:55:a3:25:ba:8b:fa:0e:a1:21:6e:a7:02:a4:
                    f2:2c:03:d4:90:38:6d:95:f5:53:ba:24:e0:1d:45:
                    39:03:0e:15:c4:97:4e:9c:c6:8d:09:5d:b7:53:4c:
                    1f:04:3b:6e:2c:08:65:c0:c4:49:12:52:ac:91:87:
                    4b:28:2a:45:92:97:31:22:64:5c:63:42:2e:dc:72:
                    5a:9e:a4:20:f3:0b:09:1c:27:a0:3c:5b:ab:0a:ba:
                    ff:61:78:ba:97:70:ce:25:f6:e2:00:dd:42:70:8d:
                    23:92:ee:57:dc:07:97:e3:53:f6:72:6f:d6:49:29:
                    89:0d:60:f0:6a:da:a6:0a:9c:ba:f9:c6:80:ae:c8:
                    46:00:f8:91:67:4a:ed:b5:de:17:0e:db:cc:35:f3:
                    db:59:7b:69:42:e3:ee:4a:b4:0e:84:c4:1e:d9:d7:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5D:86:0D:CE:81:39:55:7B:98:1E:09:D1:9E:2B:E2:58:82:A5:36
            X509v3 Authority Key Identifier:
                keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:23:ab:f9:13:05:f0:39:3b:a6:80:83:90:9d:ec:cf:10:64:
         83:5c:1a:b1:78:f0:e2:b3:31:cd:5a:d7:d2:e5:18:6f:8f:53:
         ce:a6:8c:ea:45:ad:65:69:ab:c4:37:f3:c6:4e:36:0c:e8:7e:
         be:73:e5:a8:92:4b:7c:41:8c:2a:1b:62:11:4c:70:4c:04:4e:
         ad:8f:b3:b5:dd:44:49:ec:6e:4f:8c:4d:a9:e2:c4:d7:9c:f2:
         0e:99:c3:76:98:bd:7f:74:b1:dd:50:81:eb:2a:e4:17:23:e8:
         eb:c9:7e:e3:f7:fa:23:14:93:6c:b7:b0:2d:84:7b:a8:3c:a0:
         c1:aa:4b:0c:c2:27:33:21:0d:7d:b7:3f:2e:bb:55:df:3c:cb:
         53:2b:45:9a:bd:e6:a9:6a:19:f5:cf:4c:5b:42:d2:da:e9:72:
         17:3f:e2:a1:54:da:a5:db:7b:31:2c:89:c3:95:03:1f:7a:3c:
         92:15:67:f0:26:bc:cd:63:46:98:fa:6d:f8:7d:c4:a1:8b:42:
         4a:6f:19:08:75:c1:5c:dc:77:51:33:fb:c7:d6:9e:01:27:17:
         b3:d1:bd:37:26:93:be:92:08:88:d8:d9:8c:0b:d1:a1:82:42:
         e2:e5:07:3b:67:e5:1e:23:df:2c:71:49:1c:d3:4b:aa:6c:38:
         20:5e:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:06:27 2025 by rpki-client