This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File:                     bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier:          26aNo5WVfNmgGCoXyEXq8uoymgy7LCxwOY3VSIqMo1s=
Subject key identifier:   FB:6F:EC:BD:BF:8A:91:90:67:31:33:F2:41:5C:06:31:5B:F4:8C:3E
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer:       /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial:       019AF6F9DACEFD118E760D9A25C2641C36C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number:          0D6C
Signing time:             Sun 07 Dec 2025 04:02:40 +0000
Manifest this update:     Sun 07 Dec 2025 04:02:40 +0000
Manifest next update:     Mon 08 Dec 2025 04:02:40 +0000
Files and hashes:         1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
                          2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: uv59pbCAprZrsThtneIXaLNy4BxqlKNvl2yzb6ROZTs=)
                          3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:f9:da:ce:fd:11:8e:76:0d:9a:25:c2:64:1c:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
        Validity
            Not Before: Dec  7 04:02:40 2025 GMT
            Not After : Dec  8 04:02:40 2025 GMT
        Subject: CN=fb6fecbdbf8a9190673133f2415c06315bf48c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:a9:a3:da:c2:47:64:71:a6:76:23:14:13:
                    27:98:02:e0:ae:50:15:6d:e4:ff:a7:b1:ab:f4:8f:
                    c9:b1:34:11:2f:d8:3b:f2:0b:51:7e:ef:a4:b4:93:
                    67:36:a3:ce:22:79:fc:b8:91:e6:53:ab:89:7b:1b:
                    7f:73:31:6c:2c:3c:b8:60:42:42:ad:0b:da:a5:82:
                    a8:57:5e:18:5d:04:56:6e:b8:58:a6:a4:85:f2:81:
                    a1:16:0d:fc:ad:fc:57:8b:ae:54:d5:75:46:e3:b1:
                    e5:1c:e4:ee:36:34:77:f1:2d:75:24:60:05:92:a4:
                    49:ee:08:d9:e6:f0:fd:a6:66:3c:08:cb:8a:3d:e2:
                    0d:c1:e8:7c:c3:58:1c:bc:0f:08:4d:92:2b:4d:52:
                    2e:05:3c:00:24:ce:25:05:34:da:fe:14:cc:8c:a7:
                    93:d5:c2:db:04:af:83:cf:f8:dc:53:e0:58:f3:a3:
                    b1:ae:e4:b8:d9:2b:69:49:82:31:c7:38:36:8b:86:
                    a3:ac:45:0a:8a:37:14:75:60:9b:ad:c4:07:35:a4:
                    37:8c:51:e3:f6:3f:a5:3f:38:5d:78:2b:84:06:44:
                    5f:e8:1e:ef:94:ca:20:8f:36:6e:3c:47:cd:af:ad:
                    0a:d7:f0:d5:db:03:4c:cb:e7:04:42:3c:33:e9:07:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6F:EC:BD:BF:8A:91:90:67:31:33:F2:41:5C:06:31:5B:F4:8C:3E
            X509v3 Authority Key Identifier:
                keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1f:55:91:53:98:d8:34:0e:82:3b:43:b6:12:33:46:f8:df:
         6d:a9:6b:81:10:4b:cb:d8:a2:b9:16:73:c7:2c:e3:40:70:cd:
         37:0a:fc:ac:ac:11:70:9b:82:a5:5f:e0:a8:33:84:4a:35:e6:
         78:01:d3:a1:f8:53:a4:e1:35:50:4f:cc:6a:79:31:5f:77:e6:
         da:dc:47:ab:b9:4a:69:5c:db:64:28:50:46:cc:52:97:db:a7:
         5e:9d:05:1d:34:d3:d8:ba:45:0a:5b:26:a3:b1:43:81:f8:55:
         a3:91:67:35:70:fd:c8:3d:62:0b:95:10:f1:ee:0d:c6:37:2f:
         77:55:21:5e:8b:a5:ae:f9:60:55:ff:3f:6a:4e:92:d3:f0:48:
         7d:fd:0f:fd:52:48:9d:ed:de:7f:ed:c9:dd:e8:02:84:28:80:
         41:2d:03:5a:70:2f:5d:81:d8:01:54:09:f3:64:14:35:f9:2d:
         fd:84:fc:dc:6d:9f:80:b7:70:60:26:71:89:63:47:bd:4b:f4:
         0b:62:14:cb:94:49:29:35:6f:59:4d:db:8f:0b:07:a0:c9:d7:
         08:7c:ea:5e:83:0e:e9:bf:03:ed:dc:84:de:a5:04:89:e6:9b:
         30:be:c9:32:d7:6f:ca:cb:1f:45:cc:42:70:6f:61:ea:c2:e8:
         32:c3:94:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2+drO/RGOdg2aJcJkHDbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWE3NjE3OTVmMGY2NmJmZjI0NzhiNDY4Y2RlMGQ4NTFl
ZDE4ODcwHhcNMjUxMjA3MDQwMjQwWhcNMjUxMjA4MDQwMjQwWjAzMTEwLwYDVQQD
EyhmYjZmZWNiZGJmOGE5MTkwNjczMTMzZjI0MTVjMDYzMTViZjQ4YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtROpo9rCR2RxpnYjFBMnmALgrlAV
beT/p7Gr9I/JsTQRL9g78gtRfu+ktJNnNqPOInn8uJHmU6uJext/czFsLDy4YEJC
rQvapYKoV14YXQRWbrhYpqSF8oGhFg38rfxXi65U1XVG47HlHOTuNjR38S11JGAF
kqRJ7gjZ5vD9pmY8CMuKPeINweh8w1gcvA8ITZIrTVIuBTwAJM4lBTTa/hTMjKeT
1cLbBK+Dz/jcU+BY86OxruS42StpSYIxxzg2i4ajrEUKijcUdWCbrcQHNaQ3jFHj
9j+lPzhdeCuEBkRf6B7vlMogjzZuPEfNr60K1/DV2wNMy+cEQjwz6QcQRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtv7L2/ipGQZzEz8kFcBjFb9Iw+MB8GA1UdIwQY
MBaAFGwadheV8PZr/yR4tGjN4NhR7RiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEt
MGQxZDE3NGM0MzUxLzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMmMzODYtZDVlOS00YWQ5LTkzOGEtMGQxZDE3NGM0MzUx
LzEvYkJwMkY1WHc5bXZfSkhpMGFNM2cyRkh0R0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx9VkVOY
2DQOgjtDthIzRvjfbalrgRBLy9iiuRZzxyzjQHDNNwr8rKwRcJuCpV/gqDOESjXm
eAHTofhTpOE1UE/MankxX3fm2txHq7lKaVzbZChQRsxSl9unXp0FHTTT2LpFClsm
o7FDgfhVo5FnNXD9yD1iC5UQ8e4Nxjcvd1UhXoulrvlgVf8/ak6S0/BIff0P/VJI
ne3ef+3J3egChCiAQS0DWnAvXYHYAVQJ82QUNfkt/YT83G2fgLdwYCZxiWNHvUv0
C2IUy5RJKTVvWU3bjwsHoMnXCHzqXoMO6b8D7dyE3qUEieabML7JMtdvyssfRcxC
cG9h6sLoMsOUfw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:26:09 2025 by rpki-client