This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          +DK3v4By2bY3+0WP4pAZ9YeBq5zaqxoXwvTE46rs8Dw=
Subject key identifier:   7D:40:4B:D9:7E:20:E1:F8:0C:80:85:2C:CE:07:B2:C7:35:B6:E2:6B
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       019B311F06A6FD24A7AF63722FF97C4EA7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0ABD
Signing time:             Thu 18 Dec 2025 11:01:15 +0000
Manifest this update:     Thu 18 Dec 2025 11:01:15 +0000
Manifest next update:     Fri 19 Dec 2025 11:01:15 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: i0rqxg+8hd3vqvq8CK/PF/uiZ9h28LV1ej5+mNEs/w4=)
                          2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:1f:06:a6:fd:24:a7:af:63:72:2f:f9:7c:4e:a7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Dec 18 11:01:15 2025 GMT
            Not After : Dec 19 11:01:15 2025 GMT
        Subject: CN=7d404bd97e20e1f80c80852cce07b2c735b6e26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:ee:2e:14:15:a8:9b:1c:9d:c2:c0:9d:6f:
                    00:e0:1c:0c:5d:0f:a3:c7:b2:f4:d6:56:9c:73:83:
                    f0:d9:6a:4f:44:b9:da:05:cc:a1:48:ad:55:b8:7b:
                    df:dc:de:30:d6:30:bb:90:12:d2:f5:99:34:0d:f0:
                    56:49:c1:f4:35:00:36:b1:f3:2f:b7:3c:32:ad:91:
                    90:b5:78:fd:96:9a:99:1b:24:33:d1:9d:f2:57:ca:
                    13:eb:f0:e1:cb:72:b9:6a:a3:c9:53:b2:3c:d5:e6:
                    2e:59:a4:c8:de:c6:23:d6:3b:d4:7a:b5:bc:cc:38:
                    21:03:b4:09:00:8e:dc:97:28:82:36:13:97:2b:02:
                    ea:28:c8:ee:2a:3b:34:42:bd:b7:b4:9a:ff:3c:eb:
                    96:60:bb:ec:4a:95:46:03:ca:c4:54:fd:3c:0e:8d:
                    1c:21:67:24:46:2e:bc:90:27:1b:d8:82:2d:56:10:
                    9f:ef:b4:ad:54:a1:17:95:68:53:5f:46:99:52:e4:
                    41:b9:9c:76:cd:8c:31:c5:54:bd:66:b0:d3:e7:1c:
                    c4:8c:8c:0a:56:ce:85:59:74:ac:e9:99:e9:03:65:
                    bb:4d:b1:e1:46:46:97:26:d6:c6:b8:fc:c4:40:7f:
                    9e:2a:14:de:95:a4:3b:ef:68:35:5b:a9:f5:97:3a:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:40:4B:D9:7E:20:E1:F8:0C:80:85:2C:CE:07:B2:C7:35:B6:E2:6B
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d2:74:31:88:bd:34:24:b9:05:ce:9e:bf:b8:b5:58:92:f7:
         46:3e:b9:82:81:14:fa:2c:e2:f6:53:14:57:57:37:d0:6a:08:
         ef:84:9f:e5:d8:3e:46:77:c5:7c:7c:54:3d:92:14:11:0d:03:
         05:4e:e0:c9:27:aa:30:78:e7:83:93:b9:ab:b9:e8:ea:3e:db:
         2e:0b:fa:a7:30:0b:d2:92:7f:ab:e0:42:46:2d:ae:0c:5f:e7:
         bf:21:0c:93:cf:4e:d2:7c:22:63:9f:cf:79:2c:fb:af:76:8b:
         f0:4a:25:19:98:04:67:29:4a:c2:29:34:38:d0:10:b3:88:a8:
         38:56:57:e9:6b:17:43:1a:14:e7:f2:5d:48:60:82:4e:1a:ae:
         a0:b6:bd:de:ac:a5:a4:ee:07:5d:10:3d:04:81:bb:14:19:e2:
         74:97:8d:57:d2:7c:3c:a0:81:64:66:42:1b:92:25:d6:45:dc:
         f7:79:ac:d5:56:1b:fa:e6:60:89:0b:64:e7:7a:01:1d:20:21:
         32:2b:d5:9a:2f:fd:fb:d0:54:60:62:54:60:55:d6:71:97:b0:
         18:77:11:62:25:8b:23:93:54:16:b3:49:65:95:55:d3:1e:2f:
         44:71:50:60:8f:d7:71:1c:51:ca:18:ef:41:b2:cc:3d:85:16:
         68:af:e1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsxHwam/SSnr2NyL/l8TqehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Yzg3NDY5OTc4MDk1ZDhhZmY2MzI3MjgwNGJiMmYzNWQx
NDkxMDMwHhcNMjUxMjE4MTEwMTE1WhcNMjUxMjE5MTEwMTE1WjAzMTEwLwYDVQQD
Eyg3ZDQwNGJkOTdlMjBlMWY4MGM4MDg1MmNjZTA3YjJjNzM1YjZlMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqojuLhQVqJscncLAnW8A4BwMXQ+j
x7L01lacc4Pw2WpPRLnaBcyhSK1VuHvf3N4w1jC7kBLS9Zk0DfBWScH0NQA2sfMv
tzwyrZGQtXj9lpqZGyQz0Z3yV8oT6/Dhy3K5aqPJU7I81eYuWaTI3sYj1jvUerW8
zDghA7QJAI7clyiCNhOXKwLqKMjuKjs0Qr23tJr/POuWYLvsSpVGA8rEVP08Do0c
IWckRi68kCcb2IItVhCf77StVKEXlWhTX0aZUuRBuZx2zYwxxVS9ZrDT5xzEjIwK
Vs6FWXSs6ZnpA2W7TbHhRkaXJtbGuPzEQH+eKhTelaQ772g1W6n1lzpGOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1AS9l+IOH4DICFLM4Hssc1tuJrMB8GA1UdIwQY
MBaAFOnIdGmXgJXYr/YycoBLsvNdFJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMt
MGNjM2I0Y2FmNjgzLzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMtMGNjM2I0Y2FmNjgz
LzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtJ0MYi9
NCS5Bc6ev7i1WJL3Rj65goEU+izi9lMUV1c30GoI74Sf5dg+RnfFfHxUPZIUEQ0D
BU7gySeqMHjng5O5q7no6j7bLgv6pzAL0pJ/q+BCRi2uDF/nvyEMk89O0nwiY5/P
eSz7r3aL8EolGZgEZylKwik0ONAQs4ioOFZX6WsXQxoU5/JdSGCCThquoLa93qyl
pO4HXRA9BIG7FBnidJeNV9J8PKCBZGZCG5Il1kXc93ms1VYb+uZgiQtk53oBHSAh
MivVmi/9+9BUYGJUYFXWcZewGHcRYiWLI5NUFrNJZZVV0x4vRHFQYI/XcRxRyhjv
QbLMPYUWaK/hfQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 14:17:20 2025 by rpki-client