This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          dsRF/P8XAYpLmFUaf+SyegvX84cXOszwojlLvvXHd2U=
Subject key identifier:   22:9E:80:33:90:34:93:1D:5D:8F:2F:CE:78:1B:E6:FA:BA:E5:FD:90
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       019AFA675B2E2FB80E5A3D54A57599CD122D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          1763
Signing time:             Sun 07 Dec 2025 20:01:08 +0000
Manifest this update:     Sun 07 Dec 2025 20:01:08 +0000
Manifest next update:     Mon 08 Dec 2025 20:01:08 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: aK3498AcIzHQEabwEJ1N9ebsS/dcK7Yomu5qfFEyj5g=)
                          2: tp-dB2xKIA-Dznn_c4mvWy8vGjo.roa (hash: lUu46cTL71HHo1Gr7lMNLrh2M9SW7foXyhj6RDawOf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fa:67:5b:2e:2f:b8:0e:5a:3d:54:a5:75:99:cd:12:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Dec  7 20:01:08 2025 GMT
            Not After : Dec  8 20:01:08 2025 GMT
        Subject: CN=229e80339034931d5d8f2fce781be6fabae5fd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:3c:3c:81:fd:0b:5d:c2:ef:e8:37:3b:43:
                    cd:a2:20:6b:8f:7c:7f:aa:ca:7f:63:73:78:92:96:
                    66:04:10:ab:e8:33:63:a7:40:c3:ac:41:51:20:3f:
                    e9:b6:7c:55:9a:6e:d1:34:7b:25:bb:43:b2:9d:dc:
                    5f:88:ef:ca:4e:6c:eb:9b:2e:cb:b9:c7:a2:ff:bd:
                    71:37:83:e8:3d:af:30:96:25:11:42:62:55:c6:2c:
                    60:6c:fc:56:f9:75:b5:18:86:fc:18:68:dd:6b:33:
                    a0:a8:82:34:40:26:05:6d:91:5e:b6:40:43:27:4d:
                    fd:40:0f:41:22:e6:fc:1d:62:cf:c1:ae:e8:3e:8d:
                    ff:de:b0:cd:16:40:fd:39:97:8c:21:fc:bb:98:76:
                    33:f5:ed:ff:47:7b:c8:f8:7b:08:96:63:8a:2f:35:
                    ce:96:e1:90:69:b7:8d:32:f9:6f:a4:3f:c4:af:af:
                    43:ef:b0:40:5e:6a:3c:52:68:5d:4c:0b:9e:e0:85:
                    12:25:ce:8a:7e:64:d9:ab:4a:1e:11:6d:36:1d:35:
                    44:20:f8:32:21:eb:f2:e8:8e:e0:a8:55:25:48:0f:
                    3e:1b:98:f1:a4:87:69:24:57:94:ca:57:fd:38:10:
                    b2:21:44:14:63:f2:d2:02:de:3f:60:b6:f5:b6:27:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:80:33:90:34:93:1D:5D:8F:2F:CE:78:1B:E6:FA:BA:E5:FD:90
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:5e:66:8e:16:e4:21:fe:b6:7f:4f:5d:43:b2:f3:6d:75:dc:
         c6:ba:de:70:a7:16:64:18:21:79:a8:c6:7a:b6:36:4a:eb:f1:
         9e:9f:40:b5:bd:27:a9:5b:73:e0:bd:bc:e4:69:a4:bb:08:5f:
         74:c1:2f:39:65:30:e8:58:00:85:06:09:0d:b1:b6:bb:9d:ea:
         75:8f:07:62:f5:42:0c:2a:dc:08:b6:c3:96:67:67:29:01:4e:
         67:af:9b:e2:6d:ab:a8:fa:f4:5d:11:ce:c0:7b:11:cc:95:03:
         87:e8:14:2a:76:b6:1d:07:65:63:6d:43:8c:12:84:ae:94:ab:
         79:e8:cc:1d:ac:08:ce:61:7e:42:28:02:67:bf:e2:2d:f2:9a:
         31:3f:61:95:ec:b6:5d:ea:97:11:87:c6:c6:8a:5b:93:14:2a:
         39:37:3d:9b:b1:46:c5:ce:83:4f:09:50:d3:9f:7e:6a:22:da:
         29:bb:f5:26:35:13:18:17:d3:55:18:b4:b0:f0:02:ee:d9:bc:
         2b:70:1c:a1:ef:20:80:d0:74:c1:16:de:8d:0e:3c:31:ec:6d:
         b5:fa:76:b1:bc:21:83:3b:cd:80:de:1f:3b:d2:7b:8b:3c:b1:
         38:00:7b:9e:ab:ce:71:8e:12:fa:43:7a:b5:c7:a3:49:ad:ae:
         59:cc:fa:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr6Z1suL7gOWj1UpXWZzRItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTU5NGQyNmI4OGU4NjkxZDFkODE4NjAyM2I2OWViZjE4
ZDFmZTkwHhcNMjUxMjA3MjAwMTA4WhcNMjUxMjA4MjAwMTA4WjAzMTEwLwYDVQQD
EygyMjllODAzMzkwMzQ5MzFkNWQ4ZjJmY2U3ODFiZTZmYWJhZTVmZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOw8PIH9C13C7+g3O0PNoiBrj3x/
qsp/Y3N4kpZmBBCr6DNjp0DDrEFRID/ptnxVmm7RNHslu0OyndxfiO/KTmzrmy7L
ucei/71xN4PoPa8wliURQmJVxixgbPxW+XW1GIb8GGjdazOgqII0QCYFbZFetkBD
J039QA9BIub8HWLPwa7oPo3/3rDNFkD9OZeMIfy7mHYz9e3/R3vI+HsIlmOKLzXO
luGQabeNMvlvpD/Er69D77BAXmo8UmhdTAue4IUSJc6KfmTZq0oeEW02HTVEIPgy
Ievy6I7gqFUlSA8+G5jxpIdpJFeUylf9OBCyIUQUY/LSAt4/YLb1tidBqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKegDOQNJMdXY8vzngb5vq65f2QMB8GA1UdIwQY
MBaAFAellNJriOhpHR2BhgI7aevxjR/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2Qt
NGQ5NTYxZjhiOTY3LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2QtNGQ5NTYxZjhiOTY3
LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt15mjhbk
If62f09dQ7LzbXXcxrrecKcWZBgheajGerY2Suvxnp9Atb0nqVtz4L285Gmkuwhf
dMEvOWUw6FgAhQYJDbG2u53qdY8HYvVCDCrcCLbDlmdnKQFOZ6+b4m2rqPr0XRHO
wHsRzJUDh+gUKna2HQdlY21DjBKErpSreejMHawIzmF+QigCZ7/iLfKaMT9hley2
XeqXEYfGxopbkxQqOTc9m7FGxc6DTwlQ059+aiLaKbv1JjUTGBfTVRi0sPAC7tm8
K3Acoe8ggNB0wRbejQ48Mexttfp2sbwhgzvNgN4fO9J7izyxOAB7nqvOcY4S+kN6
tcejSa2uWcz6NA==
-----END CERTIFICATE-----
Generated at Mon Dec 8 01:18:40 2025 by rpki-client