This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File:                     6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier:          TpZqxZj4mjdGpfycQZyjD8GoPIR8Y2sFflnJYxixoFg=
Subject key identifier:   4C:71:FB:D4:1C:66:79:BE:0F:D8:A0:51:17:D9:E4:C2:DA:4E:51:45
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       019AF2AD3E8DA272F2DB93967FE4AC994327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 08:00:31 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:31 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:31 +0000
Files and hashes:         1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: sRkvwNp/8JfWHlWn3L4LuDeh2l9OleVpdxSpbLHHyuU=)
                          2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:3e:8d:a2:72:f2:db:93:96:7f:e4:ac:99:43:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Dec  6 08:00:31 2025 GMT
            Not After : Dec  7 08:00:31 2025 GMT
        Subject: CN=4c71fbd41c6679be0fd8a05117d9e4c2da4e5145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:a7:6d:81:f6:44:37:df:07:38:09:2e:8e:
                    06:e5:88:1c:96:79:ff:9b:4a:36:48:96:72:40:e2:
                    2a:19:81:56:60:69:6e:e6:43:a8:69:93:3b:fa:2f:
                    09:ec:61:89:69:17:3b:72:fe:b2:49:2f:af:10:0d:
                    6c:d6:e4:1d:02:89:53:d0:b9:62:54:58:86:44:3d:
                    b2:f4:ba:22:bf:ac:12:52:00:22:8e:3e:a5:53:b3:
                    68:df:ab:c4:89:c5:9a:a8:8d:c5:27:fa:2c:4c:41:
                    d1:a6:fc:76:a3:b0:55:2e:59:c3:6f:fe:89:44:11:
                    36:93:5a:07:5e:c0:d7:49:9e:11:94:a6:0c:9b:a1:
                    61:70:b2:df:3b:a0:42:9e:70:14:da:d4:fe:c9:da:
                    d9:5f:4b:48:20:97:45:51:d5:4d:42:ca:99:42:18:
                    d2:58:c1:e3:6e:fb:3c:1a:5b:3f:ef:51:6d:8a:b2:
                    eb:2c:3b:f5:1d:06:a1:56:f5:90:b3:c7:ee:1e:77:
                    ac:a9:f0:00:20:ee:35:fe:92:d9:53:d9:b8:60:18:
                    c6:16:a4:52:0c:37:8a:4b:7c:9d:ef:50:5b:98:30:
                    79:d2:ca:2e:8d:38:8f:d0:e9:b1:1a:72:02:f4:c1:
                    5e:7b:ee:2d:7c:fc:3d:d3:a4:ea:a3:df:5f:0b:f3:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:FB:D4:1C:66:79:BE:0F:D8:A0:51:17:D9:E4:C2:DA:4E:51:45
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a8:7e:43:62:70:67:af:8a:d9:ea:63:fc:58:17:21:e8:a3:
         f1:30:0f:7b:72:c5:4d:e6:7b:bc:a9:4e:08:01:77:8d:38:b3:
         0c:6e:75:2f:21:05:48:5a:e2:1d:83:a3:c1:4c:0b:d4:e8:2f:
         5e:ea:d2:b0:5d:08:b5:46:07:c4:c4:41:b4:6d:f3:bf:81:84:
         eb:47:2b:0c:34:53:aa:d6:cb:9a:3b:cf:d4:a1:70:21:b3:e8:
         50:0c:cb:18:cb:33:d7:6a:d7:a4:40:05:82:dc:66:6a:7c:9b:
         5f:46:3c:cd:af:2a:c0:7e:19:9f:64:01:3d:99:87:f1:05:d7:
         66:62:0d:f3:79:df:1e:fc:c1:7f:72:f6:96:5c:0c:40:bf:52:
         98:96:51:e4:f6:d3:20:10:16:fe:c8:c9:26:9a:dd:fe:e7:28:
         2b:55:9a:a0:a5:7a:67:cd:48:8c:40:ac:c2:db:40:b4:fd:a8:
         6c:bf:42:5a:01:1f:86:15:08:1e:93:2d:9b:5c:c8:a1:aa:43:
         77:60:db:fb:2d:db:15:47:b7:34:e8:e8:d7:cf:62:23:80:be:
         12:d4:1c:a7:8e:25:9c:8e:ce:7b:b2:00:ab:b2:7d:e6:f5:83:
         b0:7b:26:a8:57:92:6f:1b:38:40:ec:d2:24:19:8a:91:36:4c:
         bd:c2:c2:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrT6NonLy25OWf+SsmUMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD
Eyg0YzcxZmJkNDFjNjY3OWJlMGZkOGEwNTExN2Q5ZTRjMmRhNGU1MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso6nbYH2RDffBzgJLo4G5Ygclnn/
m0o2SJZyQOIqGYFWYGlu5kOoaZM7+i8J7GGJaRc7cv6ySS+vEA1s1uQdAolT0Lli
VFiGRD2y9Loiv6wSUgAijj6lU7No36vEicWaqI3FJ/osTEHRpvx2o7BVLlnDb/6J
RBE2k1oHXsDXSZ4RlKYMm6FhcLLfO6BCnnAU2tT+ydrZX0tIIJdFUdVNQsqZQhjS
WMHjbvs8Gls/71FtirLrLDv1HQahVvWQs8fuHnesqfAAIO41/pLZU9m4YBjGFqRS
DDeKS3yd71BbmDB50soujTiP0OmxGnIC9MFee+4tfPw906Tqo99fC/MVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExx+9QcZnm+D9igURfZ5MLaTlFFMB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxah+Q2Jw
Z6+K2epj/FgXIeij8TAPe3LFTeZ7vKlOCAF3jTizDG51LyEFSFriHYOjwUwL1Ogv
XurSsF0ItUYHxMRBtG3zv4GE60crDDRTqtbLmjvP1KFwIbPoUAzLGMsz12rXpEAF
gtxmanybX0Y8za8qwH4Zn2QBPZmH8QXXZmIN83nfHvzBf3L2llwMQL9SmJZR5PbT
IBAW/sjJJprd/ucoK1WaoKV6Z81IjECswttAtP2obL9CWgEfhhUIHpMtm1zIoapD
d2Db+y3bFUe3NOjo189iI4C+EtQcp44lnI7Oe7IAq7J95vWDsHsmqFeSbxs4QOzS
JBmKkTZMvcLC7A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:05:33 2025 by rpki-client