This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File:                     v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier:          0l+FpM2pkeOs55hJ/OO09HyCUGHm/4pdYoiPCdGBznU=
Subject key identifier:   4F:70:D2:38:1C:65:63:15:B7:E9:1A:9C:14:D5:8F:1B:DA:B6:71:22
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer:       /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial:       019AF3F81031B2E5DC26DEAD0C5D4002FC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number:          06AC
Signing time:             Sat 06 Dec 2025 14:01:51 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:51 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:51 +0000
Files and hashes:         1: pboVQ10OVYeGWBMHDVwDZVva2fk.roa (hash: iFWLteNFz6o7RzB0SZPhCmPT1qzZnuVT432zm4INMFA=)
                          2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: Knq+TMg3BgkB1qim6DcFjXLH4QoOxDATu5g/cvaOXIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f8:10:31:b2:e5:dc:26:de:ad:0c:5d:40:02:fc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
        Validity
            Not Before: Dec  6 14:01:51 2025 GMT
            Not After : Dec  7 14:01:51 2025 GMT
        Subject: CN=4f70d2381c656315b7e91a9c14d58f1bdab67122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:57:5d:08:6b:a6:5d:f4:59:04:1d:91:59:
                    b6:65:25:48:43:c1:47:06:ba:fa:9f:c4:6c:e0:b1:
                    30:69:82:03:50:ac:e8:85:f7:f4:55:fe:54:86:8e:
                    79:b8:30:85:cc:22:a1:fa:31:55:e5:a3:6d:44:0e:
                    ab:93:51:59:c7:b5:f2:01:5c:04:41:2c:c8:6c:4b:
                    33:1a:c0:f8:cf:34:ef:42:46:24:b9:a6:86:79:97:
                    7f:60:a7:19:00:02:29:77:35:00:b9:fc:ea:07:1c:
                    23:22:02:b2:e3:63:dc:fe:63:4b:b4:10:24:4d:de:
                    24:fa:41:c3:ad:4b:69:e8:6c:6e:e9:0d:0a:71:f1:
                    de:f8:98:6c:8d:67:e7:52:c0:41:13:49:04:2b:af:
                    1d:c6:c5:a8:fa:ff:54:57:de:da:9c:31:c2:5d:09:
                    8b:b6:82:31:04:fe:53:9d:bd:4a:97:59:ce:78:85:
                    23:e5:08:51:99:48:2b:8f:4e:a1:bf:ac:cf:f4:fa:
                    2c:f2:e8:be:fa:f9:90:27:3d:c7:7f:b8:15:76:da:
                    8b:81:0b:c4:c6:78:e4:3d:c3:db:18:1a:12:a9:d4:
                    34:39:32:93:82:1d:0d:f6:ff:3a:3b:20:84:6f:36:
                    21:59:6a:f0:e3:dd:3b:e7:bd:81:fb:e8:52:5a:67:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:70:D2:38:1C:65:63:15:B7:E9:1A:9C:14:D5:8F:1B:DA:B6:71:22
            X509v3 Authority Key Identifier:
                keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:76:4e:1d:4d:0f:ef:ae:0c:57:71:c1:f3:4e:b5:4e:77:a4:
         68:11:31:49:8c:2a:ea:1b:2a:d4:49:17:e0:25:ad:e5:a3:67:
         29:35:62:4e:07:b9:9c:6c:4e:9f:5e:c8:28:fe:33:38:aa:a6:
         07:53:c0:ef:7c:a2:df:37:50:c3:5a:dd:65:04:03:8e:44:5a:
         4f:b4:df:6d:4a:64:c1:00:d2:5c:9a:a3:77:e2:f2:86:bf:c4:
         73:d4:f3:db:23:af:e3:9e:a2:75:32:a3:19:c4:72:de:10:a9:
         35:eb:d7:a0:89:d4:89:26:58:c7:25:20:7c:1f:dd:35:76:c8:
         69:f2:61:ef:6e:c3:67:bb:ba:4b:e5:af:b8:a5:b1:3f:b5:76:
         03:7b:75:9c:87:96:5a:6f:ba:0d:02:2d:bd:91:96:0d:d7:03:
         e3:65:e6:77:52:c4:83:49:cd:cd:5c:50:6d:4d:88:56:bc:ba:
         38:cf:c3:15:72:6a:69:b7:90:35:b5:08:91:32:82:b3:ae:9a:
         88:03:ba:22:a2:49:53:d5:5d:5b:42:a5:d5:af:eb:46:e3:d6:
         ff:3f:48:76:69:3e:9f:5a:54:c0:66:87:2f:41:e3:8a:3f:26:
         e1:b3:85:c7:76:5b:57:9b:89:cd:5a:d3:2f:cf:b6:4c:63:49:
         45:b4:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:28 2025 by rpki-client