This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File:                     v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier:          /yiI8j336cP0o+d8NKkneN45RohsfZr3nQNVpMfHFok=
Subject key identifier:   DA:C0:3D:E4:57:50:FC:3C:91:13:0E:CD:F8:FF:B9:BA:F9:7D:BB:63
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer:       /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial:       019AF5E5DD12A75987204E0BE37B159E007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number:          06AD
Signing time:             Sat 06 Dec 2025 23:01:13 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:13 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:13 +0000
Files and hashes:         1: pboVQ10OVYeGWBMHDVwDZVva2fk.roa (hash: iFWLteNFz6o7RzB0SZPhCmPT1qzZnuVT432zm4INMFA=)
                          2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: 0eB0991Y7cpvZI23MuVu/iLO+ASrfvXqtYqlNBvvlv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e5:dd:12:a7:59:87:20:4e:0b:e3:7b:15:9e:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
        Validity
            Not Before: Dec  6 23:01:13 2025 GMT
            Not After : Dec  7 23:01:13 2025 GMT
        Subject: CN=dac03de45750fc3c91130ecdf8ffb9baf97dbb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:e3:4c:81:1f:57:be:56:4b:8d:5c:05:d6:
                    bd:82:db:28:45:3c:d9:ae:d0:41:fa:08:d4:98:72:
                    dc:be:45:57:74:ac:a2:78:e7:e6:99:c6:bd:14:3a:
                    ef:33:f7:fd:51:9b:1e:91:54:f3:4a:27:82:e8:27:
                    bf:67:f5:c5:23:78:df:cd:4f:5a:44:22:e2:ac:f6:
                    3c:58:5f:5d:9e:60:6e:56:6c:52:6a:a2:8a:28:d2:
                    a5:39:37:e8:65:19:2d:7c:5b:5d:e6:5c:65:18:d5:
                    7b:20:42:6e:40:75:07:fc:56:3a:e3:29:af:34:3d:
                    83:a6:7d:b7:9e:11:3c:33:bc:13:3a:82:df:dd:14:
                    1e:b4:10:06:fc:20:5b:26:03:4e:1f:3e:60:ef:a8:
                    14:22:b2:ef:2a:b0:ef:77:26:38:64:eb:62:f0:90:
                    31:42:76:fe:fb:89:15:85:fe:b8:fc:08:b9:14:89:
                    2e:bd:ef:dd:c1:40:66:35:36:23:e3:f6:6a:1e:03:
                    41:56:9d:64:62:4d:80:8d:ff:60:44:02:3d:ee:b4:
                    46:d1:7e:48:06:7b:f2:f7:83:96:18:95:c2:01:f2:
                    ca:9b:41:47:2b:31:9a:91:72:a9:1a:18:aa:a5:20:
                    b2:94:5f:3c:8a:2e:19:4f:8c:47:6f:54:62:0d:54:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:3D:E4:57:50:FC:3C:91:13:0E:CD:F8:FF:B9:BA:F9:7D:BB:63
            X509v3 Authority Key Identifier:
                keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:42:53:f0:a2:32:b9:79:b9:2c:fa:ed:94:7a:1a:99:65:
         28:e5:c0:92:b6:83:64:3b:16:02:a1:a7:10:b3:5d:18:c7:3e:
         1d:3f:ef:49:3e:63:f5:80:06:17:5e:19:35:36:98:18:06:45:
         af:0f:15:65:5b:62:69:44:e4:ba:d1:ce:71:cc:ab:49:c3:7c:
         6d:a1:22:7a:45:3a:36:22:52:0f:9c:f0:6a:90:2b:70:52:c8:
         a7:7c:96:c8:2d:fb:3b:2c:63:8a:06:69:fb:83:5b:cd:09:b6:
         27:4a:2e:b0:d7:0d:11:c1:07:d0:52:d1:95:6c:01:8a:42:43:
         f0:f3:97:12:d5:6b:76:c4:b5:d7:e1:c6:4d:ab:33:5b:79:85:
         ad:ae:7e:a5:cd:da:18:33:c6:44:5d:09:98:60:f6:2b:78:66:
         eb:b4:97:82:e2:58:5f:76:85:47:27:5a:a8:f9:73:16:50:d4:
         36:21:bf:5b:f5:bf:20:63:13:a3:79:ed:e5:2b:f7:b9:08:88:
         29:fc:c4:97:90:1d:34:fa:a6:67:eb:e3:02:7c:4e:e1:d6:ed:
         f2:34:1c:0f:09:eb:15:6f:73:e7:c1:87:c3:8c:e3:06:58:53:
         8b:0a:86:2f:51:13:0c:a8:17:79:b8:5c:46:d2:69:a4:bc:91:
         39:3b:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:59 2025 by rpki-client