This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File:                     b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier:          mFUCj5XcBAjAYtDCyAQc3slvX2tI6A0Jte6KbrkQgZU=
Subject key identifier:   2B:6B:C5:AC:AD:D4:AB:E6:65:78:5B:E9:05:D2:32:89:F5:78:FD:5D
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer:       /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial:       019AF0889E721B797121356750328EC6FC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number:          1768
Signing time:             Fri 05 Dec 2025 22:01:16 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:16 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:16 +0000
Files and hashes:         1: 383xruHS9gjuKR0YjGqV2ugUrGs.roa (hash: yHlfc6+ACf2WRV0TaB1YAv4EeJOrblQempkg7RUI1mU=)
                          2: ZNc2R38IFzIz7kBedhBa4EVwaEk.roa (hash: EpA69Eq6Q+KV+gO/Q6uVQrzX/PppOsS4DI+GMDk1VRA=)
                          3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: myn2S+zO4ZDoF2OHZSmn4V42kra/cpxd4oxyF8+PDrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:9e:72:1b:79:71:21:35:67:50:32:8e:c6:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
        Validity
            Not Before: Dec  5 22:01:16 2025 GMT
            Not After : Dec  6 22:01:16 2025 GMT
        Subject: CN=2b6bc5acadd4abe665785be905d23289f578fd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:2e:34:cf:94:a4:1f:d6:59:f1:96:6b:b9:
                    05:4d:c6:5e:72:ed:27:75:b7:26:cc:ce:54:7c:25:
                    9b:b4:03:86:ab:4d:73:96:ef:39:54:04:e6:6b:eb:
                    b0:b3:f8:92:9b:52:00:a6:ff:6f:23:91:90:e8:1e:
                    9e:95:87:5f:37:dc:f6:1c:91:e6:e1:96:d5:12:91:
                    8a:76:48:c6:0a:70:71:b5:50:bd:3b:11:1e:7c:e3:
                    a5:5f:41:1a:65:4a:ae:23:d5:f9:5b:6a:d2:49:d9:
                    5d:c5:52:7c:c9:ff:ae:d1:ce:b5:35:f2:2b:e8:1d:
                    8a:a2:27:c4:6e:b9:fd:1a:d7:19:80:1f:ba:eb:ae:
                    3a:19:58:ab:f1:5c:70:d6:5b:f2:e1:20:58:8d:4a:
                    36:df:52:08:a0:05:be:96:49:a8:08:13:c6:47:04:
                    af:9f:9b:1e:94:f0:e8:e6:7b:85:23:61:ef:de:b5:
                    32:58:ed:b0:43:ee:5c:f2:28:35:4d:dc:4b:d1:8f:
                    7a:fa:93:b1:3d:da:f4:3c:5d:b4:5f:52:d2:73:0e:
                    d0:42:ed:14:ed:2d:91:a8:08:7d:a8:d8:2d:9a:3d:
                    ca:eb:ce:56:6e:12:19:63:b2:f7:e7:f2:71:af:f0:
                    fc:76:5b:95:c5:29:6b:9e:07:09:c5:4c:71:f0:7f:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:C5:AC:AD:D4:AB:E6:65:78:5B:E9:05:D2:32:89:F5:78:FD:5D
            X509v3 Authority Key Identifier:
                keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:aa:ad:e9:c6:3f:54:29:d2:d5:48:31:c5:fe:d1:4f:ad:
         9d:02:a0:e7:68:4f:2b:cf:35:26:2b:0a:80:42:8d:e0:6a:2e:
         c4:79:3c:74:4c:70:7d:f4:46:bb:e9:a2:ad:c6:49:e3:fb:c5:
         61:51:52:49:fd:63:e0:96:61:7f:da:f2:7e:46:74:3a:0f:c5:
         b1:c9:9d:b2:59:ec:96:c7:40:bf:c3:a8:6a:ba:29:38:9c:d2:
         ad:ac:e8:f7:f2:9f:49:0c:c9:20:a4:c9:f4:28:04:4e:26:1d:
         c7:bf:e6:8b:60:10:09:5d:9a:9e:bd:47:89:b5:9a:0f:00:94:
         af:37:55:1b:46:49:09:6b:a1:a4:06:20:ff:70:eb:d3:e0:d5:
         3b:69:f2:15:0c:ca:15:15:62:2d:9e:a4:91:71:d3:4f:a9:5a:
         d3:4d:3b:b8:e3:56:ce:f2:82:3d:ad:8c:24:bb:d5:95:29:7b:
         46:8c:3e:67:bc:c7:0f:b8:1d:24:cd:3f:3d:9f:da:b1:9c:18:
         c4:13:aa:ed:4e:cd:c9:d7:be:3e:bd:bb:a7:4d:6f:d2:de:49:
         7e:d6:02:ec:1d:ac:b0:fb:9c:c7:12:b3:34:9a:80:ec:19:66:
         69:74:f6:fa:de:8f:49:6c:19:1b:da:91:29:90:82:8f:a6:a3:
         64:d9:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:01:19 2025 by rpki-client