This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          kznHESqh/VdDhLOE1qX8vwjZ9Nk111ZmYAN5zZbr9sE=
Subject key identifier:   77:6A:F2:88:68:F2:90:97:FB:B2:4A:4A:A7:17:48:70:55:6E:6F:1B
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019AF12E0689F9D2A23A07D03AC03FE0D9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          16ED
Signing time:             Sat 06 Dec 2025 01:01:56 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:56 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:56 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: sN3NPaqoPCK7ex7UfG2LIUDEK+240SXmBH0Vq9T+qOc=)
                          2: 8MrJou4jHWMvbrgNdX-4pxWfc90.roa (hash: WNU23R3SY6kHyJmbcKZj6sAJrT/H2apTu6VsmiUGadk=)
                          3: I2TVT7DNE2G9XXNPIvC7ssj4vy0.roa (hash: 5m+YSBm5ZTcuXSiyQRLawLxfa0qfeuRlBCs8VexXa7Q=)
                          4: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (hash: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=)
                          5: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (hash: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=)
                          6: w4zzq3GKAiXTtkaxwc19NwVaitc.roa (hash: J/2FTFkZfxRTxJNhlHUgf8n7TYgo+AXQ4IVYmjTCUKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:06:89:f9:d2:a2:3a:07:d0:3a:c0:3f:e0:d9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Dec  6 01:01:56 2025 GMT
            Not After : Dec  7 01:01:56 2025 GMT
        Subject: CN=776af28868f29097fbb24a4aa7174870556e6f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:a7:7a:f3:0d:c5:7b:d6:4c:17:7c:b6:46:
                    19:0a:d8:6c:6b:18:57:38:f7:30:30:63:2f:ca:09:
                    aa:e1:cf:7f:ec:e2:74:18:6e:3e:92:63:df:af:06:
                    96:65:56:56:b4:45:be:23:72:cf:82:e1:ba:45:96:
                    6d:b1:df:b0:f5:33:33:2b:55:d4:1f:80:e5:60:fe:
                    f3:78:2d:75:15:83:87:65:4a:44:ce:1e:bf:fe:57:
                    de:22:ce:90:ee:84:99:6f:1a:41:2f:51:b2:84:77:
                    85:09:66:1d:66:95:e0:9a:48:25:11:22:3d:aa:5c:
                    b9:72:56:d3:40:78:17:79:e8:38:e8:3a:50:d5:d0:
                    99:41:14:52:0a:44:36:ca:16:16:16:a6:c2:63:67:
                    b6:8c:25:20:e5:b5:3e:96:2f:c8:6d:af:59:07:a0:
                    cb:2f:bd:53:8b:12:3a:79:df:27:57:d9:a2:21:58:
                    77:89:6b:f0:dc:9a:e6:0d:eb:9c:71:3d:9b:31:4a:
                    39:cd:ee:6b:c0:05:08:60:2a:f8:8d:d6:f8:a6:68:
                    42:bd:df:d5:47:9f:2a:ac:c9:bd:03:fd:88:ba:0f:
                    3a:9d:b1:b8:9f:24:cd:c6:1a:19:17:1c:7c:a8:ba:
                    4d:21:5e:df:e7:64:44:e2:62:d8:e0:c8:8b:14:d8:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6A:F2:88:68:F2:90:97:FB:B2:4A:4A:A7:17:48:70:55:6E:6F:1B
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:31:96:f3:b2:76:a1:a8:30:39:f5:a4:ff:0a:34:52:c0:fc:
         14:55:eb:55:70:33:57:64:4b:c9:ba:cf:d5:07:a6:62:e7:bd:
         ab:26:33:af:69:1e:16:e0:0c:72:74:67:f5:19:b2:e6:d1:44:
         f6:bc:74:8a:ce:9e:fa:a0:3d:b0:6e:7e:17:dd:e0:d8:42:e5:
         fa:0b:68:f3:d6:8b:6f:37:37:c3:d9:a3:25:c8:76:e2:dd:9a:
         9e:4c:f7:3e:a0:82:05:36:45:88:da:cb:62:ee:fe:02:54:c9:
         f1:37:81:dc:4b:5e:0c:9c:86:de:ac:f2:26:e6:0d:ce:a1:7f:
         41:3c:35:aa:15:79:6c:59:04:70:ef:61:41:cf:ab:45:f2:ce:
         77:a2:f2:74:63:27:f1:48:92:92:17:e6:84:88:d7:62:f2:e8:
         c6:ee:00:aa:40:98:11:04:2b:51:6e:3f:e5:f4:b7:06:e4:c4:
         56:85:a1:88:66:51:e3:80:d5:ca:50:c2:56:cd:17:14:b7:a1:
         13:cf:27:07:27:ce:ea:8d:de:aa:9c:d2:73:a7:af:1d:dd:68:
         b7:ad:90:cd:fd:7d:c5:1a:6e:87:90:b8:a4:d4:64:21:c9:a0:
         44:c1:f4:f4:db:2f:73:96:09:63:e1:07:aa:44:4d:e7:36:bc:
         6e:87:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:47 2025 by rpki-client