This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          dklu+8It9/vccfVdEKAG3DC/Qg612e45KA/6rnWSp7k=
Subject key identifier:   E1:0C:22:A7:4C:B3:18:CF:2C:88:C0:4A:0E:0C:55:AC:87:01:E4:6C
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019AF19B4CC65516960D9F9836F663B12C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          0855
Signing time:             Sat 06 Dec 2025 03:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:17 +0000
Files and hashes:         1: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: WophszynFSfBhCV324F33TqoDcBfMjyCYdMwcUlVEAY=)
                          2: DKwuyeTzcXlsjfEEUBHaEvjmjlY.roa (hash: xehl5t/wnL1MYEirEc3rgYVSjSjy0B0WsVEtPaCVdVQ=)
                          3: SQDJFyKznGtCKVmkEUnYaLhptpU.roa (hash: XEPlk5OXn/XLJYfgloRDlJ7X9N7ypjZHyh9xzsTH0Bw=)
                          4: WjYfnGn8JNGnSmX7_ykN8mRYE1Q.roa (hash: UrBT6jttsWOx1wSA3yMUtuOUpT7eYOhn9yPDk92V6lA=)
                          5: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (hash: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:4c:c6:55:16:96:0d:9f:98:36:f6:63:b1:2c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Dec  6 03:01:17 2025 GMT
            Not After : Dec  7 03:01:17 2025 GMT
        Subject: CN=e10c22a74cb318cf2c88c04a0e0c55ac8701e46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:fa:50:82:3e:07:2c:d8:f4:a3:49:03:e8:
                    42:25:92:4f:db:73:7b:be:6f:d2:e4:7c:60:32:91:
                    85:6e:29:e8:32:9c:63:53:fc:5d:06:fa:2f:dd:41:
                    c9:27:89:6e:bb:c7:1d:33:05:ac:1b:ff:6e:4b:4e:
                    de:8c:9e:59:4f:9c:b4:0a:0e:25:24:a4:95:d8:42:
                    a0:48:87:08:82:ae:34:7a:54:9e:7a:90:68:99:bd:
                    60:ab:85:10:a3:83:02:c1:0d:fe:09:c1:10:b6:c8:
                    61:7e:fb:8e:8d:52:0f:3b:c9:83:30:62:f0:86:dc:
                    27:e7:5e:77:72:69:b3:50:51:58:57:de:90:73:54:
                    17:0d:40:f5:96:6f:90:54:b6:05:f8:66:ed:45:01:
                    4a:5d:af:b9:6e:b1:ac:5e:7a:4f:53:44:8f:55:eb:
                    fd:f6:f7:51:22:01:e3:27:1e:d7:5d:46:e8:44:d4:
                    16:bf:fb:7a:fd:13:ce:5e:92:27:ae:42:bc:51:8a:
                    1e:7f:f5:a6:7a:22:4e:3c:a8:e5:bf:63:07:ae:37:
                    8c:76:0b:2f:69:57:34:72:ba:a5:33:ac:9c:82:af:
                    07:81:b7:84:c7:83:13:4e:d6:ae:99:ab:0b:17:94:
                    f6:c7:cf:7b:30:dc:d5:51:a5:37:8b:5c:58:8c:f5:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:22:A7:4C:B3:18:CF:2C:88:C0:4A:0E:0C:55:AC:87:01:E4:6C
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:0c:93:54:f8:d2:00:1e:54:fb:ad:7c:61:74:0c:1b:40:
         fe:f3:65:38:35:7d:5f:2a:98:0b:cd:78:9b:89:b2:c2:30:c2:
         63:ea:8b:fe:f0:bc:a0:3e:e9:24:89:38:aa:2d:36:66:d2:15:
         e2:28:a1:90:30:50:04:35:99:97:7a:ef:94:02:eb:1e:73:20:
         04:b1:84:9a:78:c9:89:eb:9d:c6:63:76:5a:ce:05:63:5b:6a:
         6a:05:24:a2:99:d6:78:c5:72:8c:68:99:47:cf:37:a6:75:c8:
         af:ca:40:9f:a4:c7:22:3e:c8:95:d3:3a:ce:dd:c2:84:05:a6:
         59:30:c3:70:38:e7:fb:37:d5:ce:02:81:46:cc:e3:40:7d:30:
         96:86:f1:bc:6f:c6:f3:5e:0a:c2:21:e9:38:77:67:d6:35:01:
         8e:d5:38:c6:c1:27:02:06:25:ec:f3:6b:da:5f:3c:c8:33:ab:
         6e:06:be:65:a0:21:69:3c:cc:61:8c:e0:f8:b3:e1:dc:c1:a2:
         12:60:4b:08:39:20:59:d5:7e:ec:d7:14:87:77:c2:f7:38:9b:
         1a:16:61:b1:dd:b4:f4:b6:c6:60:d4:19:71:c8:c2:05:1c:64:
         eb:66:93:74:2e:e3:ea:f0:d7:f8:2c:a7:4f:87:82:b4:9f:4e:
         0f:76:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:03:22 2025 by rpki-client