This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          yNFcyJQfhRhsbbEWzAOcQZZ+BF8/QBiun0sDmcUZcXk=
Subject key identifier:   5E:3A:26:A4:FD:99:68:67:67:F1:8B:36:52:7F:67:C1:E7:F2:C1:41
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       019AF12E01885626E611BD5A753345898215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          110C
Signing time:             Sat 06 Dec 2025 01:01:55 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:55 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:55 +0000
Files and hashes:         1: 1o1EO_QQPmnZ8plF5uOUWfPej3I.roa (hash: ih+zsElPgdS9pl3aJWT5y3rEqtTRMgUDV5NvhBE9Nxk=)
                          2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: VlFlYuK51Hu5kSlHssY43VkU2u745DdI4PwEzhafO6I=)
                          3: KwwH1tV59uIMDd5TAGspH19uR4o.roa (hash: x1yYHpItXbsfzuH9Uo0WPpObfj69kidI+dgaDxqjw94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:01:88:56:26:e6:11:bd:5a:75:33:45:89:82:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Dec  6 01:01:55 2025 GMT
            Not After : Dec  7 01:01:55 2025 GMT
        Subject: CN=5e3a26a4fd99686767f18b36527f67c1e7f2c141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:36:58:c4:37:99:20:e9:24:b6:cc:d8:0f:
                    19:bf:00:d4:60:8b:32:c8:3f:96:70:c8:45:22:04:
                    86:7e:27:9c:3a:6f:8d:09:1e:63:19:1b:7d:fd:a7:
                    c0:aa:5b:72:75:83:48:47:96:70:69:49:1d:3b:d4:
                    59:16:81:dd:62:66:c1:c1:06:7b:20:ef:e9:e2:a4:
                    c7:6b:86:6f:ee:ad:94:41:b4:6c:8a:53:12:a1:7a:
                    31:b4:73:b8:91:da:46:72:75:6e:2c:12:d4:db:f1:
                    39:d3:1d:af:27:5b:fc:8e:69:ab:39:d0:00:86:91:
                    69:7e:8c:44:f5:db:21:6d:b9:73:14:f6:7a:55:8f:
                    44:f8:95:24:82:0d:e8:46:e8:ba:91:48:79:93:9a:
                    fe:e9:67:b5:de:b3:59:79:3a:a4:e5:bc:a5:96:0f:
                    5e:15:49:1c:03:a1:9f:89:bc:ec:18:09:01:2f:22:
                    25:82:39:20:0e:f2:03:88:f0:40:6d:e6:d8:61:32:
                    56:8f:31:0b:7f:3f:f5:39:6d:99:96:05:65:51:7e:
                    e7:1e:ce:05:f4:77:1f:75:59:3b:d4:b9:12:c8:02:
                    cf:ae:73:69:4e:d2:15:6d:23:20:2c:41:27:e2:7a:
                    fc:eb:1d:80:86:a8:d2:b8:d4:7f:75:ae:0a:ce:f3:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3A:26:A4:FD:99:68:67:67:F1:8B:36:52:7F:67:C1:E7:F2:C1:41
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:8e:18:ea:2c:a9:56:93:04:2c:a1:8a:ed:7b:50:b1:6a:
         01:41:00:c4:e4:2d:99:11:22:bf:bb:7a:c1:30:03:ec:02:9e:
         1f:bb:88:9e:05:bb:a7:52:fd:2a:65:c2:0b:9c:24:2e:11:75:
         3c:3c:be:c8:92:65:02:05:9b:e9:1c:f6:28:4a:47:03:88:68:
         37:c3:79:e7:10:bd:3a:c1:25:15:29:80:67:e5:1d:04:6d:f5:
         65:01:ee:fd:8a:e9:15:c9:18:50:01:3d:9b:94:7f:ce:5f:8b:
         f7:06:d6:c1:98:a4:42:a6:09:c6:11:1f:5c:c8:ea:a7:fe:ad:
         d8:ee:61:3b:df:dd:59:0a:d5:99:c4:9d:4c:34:40:d5:f7:89:
         2f:94:5d:47:b5:63:af:37:59:b3:79:79:b3:ef:63:c2:04:13:
         41:85:41:fb:5a:ba:ce:03:9a:b3:f8:11:b2:fa:04:6a:87:be:
         84:97:04:9e:77:d9:50:ca:b4:d2:39:3f:09:ff:ef:04:d3:6c:
         9a:2e:8f:04:c8:78:18:59:20:c3:2f:2d:2a:b8:92:ab:f3:95:
         0e:58:c6:83:b1:f8:87:3e:78:7a:fe:ff:76:14:90:e7:97:41:
         aa:d0:16:ed:4f:1d:de:53:2f:45:0e:f7:40:c1:c2:7e:2c:72:
         29:50:ce:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLgGIVibmEb1adTNFiYIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhmOTE4MmI3ZGE0NDAwMzU5MWVlYWUyNTYwZjg0NTFi
MzM5M2EwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD
Eyg1ZTNhMjZhNGZkOTk2ODY3NjdmMThiMzY1MjdmNjdjMWU3ZjJjMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD42WMQ3mSDpJLbM2A8ZvwDUYIsy
yD+WcMhFIgSGfiecOm+NCR5jGRt9/afAqltydYNIR5ZwaUkdO9RZFoHdYmbBwQZ7
IO/p4qTHa4Zv7q2UQbRsilMSoXoxtHO4kdpGcnVuLBLU2/E50x2vJ1v8jmmrOdAA
hpFpfoxE9dshbblzFPZ6VY9E+JUkgg3oRui6kUh5k5r+6We13rNZeTqk5byllg9e
FUkcA6GfibzsGAkBLyIlgjkgDvIDiPBAbebYYTJWjzELfz/1OW2ZlgVlUX7nHs4F
9HcfdVk71LkSyALPrnNpTtIVbSMgLEEn4nr86x2AhqjSuNR/da4KzvNi1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF46JqT9mWhnZ/GLNlJ/Z8Hn8sFBMB8GA1UdIwQY
MBaAFOk4+RgrfaRAA1ke6uJWD4RRszk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmIt
NGRmNzI4YzU4ZDE3LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmItNGRmNzI4YzU4ZDE3
LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk72OGOos
qVaTBCyhiu17ULFqAUEAxOQtmREiv7t6wTAD7AKeH7uIngW7p1L9KmXCC5wkLhF1
PDy+yJJlAgWb6Rz2KEpHA4hoN8N55xC9OsElFSmAZ+UdBG31ZQHu/YrpFckYUAE9
m5R/zl+L9wbWwZikQqYJxhEfXMjqp/6t2O5hO9/dWQrVmcSdTDRA1feJL5RdR7Vj
rzdZs3l5s+9jwgQTQYVB+1q6zgOas/gRsvoEaoe+hJcEnnfZUMq00jk/Cf/vBNNs
mi6PBMh4GFkgwy8tKriSq/OVDljGg7H4hz54ev7/dhSQ55dBqtAW7U8d3lMvRQ73
QMHCfixyKVDOVA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:29 2025 by rpki-client