This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          m1t/y1aq1kbhovCFANedGGaRHXK0ua1zyej+NlxC2WQ=
Subject key identifier:   DF:83:91:31:65:AC:4E:24:12:0F:F9:04:77:36:9D:C4:7D:C1:CA:60
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       019AF2E43F6D3B23CF95E44853638C45DEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0EB3
Signing time:             Sat 06 Dec 2025 09:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:35 +0000
Files and hashes:         1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: rWbudVVxUZUJ0g9JNyMmkpuyz6a6h3IsYtU7pjmka3A=)
                          3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:3f:6d:3b:23:cf:95:e4:48:53:63:8c:45:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Dec  6 09:00:35 2025 GMT
            Not After : Dec  7 09:00:35 2025 GMT
        Subject: CN=df83913165ac4e24120ff90477369dc47dc1ca60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:90:2d:2c:25:80:75:b6:81:ff:78:4a:9a:5f:
                    e0:24:4e:a5:7c:08:53:58:a9:d2:ef:a9:41:a4:6c:
                    07:4d:7e:95:c3:e6:93:2c:fa:44:b7:bf:f7:0c:23:
                    59:18:24:69:41:e9:ec:77:67:6f:f2:21:16:76:9b:
                    51:29:7c:f3:b4:6a:6b:e4:69:db:73:79:a4:ef:3e:
                    64:34:10:63:db:9f:0b:7b:a4:11:9f:bf:49:2a:df:
                    40:39:61:c2:ae:c7:8b:cb:92:b7:65:78:c6:31:e8:
                    29:96:d2:2e:08:67:44:94:50:80:1f:78:6e:bd:5e:
                    27:50:d1:ed:36:87:4e:8d:23:60:c6:a4:ea:0b:9b:
                    3d:ee:b0:d8:26:a2:1e:e6:eb:f4:1a:02:4e:2c:99:
                    02:0e:d4:18:17:7c:08:84:f6:12:2e:20:93:22:ab:
                    c0:eb:6c:97:dd:20:cd:f8:35:79:0d:43:ce:c6:48:
                    a5:e9:d8:89:4d:40:3d:2d:80:51:d0:c7:d7:ac:d6:
                    c2:b6:15:2e:df:2b:53:62:50:e2:14:f2:4c:0a:d6:
                    58:65:7f:92:67:69:36:0a:9a:ad:6f:4d:e7:cd:c4:
                    de:ed:a2:7b:33:56:16:01:32:7e:ca:79:26:55:89:
                    48:65:97:f6:51:b0:87:3d:b1:61:47:d0:50:7f:2e:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:83:91:31:65:AC:4E:24:12:0F:F9:04:77:36:9D:C4:7D:C1:CA:60
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:13:3a:d7:b9:e6:73:83:59:87:01:2f:db:3d:e9:ff:83:51:
         8c:0b:44:17:c2:38:5e:68:43:43:71:c6:38:ee:dd:a7:7c:29:
         12:69:33:7b:f9:74:be:61:5a:8f:86:bf:7a:a8:3a:e9:93:ff:
         f1:1d:c8:ec:7b:4c:3e:e9:8d:51:a7:fb:1a:78:16:8e:f1:c8:
         18:d8:b4:90:d4:b4:4d:f6:2a:b0:9a:2f:e1:3a:2c:36:2a:9c:
         b8:31:bd:77:ea:d9:d9:a3:c3:75:99:59:ae:63:0d:3b:b5:71:
         5a:e5:7d:bb:c4:a1:d1:ac:cb:75:18:ce:86:27:8c:b7:c0:b7:
         23:e4:68:ea:67:1b:be:cd:96:02:04:05:f6:e1:bc:ea:79:7f:
         a9:1b:8b:4d:29:e0:1d:5c:dd:3e:b5:e2:e6:a1:c8:12:73:39:
         c1:d6:63:34:b0:5f:4e:ac:c9:2d:3b:b9:1f:76:02:62:4a:8d:
         8b:f0:fa:c3:55:a5:40:c7:06:b8:ff:01:9d:44:e1:7b:83:0b:
         cb:58:14:f0:7a:17:aa:fd:13:c2:fe:79:58:51:bc:ae:b1:0b:
         08:8c:69:36:be:89:2e:cc:ac:d0:b4:48:77:e4:70:19:47:cd:
         df:e0:a1:d8:35:c6:99:a5:d3:e6:cf:f3:48:48:b6:bc:ec:3e:
         fb:ad:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:37 2025 by rpki-client