This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File:                     BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier:          LmAJauS3DmyLM+jEm3eutaWGdoZ1ZveUykGkc34pK8E=
Subject key identifier:   02:1D:15:87:E0:F7:07:1F:E9:C6:99:9C:6E:6F:E6:8A:1D:A9:DE:F9
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer:       /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial:       019AF1646EB96271E3108AF54C24DC65E9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number:          143E
Signing time:             Sat 06 Dec 2025 02:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:22 +0000
Files and hashes:         1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: jj9LXPGkSb33x0pr7EuAYg1CT6hmbBNFS7fwfwIyOd4=)
                          2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
                          3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
                          4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:6e:b9:62:71:e3:10:8a:f5:4c:24:dc:65:e9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
        Validity
            Not Before: Dec  6 02:01:22 2025 GMT
            Not After : Dec  7 02:01:22 2025 GMT
        Subject: CN=021d1587e0f7071fe9c6999c6e6fe68a1da9def9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:8e:e0:7b:a6:b1:02:2a:81:9f:0d:51:89:
                    ad:97:37:a4:5f:77:42:22:8d:6e:38:a2:6d:71:40:
                    22:47:3f:1e:4c:18:7a:76:94:c2:69:53:18:f9:70:
                    c5:40:dc:d3:03:27:ab:ea:16:9e:2c:6f:bb:9d:13:
                    9b:96:f0:13:40:15:8d:bf:56:35:9e:62:04:68:b4:
                    2f:83:58:ab:de:a9:a6:1c:af:58:70:85:ef:76:72:
                    06:4b:82:91:7b:35:50:8e:1c:45:be:ce:4c:4c:6d:
                    48:6b:66:85:66:d1:56:fc:2b:37:77:3e:43:3c:76:
                    21:29:15:3b:5f:3a:a2:ce:26:23:76:cc:43:e9:4e:
                    d7:05:de:08:49:7a:2d:ba:86:79:2e:7c:e3:fd:f3:
                    97:65:af:f4:5f:4a:15:8b:51:26:7b:e7:f8:53:54:
                    a8:9f:eb:4c:99:c5:b8:0f:6c:0d:1d:ac:14:d1:66:
                    1c:36:1d:b0:b6:cf:84:de:af:95:8e:0c:89:d7:e8:
                    c0:de:a7:e2:3b:45:62:16:23:2a:3b:07:1d:fd:96:
                    90:0d:fc:81:2e:c2:26:81:85:55:98:20:08:e7:68:
                    b9:9e:aa:bf:ba:e8:38:57:fd:d5:8f:77:52:b1:3b:
                    bd:11:15:8c:91:d2:1b:4b:59:1c:d5:08:5f:e6:30:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:15:87:E0:F7:07:1F:E9:C6:99:9C:6E:6F:E6:8A:1D:A9:DE:F9
            X509v3 Authority Key Identifier:
                keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:4f:56:43:ea:a4:16:7d:26:2c:ee:35:58:35:f9:11:72:
         1d:5f:ae:8e:3b:ce:d6:b7:a5:9a:82:82:c8:1a:fa:af:92:22:
         5b:31:15:8f:19:bd:b2:bd:9f:8d:ba:8e:38:e6:91:e2:41:bc:
         0e:cb:cc:91:e0:68:b8:4d:8c:7d:77:d1:75:54:ae:ed:4f:b9:
         ef:07:f6:fc:3d:d6:1c:51:58:17:96:4b:9f:58:b9:c6:9f:b0:
         2e:1e:bb:1a:49:10:27:90:1f:43:cd:45:a1:bf:b8:b3:df:84:
         cf:83:80:08:3e:d8:3f:bf:be:53:e0:e4:c7:83:29:b0:f6:99:
         f6:59:ea:52:f3:bb:b4:d1:68:b6:24:cf:5f:23:3d:2c:41:cf:
         dd:df:97:ed:85:17:9b:14:e6:43:bd:13:4d:e1:68:89:83:62:
         f2:a5:23:08:07:3f:32:98:73:fa:75:2f:11:36:88:8e:77:cd:
         8f:30:a2:45:51:f6:7c:ca:af:ca:60:52:72:5e:a3:21:10:ac:
         b5:13:18:69:c2:65:87:7a:ad:d4:af:5a:67:20:6a:72:a0:cf:
         ec:86:2c:44:ed:e1:63:f1:c5:2a:40:9e:6c:c4:9a:2d:ff:2c:
         cd:60:de:3d:4b:9e:09:24:95:7f:a4:4f:14:5a:53:03:1f:b6:
         e5:f6:6b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZG65YnHjEIr1TCTcZendMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz
ODBiMmIwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD
EygwMjFkMTU4N2UwZjcwNzFmZTljNjk5OWM2ZTZmZTY4YTFkYTlkZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmOO4HumsQIqgZ8NUYmtlzekX3dC
Io1uOKJtcUAiRz8eTBh6dpTCaVMY+XDFQNzTAyer6haeLG+7nROblvATQBWNv1Y1
nmIEaLQvg1ir3qmmHK9YcIXvdnIGS4KRezVQjhxFvs5MTG1Ia2aFZtFW/Cs3dz5D
PHYhKRU7XzqiziYjdsxD6U7XBd4ISXotuoZ5Lnzj/fOXZa/0X0oVi1Eme+f4U1So
n+tMmcW4D2wNHawU0WYcNh2wts+E3q+VjgyJ1+jA3qfiO0ViFiMqOwcd/ZaQDfyB
LsImgYVVmCAI52i5nqq/uug4V/3Vj3dSsTu9ERWMkdIbS1kc1Qhf5jDa4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIdFYfg9wcf6caZnG5v5oodqd75MB8GA1UdIwQY
MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt
NGJhM2ZjMzQ4NGNlLzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl
LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb1PVkPq
pBZ9JizuNVg1+RFyHV+ujjvO1relmoKCyBr6r5IiWzEVjxm9sr2fjbqOOOaR4kG8
DsvMkeBouE2MfXfRdVSu7U+57wf2/D3WHFFYF5ZLn1i5xp+wLh67GkkQJ5AfQ81F
ob+4s9+Ez4OACD7YP7++U+Dkx4MpsPaZ9lnqUvO7tNFotiTPXyM9LEHP3d+X7YUX
mxTmQ70TTeFoiYNi8qUjCAc/Mphz+nUvETaIjnfNjzCiRVH2fMqvymBScl6jIRCs
tRMYacJlh3qt1K9aZyBqcqDP7IYsRO3hY/HFKkCebMSaLf8szWDePUueCSSVf6RP
FFpTAx+25fZr/w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:14 2025 by rpki-client