This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          Ph5HpVGWHQ/h+HlY0Kn1hSYpX7Q8LNCjMO2cphqJzFA=
Subject key identifier:   93:8B:C8:3A:BE:1B:B1:30:C9:A9:A2:84:D6:37:A3:C4:8C:B3:FC:E3
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       019AF50A5C333477578BC4BA7918A7F7EE8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          176A
Signing time:             Sat 06 Dec 2025 19:01:28 +0000
Manifest this update:     Sat 06 Dec 2025 19:01:28 +0000
Manifest next update:     Sun 07 Dec 2025 19:01:28 +0000
Files and hashes:         1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=)
                          2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=)
                          3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: 93WPG4mxf0KhM/lBFatPF5TLKbRpZUSZRns5zsGWYHk=)
                          4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=)
                          5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=)
                          6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=)
                          7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
                          8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
                          9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=)
                          10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=)
                          11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
                          12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
                          13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
                          14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=)
                          15: zlkXUyhZ4IG5yixTeX8Zlu2XIc0.roa (hash: cWgGeGhxrJ9rs3dRl4+QpI+uA8NpZSK53ZDqjWD1dvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0a:5c:33:34:77:57:8b:c4:ba:79:18:a7:f7:ee:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Dec  6 19:01:28 2025 GMT
            Not After : Dec  7 19:01:28 2025 GMT
        Subject: CN=938bc83abe1bb130c9a9a284d637a3c48cb3fce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:0f:18:2b:65:38:e8:af:f9:93:7a:c5:4f:
                    8c:4b:40:be:5a:03:a2:b5:0a:27:d7:70:55:4c:0f:
                    04:aa:dd:3a:51:4a:b1:55:92:83:2c:f0:0d:d6:bb:
                    38:1e:db:09:74:bc:73:3b:66:e5:4b:33:18:60:c6:
                    c7:b3:e9:70:a7:d0:46:a9:89:02:23:e6:c1:84:dd:
                    88:01:fc:35:84:d3:c5:8a:68:d7:b4:47:e6:01:1a:
                    78:39:75:af:fb:38:85:3b:0a:51:86:d6:4c:c4:05:
                    b7:0e:be:90:b5:6d:98:15:ca:b5:63:57:4b:1a:9f:
                    a1:16:99:c9:07:ad:70:49:a7:b2:ac:3a:bb:5e:95:
                    e5:e5:19:05:7a:52:2e:43:e3:e3:b6:eb:bf:66:c2:
                    5b:f0:7b:59:5c:bf:36:92:42:21:df:fd:4e:df:7f:
                    e3:aa:0b:f6:60:67:78:bb:9c:58:7a:8c:86:92:8a:
                    db:b7:36:2a:e2:0c:a1:15:8e:c2:38:0d:f1:64:d5:
                    ce:36:c9:e3:e7:f5:a2:1e:66:b2:cc:fa:8b:24:6b:
                    ae:ca:d6:c4:22:42:b0:85:02:ee:de:e5:62:51:7d:
                    d7:f9:cf:a7:88:e3:3b:f0:0c:64:2d:89:62:7a:07:
                    f8:c5:df:f9:5b:47:58:55:23:2f:c0:53:58:26:6a:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8B:C8:3A:BE:1B:B1:30:C9:A9:A2:84:D6:37:A3:C4:8C:B3:FC:E3
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:35:60:ff:39:26:ae:48:87:84:d3:c7:1e:d0:a3:ac:c7:
         37:2f:a8:3a:e7:c4:ee:06:6a:bd:28:74:00:59:4c:70:4c:f4:
         0b:7e:9e:ce:9a:4e:25:a0:aa:11:b1:f2:3d:ba:24:90:0d:38:
         0d:d3:10:04:59:76:c1:eb:13:07:7b:7b:e6:70:b0:1a:8a:1e:
         e3:b9:c8:38:31:ab:c9:5e:e3:1f:7d:1e:de:c5:8b:20:89:34:
         d0:a8:ea:77:fa:10:a8:88:f6:34:a4:9f:e8:23:0a:c4:f5:c1:
         7f:ec:fe:26:48:3b:0d:b6:73:d6:a3:11:30:ba:41:30:39:2f:
         57:30:01:d1:d0:7c:88:91:6a:36:e8:cb:8c:f8:9e:07:d1:ff:
         4b:e1:9a:b1:c0:12:e5:c6:96:5a:57:bc:10:5a:4c:1a:2d:87:
         09:35:6e:62:47:a7:10:40:05:d3:84:cc:b8:d9:2c:2f:97:58:
         98:60:dd:9f:11:20:c3:85:9f:66:b1:09:ed:c5:88:29:3e:bc:
         57:56:f5:ea:70:a3:a8:f4:b8:cb:22:7f:b4:71:46:d3:64:f0:
         61:1a:98:bb:3c:b2:e7:3f:99:db:ac:70:0f:65:97:d0:e8:f4:
         7f:a9:34:dc:f9:ac:f2:6c:57:96:58:c1:a0:df:3d:14:b6:e4:
         1f:8b:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:21 2025 by rpki-client