This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          CKn0MtbGE61NeC55xSpmIFaKjqjq3Z7wSIH00/OZxEQ=
Subject key identifier:   12:46:92:CE:D7:E6:73:94:9D:21:6C:C3:E1:DA:34:00:F0:2D:C9:AD
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       019AF0882B78681FEE49D32399855A8E898E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          1785
Signing time:             Fri 05 Dec 2025 22:00:46 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:46 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:46 +0000
Files and hashes:         1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=)
                          2: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=)
                          3: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: pPyKcxGSN/Cq7TKAwonqlLgu2xNDXcqlfldD0PVVYKw=)
                          4: 8reLGqB61-jGtDKEZ2MokroH1bY.roa (hash: trioYVb8wl4JqGW5/WRvXsJw8/ZNxSABvxmUlklD8wI=)
                          5: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=)
                          6: NxRrglg9z7QgupLz2wQSQ7EX5Ew.roa (hash: swibubg/GpdzdJCQS09t6LuWYsBmSLJkKcOcxwxVKk4=)
                          7: RPNVta1i_68ETzE6TtaaOFHYjFg.roa (hash: FJ6/94/8Wm2f6M9BRBCD4vKtrBrwPPP4N1wQnShAIwQ=)
                          8: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
                          9: SrJeddq77t2qVjJA8sHAqzGCYgQ.roa (hash: xNhv2STaKwq69UqwZMaKfsYrMSyGjuEjP/QBIIf/pKY=)
                          10: WUOj7q7caeNuF2NA52tqE_pMcw4.roa (hash: xuYnwxDWmHDBu/SvXJhLivsRJT8nUKL6jpxmRmy+O+k=)
                          11: aZPp_cV5jr5aukOafXhVZHLOxO8.roa (hash: HiVo5n2AfzX/D2YKvojUG77iVNrUKo2LAmIGlr0XbVQ=)
                          12: goiFRwOZl4s-9eBS6-ty9Aa39xg.roa (hash: v1XADcYkOBOq2ag0EAvzsyypI+irjQ9kDOaWYQtUUzg=)
                          13: mVRVMgeHIiRHH1B9AopIEK5wFXc.roa (hash: ZAiJ6w5hC5qYt0YAF2q1Nq0LbIcMdmay3YR/TW7dcS8=)
                          14: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=)
                          15: xqrG1-afUyLJs-76v_kaVff1bzQ.roa (hash: qv2oTeJPi+2iZxHlxw+NMd9cTjH6NJtDH3DW5nEIJZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:2b:78:68:1f:ee:49:d3:23:99:85:5a:8e:89:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Dec  5 22:00:46 2025 GMT
            Not After : Dec  6 22:00:46 2025 GMT
        Subject: CN=124692ced7e673949d216cc3e1da3400f02dc9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:11:9f:43:c7:0b:3a:34:d4:1b:62:30:77:
                    d3:bc:b2:a7:8f:cf:1f:5d:5f:f7:59:02:db:ee:e7:
                    15:e6:47:92:cd:f7:df:8b:92:50:f0:04:5d:6a:ab:
                    17:06:86:7b:07:8c:17:12:86:7f:5e:94:04:4f:2b:
                    8c:a1:09:24:76:21:9b:c6:89:ac:a7:b4:4f:ac:06:
                    36:e7:d5:11:9f:47:26:08:9e:34:7a:9c:79:23:ef:
                    fe:e3:01:c5:5a:dd:60:64:3f:58:28:35:eb:4e:9e:
                    fe:2d:2d:b7:e4:33:d2:c2:a4:3b:a4:8e:14:47:4a:
                    90:41:8d:1e:90:81:75:be:e9:34:94:b7:cf:30:d8:
                    c8:a6:0e:20:0f:60:66:cc:92:18:ed:1c:e6:33:40:
                    e5:0d:da:c6:d2:de:3c:80:dc:63:ca:34:73:bd:c1:
                    6e:7e:58:6a:4c:92:7c:31:f3:6a:a2:70:b6:86:63:
                    55:ed:34:2f:10:e6:b4:48:9b:69:a1:01:6d:58:6b:
                    64:60:4b:8b:03:dd:ac:b5:11:8a:db:7d:93:16:ff:
                    89:74:5e:86:ac:c7:c0:96:cb:27:75:1f:65:fc:d6:
                    cf:9f:55:9e:f3:9b:5b:03:50:eb:1c:7b:11:0d:1a:
                    1e:e2:d0:1c:2c:e5:00:0d:7b:41:17:d1:d5:eb:98:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:92:CE:D7:E6:73:94:9D:21:6C:C3:E1:DA:34:00:F0:2D:C9:AD
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e2:7b:0a:87:e2:4a:58:68:64:a4:dc:a5:cb:1d:91:43:6b:
         2a:77:d0:88:52:e5:e4:54:c7:11:ef:ab:81:f1:80:b0:b4:68:
         d7:b0:a2:9d:70:3b:3e:d7:f2:0e:91:77:0e:01:42:ad:3d:65:
         23:58:b7:07:39:71:b4:9e:67:b2:52:de:fc:37:5d:bb:57:ae:
         fa:fd:06:95:69:19:31:2e:a2:6b:61:4c:ba:6b:b7:02:e3:a3:
         16:99:ed:f0:63:66:7d:01:68:26:94:14:72:53:3d:84:4f:4c:
         5e:c2:24:a0:21:e5:80:33:6b:23:f9:26:53:a1:ce:8f:94:75:
         cf:f1:a7:cf:3f:cb:69:9a:92:be:05:07:15:ce:58:48:89:38:
         05:43:9f:6b:ad:75:8e:6b:64:c9:af:2c:7d:b7:7c:c2:11:14:
         22:52:80:00:f4:77:1a:4a:21:76:00:55:d5:5b:40:e1:88:ad:
         fe:2f:26:0b:fd:5e:22:13:16:eb:5f:9a:30:11:2c:bb:04:b8:
         1c:8d:f4:31:b1:ea:25:c0:08:71:dd:79:36:ca:32:42:02:0d:
         df:8f:f9:41:ff:05:97:ca:7c:e2:71:f7:22:a9:a4:f7:ee:66:
         38:12:b5:bf:96:ee:9d:8f:a7:40:57:c2:51:62:a1:49:e4:b7:
         52:0b:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:27 2025 by rpki-client