This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File:                     E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier:          JMnbnETSvvGmikgvlA/3X18mLNaRdc5vJrOEAhsDp4M=
Subject key identifier:   AF:54:A3:6D:9F:79:18:39:36:63:01:AE:1E:E1:37:C8:BA:5E:DE:5D
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer:       /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial:       019B2D0C2CCB87053F05AE029567C6287FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number:          1292
Signing time:             Wed 17 Dec 2025 16:02:11 +0000
Manifest this update:     Wed 17 Dec 2025 16:02:11 +0000
Manifest next update:     Thu 18 Dec 2025 16:02:11 +0000
Files and hashes:         1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
                          2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: +SPUceCtSnN1U4BjI8Klq+MVDy/HgCIl5Lccw4injPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0c:2c:cb:87:05:3f:05:ae:02:95:67:c6:28:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
        Validity
            Not Before: Dec 17 16:02:11 2025 GMT
            Not After : Dec 18 16:02:11 2025 GMT
        Subject: CN=af54a36d9f791839366301ae1ee137c8ba5ede5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:59:29:eb:56:0b:10:36:e0:ab:f9:ad:60:5e:
                    68:9a:d0:2b:23:71:21:f3:cc:33:dc:6c:c8:d3:5c:
                    62:be:69:36:06:2e:0e:b3:67:e3:0f:d3:21:e2:f1:
                    f7:73:6d:be:8b:c0:41:01:b0:09:cd:fc:96:fd:3b:
                    9f:e8:6d:73:fb:27:35:9f:ca:42:6c:43:7c:fe:07:
                    8f:bb:8c:25:ef:ad:dd:6b:c3:54:63:02:e9:8e:93:
                    17:72:7d:54:95:bb:14:62:a0:f9:f7:db:74:19:a6:
                    57:02:5c:11:ff:3e:c0:67:1b:bc:9d:e0:c1:ed:c4:
                    12:85:5b:8a:f5:fb:6d:07:90:7d:2e:bd:2f:fe:4f:
                    65:e8:ea:6b:33:60:db:30:45:d4:01:94:5e:11:0d:
                    83:55:07:dc:35:9d:ac:24:05:49:e9:c6:19:a4:ad:
                    8c:64:3e:f9:ac:6f:7e:44:ee:06:bb:ef:73:54:0c:
                    6d:ab:e4:e1:d6:16:d7:d6:15:bc:7a:72:ba:9e:78:
                    eb:70:f7:3c:c8:18:31:21:e2:5d:23:2d:e4:ad:a5:
                    94:0b:70:88:e3:b8:0f:62:3a:92:6c:6a:db:e0:c3:
                    81:cd:1d:bf:96:40:c2:5c:77:6f:34:d9:55:54:39:
                    e3:ae:d4:c3:40:f5:40:41:1f:95:7f:21:f9:a1:2f:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:54:A3:6D:9F:79:18:39:36:63:01:AE:1E:E1:37:C8:BA:5E:DE:5D
            X509v3 Authority Key Identifier:
                keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:74:f5:c7:fe:94:30:a2:84:65:33:c3:0d:69:02:d9:a9:
         8e:2d:d7:14:d0:84:7f:02:48:ea:db:5a:31:91:0e:fe:3f:c6:
         8c:c5:28:08:bc:53:8b:7c:ec:cb:94:aa:fe:18:01:cd:08:6f:
         6e:99:90:62:9c:7f:f7:da:51:7a:03:ea:e4:b7:14:21:52:64:
         13:c9:6e:b4:ef:9a:1d:f9:32:64:3c:4c:a0:7c:60:0a:03:91:
         9a:2b:a9:7b:48:2f:b0:86:c9:fe:e0:f0:c3:4b:91:bd:51:55:
         3a:a3:18:87:2f:2b:81:db:57:32:b4:f5:f0:f2:2b:72:dd:41:
         a2:bb:01:f8:91:e9:a4:23:13:41:22:60:7e:3a:dd:9e:40:8f:
         2a:8d:e4:3e:fb:cc:4c:9d:21:a7:31:96:7f:77:3f:29:39:aa:
         3b:5e:48:5c:89:d2:10:6e:14:94:9d:b8:25:d6:a5:e9:06:41:
         76:5a:12:4e:aa:4e:ae:e3:cd:31:83:27:32:56:56:6c:b1:3a:
         dd:42:f0:f1:54:1b:59:95:69:54:63:75:d9:17:b9:c0:80:84:
         1d:8b:21:75:d7:21:18:8e:bd:85:44:9b:d1:7b:93:df:df:61:
         c2:ca:e3:a4:41:11:56:e7:26:07:06:c4:1a:e1:77:7f:55:8a:
         d9:f6:3d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZstDCzLhwU/Ba4ClWfGKH/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYWZhNmNlNjU0MmUxYmI1MjNlMWQwM2JkMDBhNGQyMmI3
ZmRhZWQwHhcNMjUxMjE3MTYwMjExWhcNMjUxMjE4MTYwMjExWjAzMTEwLwYDVQQD
EyhhZjU0YTM2ZDlmNzkxODM5MzY2MzAxYWUxZWUxMzdjOGJhNWVkZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fkp61YLEDbgq/mtYF5omtArI3Eh
88wz3GzI01xivmk2Bi4Os2fjD9Mh4vH3c22+i8BBAbAJzfyW/Tuf6G1z+yc1n8pC
bEN8/gePu4wl763da8NUYwLpjpMXcn1UlbsUYqD599t0GaZXAlwR/z7AZxu8neDB
7cQShVuK9fttB5B9Lr0v/k9l6OprM2DbMEXUAZReEQ2DVQfcNZ2sJAVJ6cYZpK2M
ZD75rG9+RO4Gu+9zVAxtq+Th1hbX1hW8enK6nnjrcPc8yBgxIeJdIy3kraWUC3CI
47gPYjqSbGrb4MOBzR2/lkDCXHdvNNlVVDnjrtTDQPVAQR+VfyH5oS8AwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9Uo22feRg5NmMBrh7hN8i6Xt5dMB8GA1UdIwQY
MBaAFBOvps5lQuG7Uj4dA70ApNIrf9rtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83MzFjN2MtOWExNy00YmNhLTk4NGMt
YzdmYmZjNGRjOWRjLzEvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83MzFjN2MtOWExNy00YmNhLTk4NGMtYzdmYmZjNGRjOWRj
LzEvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf909cf+
lDCihGUzww1pAtmpji3XFNCEfwJI6ttaMZEO/j/GjMUoCLxTi3zsy5Sq/hgBzQhv
bpmQYpx/99pRegPq5LcUIVJkE8lutO+aHfkyZDxMoHxgCgORmiupe0gvsIbJ/uDw
w0uRvVFVOqMYhy8rgdtXMrT18PIrct1BorsB+JHppCMTQSJgfjrdnkCPKo3kPvvM
TJ0hpzGWf3c/KTmqO15IXInSEG4UlJ24Jdal6QZBdloSTqpOruPNMYMnMlZWbLE6
3ULw8VQbWZVpVGN12Re5wICEHYshddchGI69hUSb0XuT399hwsrjpEERVucmBwbE
GuF3f1WK2fY9Mw==
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:28:32 2025 by rpki-client