This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
File:                     a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft (raw, json)
Hash identifier:          zn1rBdso2PQsE+Mb2CxnDiQdcB6hgE0RATImocpS4KQ=
Subject key identifier:   A3:56:26:0F:A6:CD:30:FC:0A:04:20:36:8D:B8:64:57:1C:AD:78:56
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Certificate issuer:       /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial:       019B21ABEE67FB52C4E33A2F0347EF34FEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
Manifest number:          17A1
Signing time:             Mon 15 Dec 2025 11:01:14 +0000
Manifest this update:     Mon 15 Dec 2025 11:01:14 +0000
Manifest next update:     Tue 16 Dec 2025 11:01:14 +0000
Files and hashes:         1: Sm4vF72XfXChkOCF-2Tpl6jiwpU.roa (hash: af0a4YYU1V85DRRZcQmVXX7jY85/Mt+zMF7QkoXOvWo=)
                          2: XH-yBBT5AuQJC8aI3yCYb0y7oE8.roa (hash: StMCePQ0Ep2lGODPzHeMEg0He8EwrNWlxkBgkMISo1w=)
                          3: a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl (hash: wjYG8KsaBYo10g6lIlg6puSQ9c5BTySSZz09CWGEZUc=)
                          4: nEiHjn_F-XrvWdj08zpSYXVEd3U.roa (hash: s4goZLuZesm9QyLqawzQJwGxTngbjGpeypIp6TlSPIk=)
                          5: zcIKYF31kqLXVCzbH17EaIEDIDo.roa (hash: x3QxGFAkudwhQbhqTbfk31Fm3k1Hx9pCO8uu0NWcemE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:ab:ee:67:fb:52:c4:e3:3a:2f:03:47:ef:34:fe:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
        Validity
            Not Before: Dec 15 11:01:14 2025 GMT
            Not After : Dec 16 11:01:14 2025 GMT
        Subject: CN=a356260fa6cd30fc0a0420368db864571cad7856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:3a:7a:d4:93:de:82:a0:e7:d3:04:a2:d8:
                    51:20:76:09:fd:da:36:37:88:9e:a9:35:78:9b:f4:
                    dc:6d:1b:93:37:38:4b:79:c7:1d:e5:66:c2:4e:64:
                    ec:65:d4:6a:15:fd:58:3a:38:59:6e:92:d8:c2:6d:
                    9c:2f:a0:eb:83:9b:f1:37:6e:56:cb:85:81:fa:97:
                    94:bb:3e:cf:58:fc:2f:ce:8c:a5:2c:c4:11:2d:6e:
                    14:88:f0:e1:01:7c:0b:12:97:a3:25:b4:9e:ed:77:
                    1c:90:a6:b1:1f:72:22:77:59:01:2b:59:40:d3:e5:
                    72:71:ed:5f:ca:ff:5f:ec:bf:51:00:79:1f:5b:7f:
                    6b:63:66:a7:d3:49:22:6b:23:f3:dc:9b:7b:c5:d2:
                    30:92:02:17:25:56:a6:31:10:33:47:ab:10:7f:1e:
                    e5:9e:b1:36:f8:f3:0a:76:54:0c:5a:3b:c8:8e:75:
                    cc:4b:6f:6c:4a:ea:48:cf:e5:52:a3:f2:a2:5d:c8:
                    9a:ff:f9:d8:ee:ed:67:c1:29:09:08:4e:97:8d:44:
                    be:6e:bb:61:b4:6b:5f:a4:bf:d5:ac:33:e4:60:59:
                    73:b2:ad:07:6f:d8:f4:e5:ea:2c:2c:cc:e1:ec:07:
                    c5:1e:87:c1:be:0b:8c:db:e7:f6:6f:bf:88:09:ae:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:26:0F:A6:CD:30:FC:0A:04:20:36:8D:B8:64:57:1C:AD:78:56
            X509v3 Authority Key Identifier:
                keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:03:b5:ce:72:0a:77:9b:f9:39:8d:a2:e3:1d:d4:0e:f3:fb:
         ed:34:ed:45:57:48:47:6e:18:7c:f7:50:71:03:32:fc:76:df:
         fb:b0:48:6b:30:ea:aa:a4:1d:14:5f:2d:f2:0f:a2:e6:83:d3:
         54:fc:28:22:ef:62:a0:73:e9:6c:a5:2f:75:89:22:81:75:5e:
         6f:0f:8c:1e:20:71:2f:dd:00:df:1a:cb:7e:ed:30:ab:68:d5:
         42:dd:b1:69:3b:0d:a4:18:5f:aa:25:3b:24:84:e1:58:0e:80:
         7d:ed:fa:1d:4d:89:8d:d4:f4:78:ef:74:5a:5f:69:19:7e:7e:
         99:73:ac:46:11:8c:e0:11:97:64:70:0e:03:ec:21:74:b7:f6:
         89:e8:a0:b6:65:d8:d7:63:0e:62:e8:b3:1f:5a:e5:00:73:60:
         7a:ca:f4:a3:4b:42:f6:ee:e9:e8:de:06:b9:ff:43:72:18:e8:
         f7:6d:5f:6c:c4:cf:16:6f:71:b5:09:04:8d:06:cc:1c:1f:bf:
         32:80:3f:63:e5:ed:06:3e:a9:0c:21:26:64:f1:53:f4:79:d4:
         d2:30:72:77:1b:80:97:45:3f:f6:d1:c8:51:18:75:fb:e1:70:
         b5:30:07:4c:df:97:d6:1b:ec:9e:60:c6:26:49:8a:fe:44:54:
         58:8c:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:14:32 2025 by rpki-client