This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File:                     K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier:          LqtlSkxZC9WbqN6CweTybXcmVeFhF3W0G3mWZW81KiE=
Subject key identifier:   37:FD:7F:72:A8:2C:EA:2D:DC:45:FB:DB:43:3E:0A:5C:99:0D:A5:09
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer:       /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial:       019AF276A35433F9C6F72E9255615411D682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number:          15EE
Signing time:             Sat 06 Dec 2025 07:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:52 +0000
Files and hashes:         1: G8x1vVBRYsXmZPS43ryzlAToalk.roa (hash: zv3fUNIgcV4McKQ1WqNZ3h6XRcK9qRBMGJRh2r54rtQ=)
                          2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: s59T68L/fXLBpcThCv8+aLy7Wy9UwaT8dKYDQ3FYqVE=)
                          3: SG-oYWBeZ8PdnxfhbLJBRMxInjk.roa (hash: IQmUUHJFzP7J5Wi5OG22cXQ7JSU97X0TL3RWD8DykE4=)
                          4: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=)
                          5: ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa (hash: tYZ97cgI+SOXirQ9qolsOlp5bgffydesZkrQgwP6yTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:a3:54:33:f9:c6:f7:2e:92:55:61:54:11:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
        Validity
            Not Before: Dec  6 07:00:52 2025 GMT
            Not After : Dec  7 07:00:52 2025 GMT
        Subject: CN=37fd7f72a82cea2ddc45fbdb433e0a5c990da509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:4d:e4:96:aa:cb:d8:a1:ff:c3:96:f9:8f:
                    78:0c:74:b9:25:fa:db:7c:d8:fd:e1:b8:55:2a:31:
                    dc:d6:f3:87:dd:bd:1a:88:e7:ac:4e:bc:ea:bd:cf:
                    e6:c8:d5:9a:b2:59:3e:9f:11:35:b9:8f:9d:01:1d:
                    9c:a3:3c:ce:cb:62:99:3d:2e:2c:4a:ac:41:30:db:
                    b7:27:d0:5b:a9:5d:83:1a:3c:db:88:58:a5:cf:45:
                    12:60:33:a1:df:8e:e9:96:a7:b3:72:44:05:42:0f:
                    5d:e9:65:d4:ce:90:26:e0:35:91:80:3f:f8:77:95:
                    c9:09:99:28:03:bf:67:2d:35:60:87:3c:10:0c:c9:
                    c0:43:bf:22:64:cf:4a:88:6a:1a:b7:ec:ac:2d:1e:
                    42:e6:04:e6:72:b7:85:9f:c8:eb:cc:20:60:ac:9a:
                    69:6d:83:9d:4d:52:72:8c:08:60:30:56:75:2c:a2:
                    90:9a:7c:6c:e4:fa:f2:e7:5c:bf:39:df:df:de:9b:
                    d2:dd:d9:c6:43:fd:5e:c6:5a:1c:c6:9e:31:19:dc:
                    fc:51:d4:17:6a:99:24:7d:af:8e:7e:10:d5:f0:3e:
                    93:af:1f:62:9f:ca:17:b0:74:ec:2c:29:7d:6e:82:
                    bc:de:bc:75:da:98:75:fa:0f:e7:04:2e:3b:e3:40:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FD:7F:72:A8:2C:EA:2D:DC:45:FB:DB:43:3E:0A:5C:99:0D:A5:09
            X509v3 Authority Key Identifier:
                keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:96:4b:0a:34:b3:7c:40:b7:4d:dd:86:e3:70:23:4c:a4:90:
         b0:4c:42:22:a5:2f:f5:46:d7:41:d1:d6:e0:7f:46:ca:a9:5a:
         55:31:ba:5e:b0:9a:db:2a:92:dd:57:83:5c:b0:2a:6e:58:fc:
         3d:66:b9:17:56:ca:cb:f1:49:8d:23:df:a1:2c:7c:a8:cd:75:
         92:01:a4:d8:0f:2d:e4:49:7c:29:80:fb:78:3d:7f:c0:78:af:
         96:ce:11:0f:57:84:90:ac:f3:44:8a:c8:ed:77:39:2d:d7:da:
         9e:6d:fc:e0:b6:77:f3:93:03:5c:38:f1:93:14:b5:c7:8d:79:
         ff:a7:63:9d:f8:53:ff:65:13:71:81:6e:7e:75:d3:a7:30:b2:
         db:48:63:a3:a1:98:48:84:d7:eb:54:e6:fa:4f:99:51:83:e2:
         69:dd:04:c1:59:2e:4f:de:ea:63:12:69:2a:ab:1d:75:d6:39:
         f8:cd:5b:bc:43:e8:39:13:85:1e:ba:1f:24:31:1c:9f:b9:8e:
         48:bb:f3:c2:bd:af:75:e8:26:a9:be:68:63:5e:4d:57:8c:a2:
         49:33:d8:a6:76:59:a7:b8:a1:35:c3:9f:c3:d2:aa:41:38:8b:
         b8:26:0d:62:46:17:8b:4f:63:00:99:30:33:5a:e7:a4:81:9b:
         de:a2:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:00:40 2025 by rpki-client