This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          0ZD94g9R/V0DSCuHI8p/crx4HucSYmqdkqvMnn2Q3eA=
Subject key identifier:   7F:FE:3F:E8:5B:46:10:EF:07:78:0D:21:57:D1:D2:48:F7:A5:E4:C0
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       019AF31C0E2E4B889123676B7226B8441C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 10:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:33 +0000
Files and hashes:         1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
                          2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
                          3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
                          4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: yCPkP8yt6vXnBAtwxGyG2MwLJ++SavItJfoPVcKJpTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:0e:2e:4b:88:91:23:67:6b:72:26:b8:44:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Dec  6 10:01:33 2025 GMT
            Not After : Dec  7 10:01:33 2025 GMT
        Subject: CN=7ffe3fe85b4610ef07780d2157d1d248f7a5e4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:a4:60:92:98:a2:d9:2b:2f:38:5a:67:77:
                    c6:c6:11:a4:97:59:a7:c8:57:a8:57:ea:6f:59:aa:
                    1c:53:7a:b4:cc:b8:83:50:e7:90:11:cf:ef:cd:5c:
                    96:6e:97:8a:d5:dd:5e:8b:a1:6e:a9:66:e9:25:cb:
                    a2:24:68:ab:7d:23:9d:67:cc:15:15:8d:e4:db:99:
                    de:9a:2d:c0:29:ab:c0:bb:e1:ec:6f:82:04:10:e7:
                    88:51:a2:56:f8:01:71:d4:05:69:fa:3a:da:45:34:
                    d3:49:0d:fd:dd:5d:93:d5:bd:ae:ce:48:1c:5b:52:
                    78:99:37:ab:97:80:f1:70:b4:17:f3:ea:a0:cc:1c:
                    63:42:b5:df:69:ec:bf:31:12:e0:f3:70:c6:f2:21:
                    2b:04:d2:b2:1b:55:5c:e3:77:43:aa:96:f8:4b:ce:
                    e3:3b:ae:4c:21:d8:34:44:53:1e:3c:2e:f0:02:4f:
                    10:0a:24:5e:67:22:62:29:83:7e:b8:01:f9:4b:31:
                    a0:50:f0:f9:a9:94:9e:1a:d0:35:ac:c4:76:0f:ba:
                    db:89:b2:04:5f:c1:1c:8b:8d:0a:15:df:6a:31:f9:
                    6b:32:90:ee:f2:2d:d8:92:a9:f9:16:60:9c:d7:bf:
                    33:d8:24:32:d2:fe:62:34:5c:00:83:eb:b4:f8:23:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FE:3F:E8:5B:46:10:EF:07:78:0D:21:57:D1:D2:48:F7:A5:E4:C0
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:60:71:58:85:05:1e:77:6b:25:a7:00:75:6e:9f:2c:5f:
         17:77:0a:a5:77:af:5b:fc:c3:fd:d1:43:30:cc:b7:fc:86:69:
         62:e4:c5:ca:7a:b1:94:e8:7c:de:71:f0:94:07:89:d6:14:2d:
         a7:b9:06:18:85:fb:20:a6:08:f7:98:d3:22:5d:85:fe:07:6a:
         86:ad:8c:b9:d4:08:83:f0:88:dc:15:82:aa:a5:9f:4e:89:71:
         30:3c:09:a1:35:07:11:fc:f1:eb:2f:27:9e:9b:17:a1:15:8b:
         49:21:48:4f:b5:45:1d:a1:ab:c6:29:3b:34:f1:a0:67:81:39:
         29:ac:b9:b6:d9:f7:b2:d4:48:80:d5:0a:39:8b:c2:1c:e4:4d:
         da:ae:af:e9:85:89:f9:0f:5d:f7:fa:5a:b4:47:46:b9:47:4b:
         fb:b3:a8:2e:89:47:40:b5:f6:7b:b4:32:9e:c0:ef:55:18:a7:
         2f:99:e4:bd:7f:f7:f8:95:8a:c7:d1:ca:6c:fd:59:d9:d9:61:
         e5:26:8c:a4:11:63:56:89:79:27:8f:06:8b:e6:7c:04:31:54:
         a3:47:60:e2:b9:00:5e:19:9f:d8:4b:3d:ff:db:57:7d:54:db:
         ec:5b:52:68:1f:23:99:c2:91:e4:c2:1e:d7:45:22:21:a7:d0:
         0c:25:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:32:43 2025 by rpki-client