This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File:                     G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier:          4rO1DR9yc5gugXfSMbLzM/wUqi09draTq4Znpp/Uaew=
Subject key identifier:   93:FC:75:4A:F3:51:37:A6:BE:AB:7B:00:46:A1:36:B7:BC:3D:C2:07
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer:       /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial:       019B2F306644B4664B64E03BAAF0F892D953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number:          1365
Signing time:             Thu 18 Dec 2025 02:00:59 +0000
Manifest this update:     Thu 18 Dec 2025 02:00:59 +0000
Manifest next update:     Fri 19 Dec 2025 02:00:59 +0000
Files and hashes:         1: 0l_JlSvFq56OWKuOAyiuGAPthgE.roa (hash: pilCAnWAIbPSFLZ93yZvglCMjzzYpW/PzWAfKaEfMX8=)
                          2: 53SCy-BS6BPWUPWLo6Zwo7zYj7U.roa (hash: hcmIxv0Tq4ILIXkoyytgzjVrkSlA1EbanTY+o8bnAF0=)
                          3: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=)
                          4: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: bCWI+456+sLzbYKLM1FZ2r7BHGDoD99SAOtQFgDVxDM=)
                          5: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=)
                          6: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=)
                          7: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=)
                          8: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=)
                          9: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=)
                          10: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=)
                          11: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=)
                          12: wmru7gkbD0Q5jhTBil0o1n-XXZY.roa (hash: aLSYcM7LxiQjHNTeSZsVR17gcFojmK5wcKMA+W/GnL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:30:66:44:b4:66:4b:64:e0:3b:aa:f0:f8:92:d9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: Dec 18 02:00:59 2025 GMT
            Not After : Dec 19 02:00:59 2025 GMT
        Subject: CN=93fc754af35137a6beab7b0046a136b7bc3dc207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:eb:dd:cc:4e:e6:ba:11:ea:a1:7d:ea:1a:
                    f4:62:a6:3c:7d:d8:ff:cb:d2:83:2b:43:95:9f:1b:
                    6b:65:88:85:cf:dd:5e:31:f4:e1:f1:e6:87:4d:8a:
                    88:6d:69:53:bc:bd:c4:3e:98:a8:14:53:90:b9:36:
                    85:d0:20:a0:d5:df:1e:2e:cd:bc:55:9c:cd:fe:36:
                    6f:ac:53:b1:e2:e9:a2:9e:11:c5:68:42:54:ba:38:
                    ed:3d:61:3c:08:96:4e:ac:a1:d2:b6:ca:ad:f5:2b:
                    4a:e6:50:5a:c3:5a:a1:8a:d0:8c:ca:95:be:57:dd:
                    f2:5e:17:4b:8b:49:46:c0:4a:77:c0:0e:e3:7f:a1:
                    bf:33:fb:5d:e9:3e:de:51:b9:0f:be:b1:90:16:aa:
                    80:b4:cf:c2:eb:30:a9:9f:0e:af:e3:50:2d:8e:55:
                    2f:86:d7:17:34:53:53:e6:e9:74:ff:ca:8c:bc:29:
                    58:13:5d:b3:6d:d7:93:cb:1b:b1:7a:82:4c:51:b3:
                    ed:db:97:22:2c:c1:bd:a7:63:48:6e:52:45:7b:32:
                    d5:57:14:c5:5e:45:74:8b:68:14:79:cb:74:0c:b8:
                    05:45:74:bc:c3:39:7e:c4:ff:82:90:14:3f:41:ca:
                    69:29:e9:ab:ca:de:cf:5f:f8:c8:8c:3f:e9:a7:f4:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:75:4A:F3:51:37:A6:BE:AB:7B:00:46:A1:36:B7:BC:3D:C2:07
            X509v3 Authority Key Identifier:
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:1f:f4:af:27:7e:b2:61:63:67:04:0d:33:69:a3:08:17:
         f9:bd:c8:90:02:22:81:a0:f3:1c:d6:97:e5:dd:e0:9b:9e:be:
         f0:91:5a:ba:f4:23:5d:38:ee:c0:94:50:9a:51:a6:b7:4c:a2:
         97:63:f3:03:51:ac:66:ec:47:18:cd:c0:d0:7e:02:40:3c:cd:
         74:c7:a4:bf:f8:65:91:e1:6f:46:7a:86:51:29:06:3f:dd:b6:
         45:71:d9:c1:3c:e5:e7:73:36:06:2b:33:e6:b6:9b:32:e0:3d:
         18:13:e8:bc:3a:37:54:a8:12:2b:a8:c5:98:d7:2c:ba:bb:5a:
         7c:53:36:82:3f:1a:78:af:ec:c9:c7:2c:e5:67:97:b9:75:21:
         7c:bf:4c:1b:ca:0a:f2:2d:21:fe:9e:1b:34:e9:ec:8c:de:c7:
         e1:c8:bf:c9:e9:85:85:49:b2:f3:85:2d:ed:d8:d3:ee:3a:6e:
         e2:d9:77:4e:3e:56:22:20:1f:17:43:0c:f2:77:0e:b3:2a:ab:
         42:01:b2:40:93:dc:6b:51:ae:6c:51:ce:4d:19:0c:d9:de:1f:
         f0:3f:87:fe:61:0c:73:02:6f:a5:74:e9:c3:02:e1:83:1d:81:
         ec:0c:12:6f:ce:9f:19:d8:28:f2:5f:f8:6c:99:65:18:db:27:
         6f:6b:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:11:18 2025 by rpki-client