This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File:                     q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier:          M54ZnvwLIHnVr9tOB4zV+mAKJ7Mwb1ZylDqhb84+4gM=
Subject key identifier:   54:F1:45:40:3B:28:A0:71:50:DE:68:71:4F:69:AC:70:DA:44:A7:94
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer:       /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial:       019AF0883032B87F9AE7055832CD02797C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 22:00:48 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:48 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:48 +0000
Files and hashes:         1: 1P9fVQVtxSb2G4sWpvSG7bw0bpw.roa (hash: 6VyhtcepI1NTxHwb+zyOQuM2NICKUmki0vqcGxvdoCg=)
                          2: 5XE0gfIHPBVwos97p8SFxETissU.roa (hash: 6gs7iKR2AXCvfwIabzt43SR9/MCH860ldfvLILxKt+M=)
                          3: anHJmbU7C2zjE1lGpkfnKPRRqS4.roa (hash: svRwOAhrUBlYXwTbfNYBTqirI+LGeE+CWUjAVTOIKpw=)
                          4: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: Y/W6lLN5p3PdJ/uJTzP8uEoKFW/TWJIMK+ps26qgZvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:30:32:b8:7f:9a:e7:05:58:32:cd:02:79:7c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
        Validity
            Not Before: Dec  5 22:00:48 2025 GMT
            Not After : Dec  6 22:00:48 2025 GMT
        Subject: CN=54f145403b28a07150de68714f69ac70da44a794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:20:7e:80:40:47:64:4b:ae:ad:7a:2d:c5:
                    db:5b:02:65:96:8e:a0:09:94:30:5c:2e:0a:d2:c3:
                    3e:e6:27:fb:14:8a:98:fc:2c:6b:48:78:50:88:ad:
                    28:fa:34:17:73:0a:ca:39:f7:80:b2:6a:55:be:c4:
                    62:83:af:3c:d8:9e:af:c1:04:ab:ef:60:7a:8f:4a:
                    26:a8:38:63:d4:dd:de:0d:d1:4c:29:f0:4d:fb:38:
                    e7:49:1f:7f:84:1d:cc:48:59:9c:bc:8e:fc:6d:25:
                    50:87:ad:4e:91:1e:c4:7b:d8:04:2f:65:37:99:fa:
                    25:61:71:38:1e:a6:c8:ca:a0:49:5e:d2:22:04:96:
                    fe:42:96:ac:82:db:8c:3f:61:f7:f5:00:1b:26:be:
                    6e:fb:0c:62:1f:42:14:8a:e4:98:7d:c6:37:a8:d7:
                    36:d5:63:62:25:9f:23:f4:ec:17:43:1d:4b:91:0a:
                    13:30:f7:e7:15:95:60:60:b2:6b:51:dc:04:88:34:
                    ba:c8:14:9d:c4:85:69:ca:24:d2:44:22:05:b9:5e:
                    71:e5:bb:b0:a9:cf:49:2e:97:4f:7e:de:0f:b8:39:
                    e4:f5:e4:5b:bf:bf:83:89:7e:d0:a4:df:cb:f0:26:
                    48:6c:80:87:47:94:91:18:55:0c:0a:69:68:c9:5e:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F1:45:40:3B:28:A0:71:50:DE:68:71:4F:69:AC:70:DA:44:A7:94
            X509v3 Authority Key Identifier:
                keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:c1:21:28:90:2d:25:48:f9:1a:c5:61:97:94:99:2d:85:
         5c:67:6e:c4:13:f0:6e:df:c4:c2:99:89:6d:62:7a:3a:3c:77:
         a8:94:27:d1:9c:e6:74:35:27:f5:64:d0:c7:16:f1:1f:79:53:
         d7:9b:8d:69:f0:6b:d3:db:77:5d:84:aa:e5:ba:72:4e:a0:21:
         16:c6:42:cc:cc:41:bf:5a:d7:e8:57:ef:60:b3:b9:b2:3d:f8:
         32:13:2f:9e:94:31:d8:53:a7:48:87:06:e1:ca:c6:43:52:75:
         81:b6:89:bf:8d:aa:73:1c:a9:34:e2:23:a4:5c:2b:75:70:f3:
         59:c0:32:88:55:ba:33:60:f6:a8:eb:a8:a6:98:59:c3:43:fc:
         bf:90:5a:72:c1:f8:b2:ff:1c:01:e6:ee:6c:5f:be:7c:0c:ca:
         b0:66:4c:52:fb:ba:f7:c1:8e:a1:14:e5:a7:d5:ae:1c:58:af:
         a0:00:24:53:bb:ca:28:c1:8d:88:6d:8a:aa:e5:00:ab:92:d6:
         2d:48:2e:39:f9:6b:3c:6b:2a:28:73:be:b7:ba:f6:50:77:92:
         19:37:b7:ff:b4:e9:2d:a8:c1:82:be:03:bd:a1:31:d3:aa:d3:
         9a:50:ac:70:ac:6d:9c:ba:d5:38:5b:fc:91:60:df:65:53:c2:
         df:af:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:25:25 2025 by rpki-client