This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
File:                     B_C6WbHHbPINxDguWihU1xQsJro.mft (raw, json)
Hash identifier:          TtAxSVv+oNnsZE/+Z5Fevwc3YXAiw7NQb6qeQkBzyV8=
Subject key identifier:   6B:B5:0E:B2:26:B8:F4:72:AF:86:12:50:66:9B:8D:EE:7D:4B:A7:FE
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Certificate issuer:       /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial:       019B318CE01A1C66B2E644CCAD4297659FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
Manifest number:          0865
Signing time:             Thu 18 Dec 2025 13:01:14 +0000
Manifest this update:     Thu 18 Dec 2025 13:01:14 +0000
Manifest next update:     Fri 19 Dec 2025 13:01:14 +0000
Files and hashes:         1: 2YctLvghF2NTGqouDl9SU7WsK8Q.roa (hash: dDP6o/nzzzraOHQZ9zrzu942AWsku2WIoZUV4lB/aVk=)
                          2: B_C6WbHHbPINxDguWihU1xQsJro.crl (hash: u2lH8CLnW8/6mXALBR3Uh2ersXIakIDpj+GBQ+uaC+c=)
                          3: K4R2wbla95DXju27vgEj2IYahII.roa (hash: oVwWblaprncMfsgnEdqlxFveHCedyBjk+q0e8GaCPaQ=)
                          4: KDytCj01Z8HV3jbDjoNUphJ9ZqE.roa (hash: tpuGPSXore2CO2e6MYBfrJ1Vug8cc9qaaZfG9lHKTHs=)
                          5: WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa (hash: n4Yw3pq5MyOekrSTwdjLFgxLpUsIwy8D4jmXIUXMJcM=)
                          6: x5j9bCfCB-TRkwdEgD-n9hTBKuI.roa (hash: KGBK15KR60NfaIfx8RVCxr6b9iRlBdChSYDsXNFVIqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:8c:e0:1a:1c:66:b2:e6:44:cc:ad:42:97:65:9f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
        Validity
            Not Before: Dec 18 13:01:14 2025 GMT
            Not After : Dec 19 13:01:14 2025 GMT
        Subject: CN=6bb50eb226b8f472af861250669b8dee7d4ba7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:2a:98:81:b3:bf:48:a8:c0:43:e2:bc:79:
                    f3:45:91:de:93:2c:d3:cb:4b:c2:a9:65:ae:6b:39:
                    e4:51:f6:72:df:61:4b:c2:9d:e2:b2:3a:2a:26:6d:
                    15:b5:73:ad:db:46:69:55:1d:75:9d:0e:cc:e3:1c:
                    b2:78:3f:34:97:86:43:fa:fb:4f:f2:9b:43:08:11:
                    b9:47:3a:76:5e:b8:8b:96:ca:4b:4f:f4:10:d3:30:
                    9f:10:36:60:ab:c6:d8:ee:a7:7d:0a:f5:42:11:84:
                    b6:19:77:79:a2:05:51:d2:ee:8b:98:d6:50:70:3d:
                    9e:61:7c:c8:2f:54:7a:f1:37:45:81:07:a9:5a:c8:
                    c4:cf:a1:d8:2a:4b:cf:03:3d:ff:ce:52:f2:fd:51:
                    68:99:05:e3:69:18:8f:14:b0:d4:9e:a3:cc:23:3b:
                    d6:f0:af:9b:8e:cb:b0:dd:2d:a1:93:bb:0c:f5:1f:
                    dd:97:ec:c1:20:f0:0a:4c:32:4b:1c:7a:ce:fc:84:
                    5d:29:e9:7d:c8:09:d4:df:15:04:b1:e9:cf:e7:38:
                    e4:56:57:01:41:da:8a:4d:50:7c:c4:3b:dd:74:61:
                    4e:e1:dd:6d:d2:17:0e:11:5c:a1:1c:57:4c:97:5e:
                    a7:6b:b6:9e:be:29:85:33:66:8d:23:51:02:6a:a4:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B5:0E:B2:26:B8:F4:72:AF:86:12:50:66:9B:8D:EE:7D:4B:A7:FE
            X509v3 Authority Key Identifier:
                keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:fd:72:55:15:df:83:39:d1:ab:57:dd:d1:c7:e5:ac:e2:
         0d:a8:0d:8e:52:96:e0:be:0b:86:e7:23:14:cf:ce:ee:f5:d8:
         ba:77:77:92:71:f5:42:01:9b:a1:15:0c:9c:cc:e6:0b:4f:1c:
         12:b2:80:ec:38:4f:86:b5:9d:e5:14:93:77:be:a6:04:b3:6a:
         95:7b:02:ec:6c:b6:26:18:da:b8:ee:e3:55:fb:bc:75:be:6d:
         2d:cc:de:62:a4:74:f1:ac:3e:9e:ca:a7:b3:69:84:f9:0e:a1:
         de:54:19:90:6f:5c:03:14:16:2e:9b:61:82:4c:65:51:c0:c9:
         21:c8:8b:db:34:e5:d0:82:17:4d:0d:f2:a8:85:5c:11:28:67:
         ff:7a:d4:fe:84:13:ba:5c:bc:0d:c4:de:cc:76:08:60:17:20:
         e2:7e:ef:30:14:f6:ac:36:d1:27:0d:f5:7d:99:d7:23:d7:48:
         a0:3f:c8:25:15:3a:2c:8f:91:de:a8:98:0d:5e:f8:47:2f:da:
         71:51:26:a3:d1:75:ca:61:27:f1:f1:ad:3e:f7:1e:89:2c:f1:
         57:47:09:4b:2c:52:19:05:54:5e:34:41:e0:cf:69:c3:7f:69:
         35:ce:46:d9:47:28:05:14:5b:7b:ff:3c:91:03:87:8f:b5:be:
         53:00:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:19:26 2025 by rpki-client