This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File:                     G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier:          tx21dfZ4fgha/F8qpPrV0W9onNxZenwbP+NuQrNRgDw=
Subject key identifier:   18:99:F7:DB:1C:24:B9:C4:9E:84:E5:6A:3B:A6:6D:1B:EF:AA:0F:51
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer:       /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial:       019AF1D1C4393E5E464AB41F6FBB9CF5B4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number:          16B8
Signing time:             Sat 06 Dec 2025 04:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:47 +0000
Files and hashes:         1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
                          2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
                          3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: BSk6K3EhnM6jum9zWJdJs5wbxCTkx/vuOBZuJzPyUHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:c4:39:3e:5e:46:4a:b4:1f:6f:bb:9c:f5:b4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
        Validity
            Not Before: Dec  6 04:00:47 2025 GMT
            Not After : Dec  7 04:00:47 2025 GMT
        Subject: CN=1899f7db1c24b9c49e84e56a3ba66d1befaa0f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:11:69:b4:e1:17:de:f9:6b:51:7a:2a:98:
                    2b:09:6c:05:b9:3d:57:99:7e:ac:38:cc:85:30:e7:
                    ec:de:15:3a:e1:6d:cb:75:5c:30:f6:7b:cb:44:27:
                    06:d9:ae:9a:32:04:46:7e:af:6b:46:a8:da:9e:00:
                    b5:73:f4:ec:28:96:1d:a7:14:d7:10:7e:9d:5d:50:
                    e0:67:e6:10:ed:d6:ae:94:26:c2:13:ff:66:75:77:
                    c6:93:c6:30:ae:84:19:24:b1:45:98:32:1f:4e:aa:
                    1b:3c:3f:cc:cd:00:59:26:d7:d6:f7:b4:69:eb:63:
                    1a:ce:a0:9e:9f:7e:03:99:e9:2a:37:1c:cc:d6:47:
                    62:c5:6e:bc:b8:6d:c5:44:61:1d:65:c1:b0:6e:b4:
                    20:27:70:51:90:17:a9:c3:77:3a:30:f0:67:80:a3:
                    a8:f5:06:96:fa:de:22:03:f1:4f:88:44:bd:2c:be:
                    3b:de:87:d7:ca:14:22:8c:82:72:dd:15:36:04:83:
                    d8:c5:ba:13:8a:21:7c:12:78:fd:7d:07:a6:3f:e9:
                    26:84:21:89:85:d1:5d:db:89:22:e8:78:1c:98:38:
                    ab:d0:44:3c:d7:b3:24:fa:2b:a8:8b:ef:57:73:68:
                    6d:6b:f9:6f:27:f6:99:d6:8b:dd:f7:44:63:f8:a8:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:99:F7:DB:1C:24:B9:C4:9E:84:E5:6A:3B:A6:6D:1B:EF:AA:0F:51
            X509v3 Authority Key Identifier:
                keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b7:19:e6:a7:fa:7f:46:ae:20:9a:0a:26:78:4f:b0:6c:2c:
         11:4e:97:24:db:fa:d7:cd:5e:6e:23:8c:b9:98:0b:5b:66:a0:
         d2:8d:c0:09:da:ec:e1:ef:ff:60:c8:dd:da:bc:19:23:55:17:
         a9:50:2a:cc:17:35:9a:ae:df:72:85:e0:2f:4b:14:0a:40:e5:
         94:9c:b3:6b:b7:76:39:3b:28:4a:b3:e8:70:24:fb:a7:21:d7:
         c8:27:51:a9:0d:37:a4:ee:23:2d:f5:bb:45:39:cf:c2:4e:35:
         c4:ea:0a:6d:91:e1:fc:20:31:1c:2b:18:cb:33:9a:4b:90:64:
         51:f6:64:1a:8a:d8:4a:97:53:09:fa:49:40:51:40:ad:a2:d2:
         60:23:91:c3:c6:2b:50:15:05:ef:70:14:4f:3d:91:6b:70:0b:
         fd:70:23:2b:34:ab:3c:c6:6a:e1:60:d3:bb:24:42:ab:71:55:
         e4:a9:74:6f:3d:3f:00:e9:db:9f:a2:0d:a4:28:36:6b:07:85:
         64:69:e7:76:e7:9b:a5:7b:25:c5:a7:39:b4:8e:a7:33:a9:5d:
         0e:52:f2:52:d7:4a:f2:f0:b1:3e:e1:b5:30:00:df:86:46:36:
         9d:70:ce:e9:7f:f2:9d:20:45:4f:d3:58:53:02:75:37:08:d5:
         c4:62:af:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0cQ5Pl5GSrQfb7uc9bThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxNjc4ODgzOTdmZjljYWE4NDRmNTU0ZmY4MzdjZmRi
Zjk3MjIwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD
EygxODk5ZjdkYjFjMjRiOWM0OWU4NGU1NmEzYmE2NmQxYmVmYWEwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8IRabThF975a1F6KpgrCWwFuT1X
mX6sOMyFMOfs3hU64W3LdVww9nvLRCcG2a6aMgRGfq9rRqjangC1c/TsKJYdpxTX
EH6dXVDgZ+YQ7daulCbCE/9mdXfGk8YwroQZJLFFmDIfTqobPD/MzQBZJtfW97Rp
62MazqCen34DmekqNxzM1kdixW68uG3FRGEdZcGwbrQgJ3BRkBepw3c6MPBngKOo
9QaW+t4iA/FPiES9LL473ofXyhQijIJy3RU2BIPYxboTiiF8Enj9fQemP+kmhCGJ
hdFd24ki6HgcmDir0EQ817Mk+iuoi+9Xc2hta/lvJ/aZ1ovd90Rj+KhK5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiZ99scJLnEnoTlajumbRvvqg9RMB8GA1UdIwQY
MBaAFBulFniIOX/5yqhE9VT/g3z9v5ciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYt
NTNmNDFkZmU0MDdmLzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYtNTNmNDFkZmU0MDdm
LzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLcZ5qf6
f0auIJoKJnhPsGwsEU6XJNv6181ebiOMuZgLW2ag0o3ACdrs4e//YMjd2rwZI1UX
qVAqzBc1mq7fcoXgL0sUCkDllJyza7d2OTsoSrPocCT7pyHXyCdRqQ03pO4jLfW7
RTnPwk41xOoKbZHh/CAxHCsYyzOaS5BkUfZkGorYSpdTCfpJQFFAraLSYCORw8Yr
UBUF73AUTz2Ra3AL/XAjKzSrPMZq4WDTuyRCq3FV5Kl0bz0/AOnbn6INpCg2aweF
ZGnnduebpXslxac5tI6nM6ldDlLyUtdK8vCxPuG1MADfhkY2nXDO6X/ynSBFT9NY
UwJ1NwjVxGKvoQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:06:25 2025 by rpki-client