This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
File:                     p6TiNIImhHXBuTVjfQACwv0pk7g.mft (raw, json)
Hash identifier:          ok+feaCCCsFyips1FwI4L6MAlrMwsi7RP71D6xXIn9g=
Subject key identifier:   C3:65:E7:6C:BD:8F:6F:64:80:AE:88:E7:DC:A4:0F:AA:2D:54:DD:33
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       019AF3C04E2F7D8EA95894868EDF301E5AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
Manifest number:          035D
Signing time:             Sat 06 Dec 2025 13:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:57 +0000
Files and hashes:         1: 00xI0DtCAFHWBOE_bejIQNTJW6M.roa (hash: sfs0yal7NGV6TxNOqMPsIoLdmjrSnjF4P2BuDUW5yfw=)
                          2: 96dDSS3_XkJdE42tPgTQFeNVDec.roa (hash: dwHN2EcjJrtCZAcPzokJT4sxYyyBsiYHG30Cc+Xp5Yo=)
                          3: AF5LwWg1dao3w02VHECRUerpukU.roa (hash: Ncs14Dy32ScG4H2HyXyIY4G9gDsZB0rdLa7JZ2atlmg=)
                          4: Gzw1ArufvsV7lun_0Q-rUPOXBGM.roa (hash: t/o+neptKVKiKxJpFxuQvJ/wrQhsyyO3eWWynGJs2d0=)
                          5: H6KJXCzsVKBCex8bdjdpcPzKj4k.roa (hash: ayVcJHTWFx5ebEEYZQnqngJlO1dTOXNsn34hSHck390=)
                          6: OHctpNz_hhm9bPX3cKVQ1EtLD-c.roa (hash: 8FZm1tGVETXKlmG85vdoH3UOxX9O19NVBR+Lz7FCIVA=)
                          7: VsI_AW9EylW2fiJ1YDcH0sZTdk4.roa (hash: 66hyyMtNTHFirc0cG1RdPc+2uiQi7LyhRHEQCng1VvU=)
                          8: WVv2k3TSQJbPsK5iSpOdvStU1fw.roa (hash: nllHKEsBD6hhWuVOALIXGX0W82p+v661gYIvqMzP3I4=)
                          9: WhSTApE7RFBAMmW_xVnPdgMAiWQ.roa (hash: Bd3C/960PK8QK60Tck52Vy8z1GDbIMwLZtVlP2UrssE=)
                          10: YBiBtpmThwVsKrMK6Z9khGmRy1Q.roa (hash: na/c6NWSHkDjhmZUiY/WjKrk6y+DwMkb2h5xDcgHESc=)
                          11: YZ5OkmOZqmOi769FEB0BCefbosM.roa (hash: T/9Rx2+z8lpNcTzmX4V/kvT+6IwNCbUFxhSZhaIwQvw=)
                          12: lkvywQn4TW4L9lkE7bYcNqmXY0Y.roa (hash: s4brEsiLVJQXgD883/yiLA0Z0ctXhJodTNwAgNakFBg=)
                          13: moO5Ks17ZAWVDkWAO-sZOL7jYGk.roa (hash: vNDGafiza1LZ3cM48PDM+kPW+0J6IrOV2MqoIZsseo4=)
                          14: p6TiNIImhHXBuTVjfQACwv0pk7g.crl (hash: 8+TQDxK+pOzGgMRGwQmsZwDYEjsqiFf6wnrERDylF9g=)
                          15: tAUwOh7-bFAje0ge2CsLFBhij_I.roa (hash: wxXEKUHCbWw2dnlts0k+6en+iFwSRN99/5HuuqUJ79U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:4e:2f:7d:8e:a9:58:94:86:8e:df:30:1e:5a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Dec  6 13:00:57 2025 GMT
            Not After : Dec  7 13:00:57 2025 GMT
        Subject: CN=c365e76cbd8f6f6480ae88e7dca40faa2d54dd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:bb:bb:0c:09:b1:10:54:7e:37:5f:e3:78:
                    46:b4:06:02:5c:ac:e9:e4:66:00:d3:cc:d0:1e:40:
                    45:a4:fb:81:61:6f:5f:d4:02:da:fe:f2:54:fe:72:
                    39:6f:f1:12:46:f9:5c:0b:ed:6a:32:90:e6:a3:b7:
                    18:80:30:c5:03:55:cb:f6:09:8e:08:70:87:d3:77:
                    1d:fd:25:0d:35:ba:d1:7f:ed:08:10:88:51:42:43:
                    56:7e:ad:35:77:78:9c:e6:20:b8:e4:d2:e6:d3:75:
                    29:6f:bc:65:f3:4e:95:9d:b1:f1:83:0a:d6:d7:e0:
                    b4:f1:27:07:e8:fb:db:be:6a:a6:5c:fd:67:ac:e3:
                    7b:37:02:ff:2f:ce:a7:2a:99:3d:1a:18:3f:2f:b7:
                    ba:53:55:e4:ce:f3:fc:d9:f9:b3:e0:44:be:b5:e5:
                    91:58:27:bd:de:a4:fd:67:81:82:91:82:f0:c6:17:
                    a0:ee:cd:f5:ca:c2:cd:89:a1:b8:e8:3f:56:d6:b8:
                    bc:bd:d1:0d:ee:eb:3e:de:1b:6f:d0:3b:fe:91:8a:
                    20:c6:f7:a4:84:97:47:4f:e9:15:2d:cb:8e:94:74:
                    58:77:d1:30:f2:c3:b1:21:a4:05:78:6b:92:bb:2f:
                    c5:a9:55:b4:6a:ee:b0:ee:8e:30:e4:e9:63:27:15:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:E7:6C:BD:8F:6F:64:80:AE:88:E7:DC:A4:0F:AA:2D:54:DD:33
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:9e:77:0a:a6:50:55:70:c2:32:67:ca:4e:36:70:37:72:
         47:71:d5:1f:91:2e:f0:5a:03:e4:8b:f1:82:52:33:0f:4f:23:
         9d:b2:0e:b8:18:ac:45:59:13:ae:38:13:78:f4:ec:fb:d2:80:
         d2:ea:f2:04:51:b4:1f:cf:9f:38:48:5d:be:3b:8d:78:1e:f0:
         bb:27:a9:44:d4:33:34:e7:d3:8d:b9:50:d7:b8:80:6a:8a:be:
         fe:d9:d2:13:75:e0:1c:46:3f:5d:ba:74:3e:1b:47:a8:57:df:
         c4:17:47:bf:c5:5e:17:bc:7d:eb:e8:ba:bb:6a:33:fa:c9:9e:
         76:f8:db:9e:0f:74:36:4f:22:01:49:2d:93:0c:5d:0a:8b:90:
         4b:86:ba:4f:dd:e7:0e:9a:23:ba:50:f3:96:81:35:89:33:56:
         f2:ae:dc:08:c6:21:21:f2:83:87:02:23:2b:f0:70:5f:7b:e9:
         68:35:bf:62:3c:3e:c8:4c:cf:f2:1c:0b:4b:c7:5a:60:4d:e2:
         4d:c7:19:2c:53:52:47:ef:d9:77:2c:93:b8:26:0d:ae:41:d6:
         63:a5:ec:ec:09:ee:e5:47:36:f2:1b:06:d1:51:54:0b:4f:6b:
         f9:f6:d3:36:55:2b:42:42:14:9b:ac:0f:5e:85:c2:8f:43:a8:
         e2:38:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:07 2025 by rpki-client