This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File:                     boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier:          8LdsPIepP7wRB7lc8SWGWPVuddKDQoX9M+onWC7Aq/Q=
Subject key identifier:   90:7C:D5:57:86:28:B6:C0:AA:8C:D3:39:37:F6:96:B4:3E:5D:1F:0F
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer:       /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial:       019AF2ADF6C259B942600C43AC8EAE7320BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number:          16BB
Signing time:             Sat 06 Dec 2025 08:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:18 +0000
Files and hashes:         1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
                          2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
                          3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: tE1LIDUMh2EDAwE/qexB8GwAm+y7BvsdBwmIuywSqUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:f6:c2:59:b9:42:60:0c:43:ac:8e:ae:73:20:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
        Validity
            Not Before: Dec  6 08:01:18 2025 GMT
            Not After : Dec  7 08:01:18 2025 GMT
        Subject: CN=907cd5578628b6c0aa8cd33937f696b43e5d1f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:a6:81:59:a5:bb:11:f6:6c:98:2c:6f:35:
                    67:37:9b:61:61:6d:ac:e6:4a:d7:c5:6b:47:6d:42:
                    f0:4c:8b:da:1b:f9:33:81:0e:0d:e4:4f:37:70:f8:
                    d0:e0:93:0a:91:29:64:b8:2d:ca:55:37:97:a8:87:
                    91:12:59:df:fb:29:0f:3a:81:5f:9b:75:06:38:8c:
                    a5:d2:9d:c1:3c:07:45:38:be:51:82:74:cf:1d:fb:
                    e1:63:86:53:1c:f8:99:2c:53:ed:1f:4e:f5:df:d4:
                    f3:c2:1e:96:83:a4:48:b9:2a:40:15:44:4a:e0:f2:
                    8e:20:0f:e3:34:6d:6c:ba:d9:d9:b5:25:91:9e:23:
                    91:26:9b:5c:c2:fa:67:2d:9b:3f:c5:a2:dc:c3:e4:
                    ab:dd:b4:fd:d3:f5:50:31:2a:19:92:0c:2c:b3:5a:
                    43:1c:51:f1:9b:cb:ae:90:5e:83:72:4c:ff:e3:51:
                    43:b0:95:e4:2f:86:2a:3c:7a:0a:ed:4a:ad:a7:d7:
                    93:b7:3c:f8:ff:ca:fa:7d:ff:35:3b:19:55:69:a5:
                    ad:52:c0:b8:2e:a5:0d:92:dd:23:ae:f3:7a:d7:59:
                    4c:c1:c3:c0:0e:8c:1f:f4:82:cb:64:57:ee:e3:81:
                    dd:18:8a:71:3d:61:3b:9b:ef:2e:70:14:4f:27:48:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7C:D5:57:86:28:B6:C0:AA:8C:D3:39:37:F6:96:B4:3E:5D:1F:0F
            X509v3 Authority Key Identifier:
                keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ba:cf:6a:ab:3f:c7:12:d0:9b:3f:e2:9b:63:1d:cb:41:91:
         44:ed:67:35:2f:42:a5:38:b3:98:0e:6c:42:f7:1f:e3:9d:78:
         24:68:41:4c:9a:3c:83:ab:ab:78:bf:53:68:59:fe:59:ab:94:
         32:78:b0:00:86:42:4e:28:d4:70:35:db:ae:c8:cb:95:94:23:
         0e:05:18:e5:c0:e0:84:3b:ec:a2:15:b9:be:16:48:58:ee:a4:
         0b:7a:e1:0d:88:6b:21:b5:00:b9:b6:73:54:ee:bc:60:c2:1d:
         9a:2b:7c:2e:26:be:46:62:ff:66:b9:2b:03:07:f9:28:72:74:
         16:17:14:b8:06:61:80:b9:1b:bc:9e:ab:18:da:93:94:1c:6b:
         3d:a1:6c:fc:95:36:e0:39:a8:c0:59:a5:d4:5a:ee:14:6e:1c:
         d2:da:69:65:4e:0c:40:ae:1f:d8:2b:87:ee:bc:4a:bb:dc:d8:
         62:15:81:6b:c6:10:0a:37:dd:d4:1f:da:28:aa:3a:05:74:39:
         ab:f2:d3:6c:fa:93:a6:60:23:dd:b0:b4:76:1b:e6:b3:bc:08:
         9f:77:62:58:89:97:76:9c:65:82:af:c4:3f:ab:67:ce:40:8f:
         60:14:21:d5:88:98:ca:f6:b9:b0:58:ad:e0:8c:5d:e2:52:99:
         bf:ca:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:22:04 2025 by rpki-client