This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier:          ppKCXtqbDUZVqZZ08Il5HXD5+WfGzFWJjAyC4UZe6ho=
Subject key identifier:   34:D7:AD:9B:7B:73:85:53:0B:1A:DE:EB:C9:9B:0C:EA:E3:79:7A:E8
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer:       /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial:       019AF1D18FFD2264A4469C12260CE2C02DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number:          06D6
Signing time:             Sat 06 Dec 2025 04:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:34 +0000
Files and hashes:         1: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: YZ6rUtE2S7w1bUWNDbyrdCA4BnMV09crNDfLNr693c0=)
                          2: rbPUmPqkKgwyzbr9KUKLWQwPFN4.roa (hash: q/Zy1zhtJFPNtR3NeMdcOz6lj9MRNn8je4kBturksZ0=)
                          3: tQFFGYfebId9C-wg4RS84BnFaNo.roa (hash: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:8f:fd:22:64:a4:46:9c:12:26:0c:e2:c0:2d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Validity
            Not Before: Dec  6 04:00:34 2025 GMT
            Not After : Dec  7 04:00:34 2025 GMT
        Subject: CN=34d7ad9b7b7385530b1adeebc99b0ceae3797ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:f7:87:32:88:75:3c:f1:63:51:01:84:3a:
                    1f:f0:83:5c:9b:3a:c2:9c:d9:05:2c:43:c3:3b:11:
                    34:0f:ee:c0:ac:46:06:ca:e4:35:a9:bf:d2:14:4a:
                    93:34:2a:8a:83:ea:6e:1e:63:ce:7f:6c:ae:c2:e7:
                    bc:d0:6c:00:4d:63:ed:7f:48:02:94:ef:2c:ae:fb:
                    ea:1b:48:a1:41:e8:97:98:88:f5:71:e7:9a:16:c6:
                    94:e3:df:09:32:8b:24:f2:a1:7c:80:03:5b:ce:c9:
                    32:66:ae:03:c9:28:5e:56:c6:84:b6:a7:c2:9f:f6:
                    06:88:9e:a1:c9:de:63:17:ee:24:7b:d5:61:92:3d:
                    e0:e2:a9:df:b7:8c:bc:d7:22:12:bc:e7:78:c2:de:
                    7b:44:7c:d2:8d:50:82:f7:4f:94:f4:c2:b2:6a:34:
                    0c:0c:a6:05:1a:14:c6:9b:92:3a:88:ee:e5:3d:b1:
                    ac:2a:37:0a:90:d1:08:13:14:8c:b1:8a:e7:1b:5c:
                    fd:6c:13:2b:20:9a:3e:12:4c:97:16:8b:54:09:c6:
                    98:37:4a:e3:62:2d:2f:25:34:60:69:25:77:0d:99:
                    aa:3d:f3:a2:2e:c9:c7:41:e2:32:db:75:f4:a9:61:
                    eb:9e:86:66:86:59:48:4f:aa:81:27:cb:e6:ae:22:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D7:AD:9B:7B:73:85:53:0B:1A:DE:EB:C9:9B:0C:EA:E3:79:7A:E8
            X509v3 Authority Key Identifier:
                keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:91:9c:51:5f:70:c2:8c:f3:f5:02:f6:f8:69:6b:8c:31:51:
         97:95:05:a5:97:f5:5f:ac:51:95:11:c6:cd:d8:a0:ba:b6:f7:
         b8:2d:cf:f2:8b:ca:6e:d6:bb:64:bb:87:67:4c:47:cc:58:b4:
         5a:7a:bc:a9:19:b0:75:50:25:2b:54:82:b8:a7:83:c4:5f:59:
         55:2a:db:8e:95:cb:60:59:46:d0:13:a9:a7:8c:be:59:66:ea:
         3c:aa:66:01:22:43:6a:96:ee:61:d7:c0:b6:ef:1d:72:09:f2:
         10:65:e2:ed:59:70:a5:df:1a:f4:3d:13:1b:91:6e:36:da:8b:
         89:b1:01:d6:ef:55:e0:3a:fd:7f:65:a9:1e:31:e8:26:87:bf:
         bb:ae:fb:f0:f1:7f:d9:cd:40:0c:fa:c8:e0:81:92:29:94:b6:
         69:79:68:86:09:32:dd:3e:40:c1:3b:01:47:d3:7f:ee:34:1c:
         0c:d9:db:f9:9c:6d:9a:92:78:34:82:ae:46:6c:cf:d3:71:70:
         5c:78:c5:e3:66:3d:21:64:d8:6f:b6:b1:48:da:8d:e6:0e:66:
         15:da:3c:68:a3:4d:99:bb:44:02:56:57:13:d4:e0:51:8c:2a:
         6b:d8:d7:b8:da:0e:56:b4:f4:c0:c6:14:69:22:f3:19:44:e4:
         ad:36:07:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0Y/9ImSkRpwSJgziwC3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTk4OWMxN2IyZGEwYzUxNDMxNTU4MjBlYmM1NmJmZTcz
YTNhZGYwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD
EygzNGQ3YWQ5YjdiNzM4NTUzMGIxYWRlZWJjOTliMGNlYWUzNzk3YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbr3hzKIdTzxY1EBhDof8INcmzrC
nNkFLEPDOxE0D+7ArEYGyuQ1qb/SFEqTNCqKg+puHmPOf2yuwue80GwATWPtf0gC
lO8srvvqG0ihQeiXmIj1ceeaFsaU498JMosk8qF8gANbzskyZq4DySheVsaEtqfC
n/YGiJ6hyd5jF+4ke9Vhkj3g4qnft4y81yISvOd4wt57RHzSjVCC90+U9MKyajQM
DKYFGhTGm5I6iO7lPbGsKjcKkNEIExSMsYrnG1z9bBMrIJo+EkyXFotUCcaYN0rj
Yi0vJTRgaSV3DZmqPfOiLsnHQeIy23X0qWHrnoZmhllIT6qBJ8vmriK7PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTXrZt7c4VTCxre68mbDOrjeXroMB8GA1UdIwQY
MBaAFJOpicF7LaDFFDFVgg68Vr/nOjrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQt
NjM3YjI2MWFiMTc5LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xZGU4NmMtNWYxZS00MDJlLTllZjQtNjM3YjI2MWFiMTc5
LzEvazZtSndYc3RvTVVVTVZXQ0RyeFd2LWM2T3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpGcUV9w
wozz9QL2+GlrjDFRl5UFpZf1X6xRlRHGzdigurb3uC3P8ovKbta7ZLuHZ0xHzFi0
Wnq8qRmwdVAlK1SCuKeDxF9ZVSrbjpXLYFlG0BOpp4y+WWbqPKpmASJDapbuYdfA
tu8dcgnyEGXi7Vlwpd8a9D0TG5FuNtqLibEB1u9V4Dr9f2WpHjHoJoe/u6778PF/
2c1ADPrI4IGSKZS2aXlohgky3T5AwTsBR9N/7jQcDNnb+ZxtmpJ4NIKuRmzP03Fw
XHjF42Y9IWTYb7axSNqN5g5mFdo8aKNNmbtEAlZXE9TgUYwqa9jXuNoOVrT0wMYU
aSLzGUTkrTYHKA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:00:38 2025 by rpki-client