This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File:                     l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier:          bfgfW6rIXhRqDtl+CwEOTTc+1K+XPnwfqpv11MwpOt0=
Subject key identifier:   2A:32:36:67:47:1E:6D:B7:F2:D7:B8:37:66:54:D9:5B:E0:A4:D3:9A
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer:       /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial:       019AF49BE1E8AAD8BB48CF64626F0F2EF2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number:          06B0
Signing time:             Sat 06 Dec 2025 17:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:47 +0000
Files and hashes:         1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
                          2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
                          3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: 9KkGwKFL/srilnzMPka3lOMSMOW/4ZoOFrcHt19rZh8=)
                          4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:e1:e8:aa:d8:bb:48:cf:64:62:6f:0f:2e:f2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
        Validity
            Not Before: Dec  6 17:00:47 2025 GMT
            Not After : Dec  7 17:00:47 2025 GMT
        Subject: CN=2a323667471e6db7f2d7b8376654d95be0a4d39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:f7:c4:54:bd:6a:9b:11:cf:d4:6a:53:56:
                    f0:07:8a:0f:10:d2:52:39:17:d0:75:46:90:6c:08:
                    2b:d0:a7:2e:74:a9:a4:ec:78:b5:8f:17:88:f0:29:
                    14:74:70:b8:73:b4:26:75:9a:c1:df:b7:14:23:31:
                    34:b6:24:2a:48:1f:49:78:35:85:e6:a7:da:79:bf:
                    ec:82:48:4c:c1:37:06:c3:c5:82:81:4d:d7:fa:6c:
                    c5:0e:df:0c:16:26:17:e2:fd:b0:4f:60:b5:49:e0:
                    1d:0e:2a:9e:52:de:43:b6:48:91:14:d8:a6:9c:aa:
                    e2:4f:93:c4:85:18:53:20:06:d9:0f:5b:03:99:6a:
                    f5:0c:ba:b2:46:cc:87:7b:cd:59:82:7c:b8:ce:4a:
                    cf:3e:3b:bd:81:30:d1:0b:62:65:0b:38:86:2d:d9:
                    30:ec:37:bb:ae:cc:31:97:44:d9:8a:3c:ab:04:4f:
                    4b:6d:ac:5f:25:fe:c8:99:c8:aa:2c:6b:a8:d3:ce:
                    92:73:ca:b8:de:6a:c5:81:a9:cf:cc:f5:75:c6:58:
                    45:f0:0d:7c:7d:ef:3c:ee:29:a2:7f:04:82:6c:52:
                    98:7a:ac:95:09:c2:6e:51:70:f1:f1:57:c9:23:91:
                    78:37:d8:ce:c3:c4:c1:53:26:a7:14:dc:d8:68:ee:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:32:36:67:47:1E:6D:B7:F2:D7:B8:37:66:54:D9:5B:E0:A4:D3:9A
            X509v3 Authority Key Identifier:
                keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:11:48:3d:81:0c:f3:18:8b:d2:52:19:3b:da:e9:44:84:
         34:b7:84:b1:11:81:23:15:39:30:51:d8:28:58:c2:e1:5a:e9:
         cf:d3:4b:52:f9:86:a8:b6:93:0f:1f:9d:3d:8b:c4:f2:5e:52:
         ee:8b:3d:a2:4e:6f:bb:46:b7:90:10:35:22:16:cd:48:96:e1:
         84:2d:6c:00:7a:85:f6:ca:46:5b:fd:46:f3:ce:f1:8a:fa:d6:
         c3:f5:78:8f:39:3b:b5:ed:25:30:cf:3f:a1:3e:7f:f8:13:d2:
         1e:23:2e:6b:61:2b:b0:54:c3:73:7e:25:b5:3a:af:8f:fd:d6:
         7a:2f:1e:32:3d:f4:47:28:9e:47:20:d9:3b:9a:a1:45:27:c4:
         60:b7:a1:80:b5:08:48:fd:d4:96:1c:d8:07:ff:73:f8:f6:1c:
         c3:ce:20:e3:78:13:8a:8d:6d:5c:6a:0d:13:31:0e:59:72:b4:
         8e:27:a4:80:89:86:ac:49:fb:b8:72:0d:3e:3f:0c:7a:b6:93:
         6f:be:ac:bc:55:60:20:86:fa:23:e1:d8:cb:3f:1e:bf:98:73:
         a3:d9:7b:3b:22:8d:62:86:78:10:8d:fb:62:ff:7c:03:76:2a:
         22:6c:a1:9f:c5:a1:c8:3a:2e:d6:9b:68:aa:ae:7f:da:6f:b7:
         c8:bc:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:34 2025 by rpki-client