This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
File:                     u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json)
Hash identifier:          Cdp/1R+DZQkLqdJUgHx6YCb7hVWNDXnQMg8y+jgnUIc=
Subject key identifier:   F4:E4:87:36:1C:13:78:DD:2F:83:14:21:22:65:11:1F:0D:AA:72:9A
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Certificate issuer:       /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial:       019AF46500936A46F95A3B3CB2FFE1754BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
Manifest number:          1531
Signing time:             Sat 06 Dec 2025 16:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:51 +0000
Files and hashes:         1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=)
                          2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=)
                          3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=)
                          4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=)
                          5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=)
                          6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=)
                          7: bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa (hash: +pvmNAe4DVU0G8NksRdtjc76cKcR1QvaqfbXLphvYek=)
                          8: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=)
                          9: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=)
                          10: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=)
                          11: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=)
                          12: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: 27Hr03J3bxycrteUhnRNmeTwI3uT9PdJHLsXjopW7pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:00:93:6a:46:f9:5a:3b:3c:b2:ff:e1:75:4b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
        Validity
            Not Before: Dec  6 16:00:51 2025 GMT
            Not After : Dec  7 16:00:51 2025 GMT
        Subject: CN=f4e487361c1378dd2f8314212265111f0daa729a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:35:ff:bd:76:4e:be:50:98:97:41:da:10:c4:
                    44:ca:29:d3:08:10:02:5c:ae:f7:ca:16:ac:11:90:
                    84:4c:fb:d6:03:82:d8:8c:b5:95:f6:64:14:cf:43:
                    20:00:a1:e1:3a:16:9f:24:60:f3:d5:45:25:a8:5a:
                    06:39:2d:f3:8c:08:b2:c5:85:7e:0f:de:75:e4:02:
                    fb:66:b1:d4:03:7c:58:0f:f7:59:68:b3:76:ca:1c:
                    fd:f4:9f:dd:23:d6:df:3c:ec:46:ac:5c:3e:e0:24:
                    73:75:19:69:58:0f:fa:27:49:c5:8f:94:ee:58:b3:
                    8d:e7:11:cc:92:a4:b8:56:1d:2b:ea:ee:a8:c7:69:
                    85:e4:6b:6a:5a:99:14:6b:15:ac:e9:76:27:2d:28:
                    da:3b:82:75:42:50:2e:4a:bc:56:06:84:e5:14:5d:
                    1b:94:58:3c:c6:29:7b:61:b4:8c:b5:7f:57:a8:d8:
                    ce:8b:98:73:2a:1f:20:dd:ff:3d:46:39:ef:f3:50:
                    7b:e6:46:d9:ad:0c:fe:ea:23:c3:2e:b4:41:dd:82:
                    8d:5e:b6:2f:47:18:67:3d:06:35:e9:ac:76:ab:2e:
                    77:65:4a:9b:67:15:80:70:61:6f:5b:98:6a:67:82:
                    7b:4f:3b:86:f3:1f:46:89:26:06:12:3d:57:41:38:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E4:87:36:1C:13:78:DD:2F:83:14:21:22:65:11:1F:0D:AA:72:9A
            X509v3 Authority Key Identifier:
                keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:a9:bc:1b:60:a4:4c:33:84:3c:0c:a2:d1:c0:22:24:9a:
         de:83:1b:38:a0:c2:50:2a:7f:68:1b:df:d8:94:2f:0e:bf:cb:
         1a:da:ad:3c:3d:0e:50:8c:65:33:32:0d:fb:f5:dd:c1:56:61:
         a7:ff:1d:26:96:8e:b4:76:d5:ac:fd:8b:23:8b:75:c5:60:dd:
         c1:de:45:41:15:d6:a1:4e:fa:7d:70:40:25:6b:e3:7d:75:8d:
         10:64:b1:0c:ca:41:13:be:1e:37:07:29:5e:4a:c9:bc:a5:8a:
         58:3f:79:13:37:55:83:2f:1a:a7:c0:95:2e:90:c6:72:26:e3:
         6f:60:c2:49:21:71:d7:92:f2:b0:1b:f5:35:31:cd:07:40:f5:
         78:41:e3:41:70:fe:b6:06:f5:92:13:a8:c2:6c:95:a2:ab:6a:
         a9:c6:4f:3e:44:90:6f:fc:c7:f0:68:ef:28:c7:37:a3:9d:6b:
         c6:7d:41:d9:55:84:97:8a:88:02:3b:5e:cc:8e:51:3f:17:9a:
         b8:a2:77:cd:fa:c8:03:98:9e:83:35:62:3a:d8:f8:9f:98:49:
         db:95:2f:63:d6:33:6c:a9:de:78:3d:c6:7c:75:b2:f7:6a:d8:
         0d:bb:38:f0:bc:ae:a0:df:4a:4c:08:09:b4:33:a4:5a:b8:83:
         ba:b4:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:18 2025 by rpki-client