This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File:                     m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier:          n/TjrQHhRqZk5miHfRi3/6wqKf/K2ueymNTsJ+O7/8k=
Subject key identifier:   2F:75:BA:EB:A3:67:ED:95:04:58:D6:F9:A1:E1:19:44:0E:22:DC:3F
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer:       /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial:       019B3AC66D51E887E65C508D9356BCAC3FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number:          178A
Signing time:             Sat 20 Dec 2025 08:00:41 +0000
Manifest this update:     Sat 20 Dec 2025 08:00:41 +0000
Manifest next update:     Sun 21 Dec 2025 08:00:41 +0000
Files and hashes:         1: f7PbKdzww9eFqmnrI3piPy2autI.roa (hash: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=)
                          2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: 6nm+xI3FBAMcNVlxZemv0JhDoji+ROWwpLhTIr4WRB8=)
                          3: xhmAfLkH5cXdTfyZ-bUPjRF4p2I.roa (hash: xl3A4+W1ikpeq98vDwW24/ZZ/cjGs93cM5HGe2yBy/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:c6:6d:51:e8:87:e6:5c:50:8d:93:56:bc:ac:3f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
        Validity
            Not Before: Dec 20 08:00:41 2025 GMT
            Not After : Dec 21 08:00:41 2025 GMT
        Subject: CN=2f75baeba367ed950458d6f9a1e119440e22dc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:a9:ed:7b:7a:28:ca:4d:db:60:c2:67:25:
                    34:a2:ef:47:68:36:6c:d4:63:19:55:3c:a9:d5:a7:
                    3d:12:a8:1e:86:07:a1:c4:b4:33:bd:d0:e2:57:81:
                    48:8c:bd:58:8a:fd:1b:2c:ed:bc:49:a1:e3:d5:8e:
                    85:e8:fd:db:51:01:32:8a:7f:ea:ad:12:6a:91:f8:
                    4e:2b:f5:d5:b3:6c:84:0a:02:df:bf:8e:1c:87:a2:
                    93:df:b5:68:82:d4:c2:37:f3:ca:37:96:af:ff:c5:
                    68:91:88:55:b4:7a:c6:be:70:d1:a3:fe:3b:7b:c9:
                    5b:b9:26:47:c7:d0:60:37:d3:a5:40:bb:fc:85:fb:
                    93:a1:31:26:29:c4:46:a3:a2:76:ac:3e:89:47:5c:
                    6f:61:5d:b8:2c:b4:be:09:6e:ec:9f:ec:f7:df:65:
                    59:1c:10:3f:7d:e0:db:81:f8:f7:b2:37:b1:2e:85:
                    eb:e2:86:14:b3:a9:b3:e6:8a:e9:8d:2c:99:2e:81:
                    eb:b1:9e:65:6f:1b:4d:85:75:9d:36:bb:6c:10:ba:
                    79:e7:2b:92:d2:7d:57:a8:d5:d1:d1:fd:0a:02:90:
                    44:f3:fd:bd:80:83:9d:d4:9f:85:2c:59:1e:42:76:
                    e4:90:fe:17:a7:6e:f6:47:81:50:a4:fb:9b:b4:1e:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:75:BA:EB:A3:67:ED:95:04:58:D6:F9:A1:E1:19:44:0E:22:DC:3F
            X509v3 Authority Key Identifier:
                keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:36:d1:f4:a6:3b:90:f5:55:4b:2d:08:d7:a4:9e:3b:aa:
         2a:fe:12:33:d1:38:63:e7:28:49:36:cd:f5:c1:5f:d8:34:61:
         f4:c7:c4:47:41:eb:be:8c:43:c3:8b:82:f8:4b:b8:dc:15:fa:
         c6:18:87:a2:cb:ed:1e:29:32:b7:e0:82:30:c5:89:7c:4d:8e:
         06:57:4b:fa:c4:5d:e9:94:68:0c:54:47:7c:cb:0e:b1:91:d8:
         02:58:aa:f5:88:11:39:95:c7:0f:51:a4:ba:6e:9d:c5:e5:9d:
         7b:5c:c0:96:3b:43:0d:72:fb:3b:9e:2d:e8:26:e9:4e:6a:69:
         01:0e:cc:32:42:80:d8:d7:05:fb:28:ae:2b:1b:3c:d9:05:d2:
         cc:19:13:3a:fb:58:24:0d:cd:f6:96:85:7f:3d:e6:5e:79:66:
         58:93:fa:2e:e1:24:2c:b4:7d:ad:dd:52:e4:00:eb:51:11:09:
         ae:de:7d:db:46:08:ae:69:83:57:1a:a2:70:de:d4:81:19:24:
         63:1c:d9:e2:5c:5a:c4:d9:bf:e2:bd:7a:40:12:4e:5d:27:12:
         f9:d4:c2:c5:b6:1d:6f:83:d7:ec:e3:17:5e:4f:44:f0:cc:09:
         bd:ba:60:45:40:3f:9b:f3:08:da:64:85:13:09:8e:ba:a4:a6:
         94:aa:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:00:59 2025 by rpki-client