This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          GvAxq07i7zudgNo5m5/fzy6RCrtEl5povBtTma0u2G4=
Subject key identifier:   16:39:D1:F1:1C:6E:CB:DC:B5:36:7D:11:D4:02:95:DB:FB:D4:B2:3E
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       019B3231625554B2642D0C5BA783015FDA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          1784
Signing time:             Thu 18 Dec 2025 16:00:55 +0000
Manifest this update:     Thu 18 Dec 2025 16:00:55 +0000
Manifest next update:     Fri 19 Dec 2025 16:00:55 +0000
Files and hashes:         1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: O5uGnNHjev/2yae1O94Ho7jm/pC0zZ6oRa+PYGP2ql8=)
                          4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:31:62:55:54:b2:64:2d:0c:5b:a7:83:01:5f:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Dec 18 16:00:55 2025 GMT
            Not After : Dec 19 16:00:55 2025 GMT
        Subject: CN=1639d1f11c6ecbdcb5367d11d40295dbfbd4b23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:5f:9e:63:82:7b:44:47:5d:a2:f7:08:79:
                    4b:cd:36:7b:66:50:81:9b:61:e1:0c:38:6f:05:a0:
                    38:b8:e6:d1:ab:f8:0d:99:a1:7e:0a:0c:e7:7e:ab:
                    99:62:c3:a9:1b:79:a7:64:34:27:8e:fb:02:4d:14:
                    8e:3f:47:c2:cb:35:d5:6c:64:45:f0:59:e2:61:cc:
                    61:65:5a:ca:2f:24:91:68:bd:cc:87:ba:f8:0a:57:
                    5f:ad:40:26:02:25:fa:23:69:76:83:42:81:7c:86:
                    30:e3:61:dd:75:7a:71:e6:3a:17:21:be:bd:11:b2:
                    2f:d0:ea:6e:bc:29:22:9c:41:09:56:f7:2f:54:05:
                    81:95:26:a6:45:61:74:e8:59:20:d4:0d:d2:42:15:
                    d9:60:da:f2:6f:06:d5:f4:50:6f:6e:6b:59:06:18:
                    ec:9d:c6:6f:b8:a7:91:f4:00:66:50:f1:82:c1:e6:
                    ed:59:01:0c:59:6c:ea:67:1f:c1:ff:f0:ce:c1:0f:
                    5a:c6:ab:2d:50:1c:ed:7e:47:86:63:4a:97:5c:b8:
                    3a:33:92:86:39:f9:aa:6e:89:52:44:fe:a2:be:c0:
                    56:e2:e2:d6:d1:77:b4:47:f7:24:33:5a:78:70:3e:
                    20:e8:bf:c1:4f:d8:c5:14:f7:60:14:ce:86:9d:22:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:39:D1:F1:1C:6E:CB:DC:B5:36:7D:11:D4:02:95:DB:FB:D4:B2:3E
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:22:ee:42:08:45:65:72:2d:78:10:4e:6e:3e:44:8d:52:09:
         3f:f8:dd:cb:29:eb:a7:ba:93:43:31:32:ef:5c:72:ab:23:dd:
         e4:03:c1:f4:d7:63:eb:c9:3b:d9:53:ec:dd:6e:63:48:44:55:
         a0:51:d2:af:60:84:b5:0c:af:c0:13:b1:c9:ce:7b:2e:10:37:
         8b:fd:b3:14:33:05:2b:ce:db:31:79:8f:36:66:50:39:9f:cb:
         c9:5d:5f:56:d8:55:e5:80:fe:75:f3:87:f7:45:5a:80:b3:f8:
         19:8d:cd:c4:8c:c7:ae:7a:a1:ac:f2:42:91:4f:7b:8c:6c:f4:
         32:8a:e7:8c:b1:a2:57:8f:52:71:73:47:29:14:38:4d:eb:1f:
         88:fc:a9:2f:00:92:88:13:30:5a:fe:d8:9d:ae:f0:c5:3e:24:
         2c:8e:93:9d:eb:c3:5d:d7:46:d9:05:8a:a7:aa:93:6d:c5:bc:
         6d:d7:ff:c4:ca:70:f1:1b:d1:9e:0a:bd:4d:51:3e:fa:08:9f:
         e4:ec:ad:5b:70:62:28:60:89:68:09:86:1b:78:48:58:1d:8d:
         6e:20:45:55:67:91:da:5d:71:60:c6:38:a2:66:71:d1:4b:11:
         e8:b3:a0:79:d8:b0:4d:5f:72:ec:53:df:da:2a:e7:7e:0e:cf:
         f7:19:e3:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsyMWJVVLJkLQxbp4MBX9pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx
MjE2NDcwHhcNMjUxMjE4MTYwMDU1WhcNMjUxMjE5MTYwMDU1WjAzMTEwLwYDVQQD
EygxNjM5ZDFmMTFjNmVjYmRjYjUzNjdkMTFkNDAyOTVkYmZiZDRiMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkJfnmOCe0RHXaL3CHlLzTZ7ZlCB
m2HhDDhvBaA4uObRq/gNmaF+CgznfquZYsOpG3mnZDQnjvsCTRSOP0fCyzXVbGRF
8FniYcxhZVrKLySRaL3Mh7r4CldfrUAmAiX6I2l2g0KBfIYw42HddXpx5joXIb69
EbIv0OpuvCkinEEJVvcvVAWBlSamRWF06Fkg1A3SQhXZYNrybwbV9FBvbmtZBhjs
ncZvuKeR9ABmUPGCwebtWQEMWWzqZx/B//DOwQ9axqstUBztfkeGY0qXXLg6M5KG
OfmqbolSRP6ivsBW4uLW0Xe0R/ckM1p4cD4g6L/BT9jFFPdgFM6GnSKhRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY50fEcbsvctTZ9EdQCldv71LI+MB8GA1UdIwQY
MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt
YjE1YjNmYmMwNGE2LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2
LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiLuQghF
ZXIteBBObj5EjVIJP/jdyynrp7qTQzEy71xyqyPd5APB9Ndj68k72VPs3W5jSERV
oFHSr2CEtQyvwBOxyc57LhA3i/2zFDMFK87bMXmPNmZQOZ/LyV1fVthV5YD+dfOH
90VagLP4GY3NxIzHrnqhrPJCkU97jGz0MornjLGiV49ScXNHKRQ4TesfiPypLwCS
iBMwWv7Yna7wxT4kLI6TnevDXddG2QWKp6qTbcW8bdf/xMpw8RvRngq9TVE++gif
5OytW3BiKGCJaAmGG3hIWB2NbiBFVWeR2l1xYMY4omZx0UsR6LOgediwTV9y7FPf
2irnfg7P9xnjJA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 01:28:02 2025 by rpki-client