This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File:                     6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier:          AJ0IKwFXZn1/PBm9YBePzCtaAURPXixtQ4AwynoZ2g4=
Subject key identifier:   0D:0A:CA:71:DF:F0:11:1E:66:10:10:9A:D5:6A:0E:0A:C1:15:0D:06
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer:       /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial:       019B7110058FB133F5BCED932B568F1FF503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number:          131C
Signing time:             Tue 30 Dec 2025 21:00:33 +0000
Manifest this update:     Tue 30 Dec 2025 21:00:33 +0000
Manifest next update:     Wed 31 Dec 2025 21:00:33 +0000
Files and hashes:         1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: RVaZwTipRUbM+jUFMW3PD2E1yQE3ugrw6bWihOCaRBk=)
                          2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:71:10:05:8f:b1:33:f5:bc:ed:93:2b:56:8f:1f:f5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
        Validity
            Not Before: Dec 30 21:00:33 2025 GMT
            Not After : Dec 31 21:00:33 2025 GMT
        Subject: CN=0d0aca71dff0111e6610109ad56a0e0ac1150d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:29:02:7d:ac:a9:e3:e4:fd:ee:ae:f8:22:
                    e5:9e:99:cd:aa:e7:66:c5:dc:04:8f:63:16:e4:54:
                    1a:5a:db:24:cf:aa:05:24:91:f4:5a:fc:2f:b3:3a:
                    84:cc:1e:2a:07:34:f1:05:ad:51:41:15:d0:17:57:
                    25:51:b4:21:2e:5e:f1:b2:c3:30:fc:5a:d5:80:f7:
                    c6:2b:04:3c:35:ad:58:5b:46:ef:9f:96:47:5a:ec:
                    1b:f4:4e:98:bf:3c:67:bd:12:54:ac:bb:65:67:93:
                    ec:c0:e7:c1:27:94:d9:4f:82:84:f7:f7:ce:86:4f:
                    b5:ea:49:35:92:60:25:ec:eb:e1:62:91:4b:ea:b2:
                    cd:9e:e1:f3:01:4d:94:c3:5a:87:d0:c1:57:1a:c6:
                    ab:87:3c:c7:67:7b:bb:f2:2f:79:9c:1f:79:65:e2:
                    a9:46:b6:36:9a:3c:e2:8b:b2:ce:dd:03:0c:73:e5:
                    62:dc:52:e7:7a:44:19:3d:d1:1b:dc:22:78:2f:7a:
                    25:3f:64:db:25:d2:c5:23:f2:33:8f:36:9c:31:7d:
                    4f:4a:86:b2:b8:53:26:16:c8:dd:24:b0:fb:26:40:
                    3f:41:3e:a1:23:d6:af:98:d3:e6:ef:fd:0d:61:18:
                    7c:24:a3:a9:4b:1b:68:1e:b1:57:32:e7:5b:4e:cb:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:CA:71:DF:F0:11:1E:66:10:10:9A:D5:6A:0E:0A:C1:15:0D:06
            X509v3 Authority Key Identifier:
                keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3b:bb:43:85:3c:67:bd:2d:d4:12:7c:06:e8:bd:7d:c5:18:
         88:90:04:f6:13:8b:1a:ce:0d:b5:1b:7f:51:29:86:d5:77:67:
         52:64:df:e1:5c:e5:bc:95:a8:53:79:9d:73:3e:8b:f7:4b:ca:
         49:e1:b9:12:b0:f9:45:fe:ab:88:fe:16:50:78:11:c4:7d:f5:
         3e:a5:9b:3b:d5:08:f0:25:85:46:fe:c7:18:d6:c4:5d:7c:f6:
         6b:b6:fe:35:38:25:67:64:9b:a9:b1:4b:8a:4d:2b:52:bc:99:
         cd:39:c6:b1:de:57:27:b2:82:e7:fe:cc:47:bf:b7:6d:12:6f:
         52:5f:db:5b:79:ac:2a:d3:9e:bf:35:fd:43:4f:f6:1b:fb:82:
         e0:f6:d5:70:27:2e:99:bc:94:2c:8e:56:7e:7b:5a:86:3c:2a:
         61:69:a5:e5:c1:f9:75:d3:b4:b9:92:bf:5b:f9:aa:2f:10:3e:
         84:12:f9:2f:2d:76:68:0c:29:61:58:ad:51:b3:87:d3:af:d1:
         1d:9c:91:20:1c:47:5d:e9:26:1d:a4:00:b4:aa:9a:c0:3a:dc:
         dd:31:07:dc:29:23:b9:12:d1:55:f3:c1:bd:c7:0c:b5:d1:cd:
         d3:db:17:bb:8d:55:e6:ce:97:34:14:8b:3c:19:42:fc:93:53:
         ee:ca:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:17:52 2025 by rpki-client