This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          Cfq1dPxnsivpeCFXeqcTJnNuZUQr4Ol1RSwTITCV/Hg=
Subject key identifier:   0F:4F:E2:B8:AA:F2:A0:DB:2C:69:21:AF:21:B9:1E:73:B3:C7:EE:11
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019B3DC78F7829018D67B015F2A496328C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          163B
Signing time:             Sat 20 Dec 2025 22:00:47 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:47 +0000
Manifest next update:     Sun 21 Dec 2025 22:00:47 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: ovlOuFkSYBhBQmXDt9uTeplvVx0/Z0sip3LNfjhrhjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:8f:78:29:01:8d:67:b0:15:f2:a4:96:32:8c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Dec 20 22:00:47 2025 GMT
            Not After : Dec 21 22:00:47 2025 GMT
        Subject: CN=0f4fe2b8aaf2a0db2c6921af21b91e73b3c7ee11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:81:b1:07:52:a1:4b:7d:d2:0b:2c:dc:e4:
                    7b:0e:7c:73:32:59:41:1c:a0:a0:42:9f:66:68:ae:
                    c8:92:e6:d5:ec:33:07:e8:5d:fa:df:4b:b5:5e:ff:
                    02:11:e4:32:d2:97:49:a5:1d:ed:bd:b6:5c:f6:63:
                    2b:88:71:d1:c4:c4:57:30:71:3d:f5:e6:aa:a7:3e:
                    68:0e:f0:3c:de:fd:2d:f1:05:c4:e3:c4:cd:b2:e6:
                    39:ac:ed:fa:cf:37:46:67:4a:88:3b:ef:81:07:f7:
                    7c:c4:fd:b0:77:7a:1f:44:d4:18:dc:53:07:dc:59:
                    44:4a:c7:05:e3:88:ea:cc:94:32:8f:ae:ba:14:c8:
                    28:7d:b1:eb:26:25:84:f4:6f:a7:63:83:8c:ff:1a:
                    55:78:b9:eb:74:9a:59:1f:5a:ec:ea:f3:09:a4:cc:
                    71:ec:cb:09:04:b8:e6:29:a5:f1:4b:d0:c0:c2:da:
                    a7:c1:a6:e6:5c:15:ca:fa:19:25:15:a2:15:dc:34:
                    82:cc:55:a6:b7:64:18:be:37:55:1c:3b:02:4c:4d:
                    36:31:26:f6:9e:1e:9f:8c:f9:80:79:a1:4e:80:da:
                    60:80:78:67:e2:7c:6d:86:ba:a8:db:f5:88:6e:23:
                    4f:29:c8:f6:14:31:ef:a3:91:c5:62:67:c6:f1:a7:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4F:E2:B8:AA:F2:A0:DB:2C:69:21:AF:21:B9:1E:73:B3:C7:EE:11
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:84:aa:c6:c2:6b:8f:3b:04:c0:6f:9a:41:93:cb:02:c4:d3:
         0b:bf:cf:c8:85:0b:17:63:8d:8c:5a:42:c5:69:46:0a:5f:ff:
         1d:da:c3:9d:c9:3e:74:cd:ea:46:bd:5a:bc:07:75:79:e8:01:
         6d:86:ac:6f:e9:9d:5e:bc:70:13:4f:f8:1e:67:13:1b:57:3f:
         7e:29:b3:97:29:8b:d6:e9:e9:a6:c6:ab:71:d5:91:49:0f:41:
         a1:6e:f4:7f:2c:f0:ee:db:03:8b:a3:23:09:37:8d:3a:44:55:
         4e:6f:57:41:67:75:d4:61:9b:ee:6e:4c:81:70:16:97:8f:cb:
         57:4e:39:8b:cd:d6:7b:f1:f1:cd:47:4b:dd:c9:d5:88:83:39:
         c9:92:07:c1:66:a7:53:93:9d:ee:33:11:c8:f0:92:a1:b0:fa:
         29:74:d8:79:1d:1d:fa:43:5c:34:d5:57:05:37:7d:fa:0f:5b:
         ca:c4:43:2a:3c:3b:e7:61:e6:29:45:6b:94:83:82:93:32:9b:
         d1:6d:9c:dc:bb:3b:a8:5c:13:96:df:45:0c:93:6b:1a:5b:cc:
         32:31:6f:e4:47:02:0e:d7:fa:18:94:36:ec:6c:48:26:8f:18:
         83:bc:ac:9b:28:22:4a:70:9e:79:0e:ad:e6:fc:8a:22:4f:6a:
         74:67:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:21:32 2025 by rpki-client