This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          AdIHdE+E6BUaeonvtP1PYV1gZOWJUC+vk8gikpJQEUg=
Subject key identifier:   7B:E0:2D:0F:EB:58:F6:9C:46:9B:F6:47:F7:63:A5:9A:26:38:A9:C5
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       019B747FD960B820941F56D0B765B6D1BAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0E75
Signing time:             Wed 31 Dec 2025 13:01:34 +0000
Manifest this update:     Wed 31 Dec 2025 13:01:34 +0000
Manifest next update:     Thu 01 Jan 2026 13:01:34 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: p8A97FJbBBMZfif9+w+Sd+DjQGOdQYbb0uS+YMQe9cQ=)
                          2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:74:7f:d9:60:b8:20:94:1f:56:d0:b7:65:b6:d1:ba:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Dec 31 13:01:34 2025 GMT
            Not After : Jan  1 13:01:34 2026 GMT
        Subject: CN=7be02d0feb58f69c469bf647f763a59a2638a9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:f3:6b:f6:9d:8a:9d:c1:01:5a:d9:2a:2c:
                    9a:6c:d2:12:08:d8:d6:5f:9b:c9:c0:8c:29:f1:c9:
                    35:e1:b5:a7:a9:b8:78:7a:61:2e:42:70:a9:ed:cb:
                    01:21:c9:bc:c9:d4:14:81:a6:ad:bb:ed:2a:6a:e8:
                    cd:29:a7:c2:9a:a2:cb:26:aa:ad:fc:51:48:47:2f:
                    e9:bf:1a:f5:04:d3:fb:96:7e:ef:8c:d6:76:40:99:
                    56:3a:8f:e7:29:3f:f4:d2:b1:98:2a:be:b7:ad:18:
                    01:71:73:a3:84:29:9e:aa:bf:10:52:ef:a5:ac:e3:
                    cc:63:e0:6f:27:88:aa:13:8e:5a:48:52:27:07:4c:
                    a4:25:e3:7b:39:55:c9:ac:4d:21:c5:88:5b:16:34:
                    81:ce:6b:55:75:d2:d7:b9:69:eb:da:25:da:3f:3d:
                    a0:bc:a9:ee:b0:a2:73:6c:f0:7c:50:fa:9a:a7:43:
                    43:e2:12:4f:b6:9e:d9:9c:4f:d8:56:0c:b6:d5:ac:
                    87:b8:4b:b9:e0:d1:c6:72:c0:ab:75:1a:c7:35:3e:
                    3b:01:18:7b:96:84:62:82:8e:1d:d4:9f:23:c9:36:
                    79:3f:93:14:af:a3:29:6e:cc:58:de:8b:54:a7:ff:
                    d5:fc:5c:f9:44:a3:8e:95:3c:50:32:7f:69:e2:69:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E0:2D:0F:EB:58:F6:9C:46:9B:F6:47:F7:63:A5:9A:26:38:A9:C5
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a1:f3:5a:9f:72:4c:8f:2a:62:fb:5a:0e:1f:cd:5b:01:ab:
         6c:81:3c:4e:54:8b:d8:38:4c:b3:61:a0:58:0c:12:05:1d:8e:
         de:1c:74:ba:9f:e0:e4:ae:27:06:06:85:20:3a:99:7f:cb:1c:
         f5:7c:78:f6:59:c6:b7:bd:20:19:04:20:55:e6:90:02:45:13:
         0c:42:7d:9e:5c:38:51:d9:d3:d0:24:7c:55:d7:ac:b8:9e:50:
         c7:86:0d:82:41:6d:20:2c:63:b6:e1:a5:84:c9:26:c3:40:3d:
         1f:d1:12:98:91:a7:aa:30:db:b5:bd:5f:07:f4:1e:dd:2a:9f:
         09:fd:98:de:a4:ee:9e:6a:f0:a0:a7:d7:24:ee:73:5a:50:b8:
         bc:64:9a:7a:ec:e0:ea:37:57:29:8e:b1:43:5c:48:1f:5a:a5:
         f0:b5:a6:7b:7e:25:1b:5e:47:04:97:ad:fa:ec:39:ff:76:84:
         77:19:51:56:b9:ca:3d:e1:c4:52:e0:42:5c:32:53:a8:e9:fb:
         aa:16:45:bb:01:d0:9c:d3:60:17:0f:55:ed:d3:06:83:24:38:
         34:59:0c:3e:82:74:d3:7d:7f:15:00:d8:e9:f5:1f:f3:83:02:
         a9:bf:5d:b5:20:8d:5a:fe:84:4d:59:b7:e8:1c:62:a1:26:75:
         d7:c2:e1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt0f9lguCCUH1bQt2W20brBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjcxNDQzOTA1Zjk0MGIxMzhkOWQ0YjRhMzQ4N2NiZmJk
MDIxZTMwHhcNMjUxMjMxMTMwMTM0WhcNMjYwMTAxMTMwMTM0WjAzMTEwLwYDVQQD
Eyg3YmUwMmQwZmViNThmNjljNDY5YmY2NDdmNzYzYTU5YTI2MzhhOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8zza/adip3BAVrZKiyabNISCNjW
X5vJwIwp8ck14bWnqbh4emEuQnCp7csBIcm8ydQUgaatu+0qaujNKafCmqLLJqqt
/FFIRy/pvxr1BNP7ln7vjNZ2QJlWOo/nKT/00rGYKr63rRgBcXOjhCmeqr8QUu+l
rOPMY+BvJ4iqE45aSFInB0ykJeN7OVXJrE0hxYhbFjSBzmtVddLXuWnr2iXaPz2g
vKnusKJzbPB8UPqap0ND4hJPtp7ZnE/YVgy21ayHuEu54NHGcsCrdRrHNT47ARh7
loRigo4d1J8jyTZ5P5MUr6MpbsxY3otUp//V/Fz5RKOOlTxQMn9p4mnS6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvgLQ/rWPacRpv2R/djpZomOKnFMB8GA1UdIwQY
MBaAFOgnFEOQX5QLE42dS0o0h8v70CHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUt
NTdjN2U2MTk5YjEyLzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUtNTdjN2U2MTk5YjEy
LzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6HzWp9y
TI8qYvtaDh/NWwGrbIE8TlSL2DhMs2GgWAwSBR2O3hx0up/g5K4nBgaFIDqZf8sc
9Xx49lnGt70gGQQgVeaQAkUTDEJ9nlw4UdnT0CR8VdesuJ5Qx4YNgkFtICxjtuGl
hMkmw0A9H9ESmJGnqjDbtb1fB/Qe3SqfCf2Y3qTunmrwoKfXJO5zWlC4vGSaeuzg
6jdXKY6xQ1xIH1ql8LWme34lG15HBJet+uw5/3aEdxlRVrnKPeHEUuBCXDJTqOn7
qhZFuwHQnNNgFw9V7dMGgyQ4NFkMPoJ0031/FQDY6fUf84MCqb9dtSCNWv6ETVm3
6BxioSZ118LhYA==
-----END CERTIFICATE-----
Generated at Wed Dec 31 21:05:10 2025 by rpki-client