This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File:                     G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier:          PQsiByZRRLLfcae6yT3DtJAoHoSJlsNy0T1jU8nKxY0=
Subject key identifier:   C1:34:1B:8B:81:45:1B:F5:47:93:0B:FB:B6:B9:1A:A7:2A:2F:6E:88
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer:       /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial:       019B4392A2B4506BA110769004CB8D1452ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number:          056F
Signing time:             Mon 22 Dec 2025 01:00:41 +0000
Manifest this update:     Mon 22 Dec 2025 01:00:41 +0000
Manifest next update:     Tue 23 Dec 2025 01:00:41 +0000
Files and hashes:         1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: IqkGCg2aId7Xm63RTRw/bb8HdMCDHHz1fT9qaphzJ5o=)
                          2: mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (hash: Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:92:a2:b4:50:6b:a1:10:76:90:04:cb:8d:14:52:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
        Validity
            Not Before: Dec 22 01:00:41 2025 GMT
            Not After : Dec 23 01:00:41 2025 GMT
        Subject: CN=c1341b8b81451bf547930bfbb6b91aa72a2f6e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:16:6f:ad:51:13:85:ee:c3:98:48:8b:c5:
                    31:24:60:7d:73:1b:70:18:4b:df:ed:e3:c7:1f:af:
                    d5:ac:1a:0c:62:6a:d9:45:94:37:5d:78:b7:41:21:
                    9d:3b:00:6f:2f:0a:49:6c:b9:a5:50:a8:47:3c:32:
                    93:06:78:eb:d8:e1:fd:39:1b:40:49:0b:91:9d:6f:
                    e1:b0:98:84:3d:98:43:78:51:f1:2e:b6:47:8f:cd:
                    90:c5:95:42:97:ad:62:58:47:b1:b1:18:a5:fe:52:
                    c2:d5:f9:10:4d:ed:25:b0:27:1e:b1:1b:dc:2e:c8:
                    6b:f2:1f:05:1b:a5:18:87:6f:af:af:91:94:6f:8f:
                    59:7a:10:40:05:09:d8:48:ba:f7:ec:e8:f9:65:a0:
                    97:df:b7:75:98:a6:14:c0:8d:22:50:4c:9f:25:93:
                    8a:89:6e:3c:3e:80:5c:8c:2e:a3:61:d2:f1:0b:cc:
                    98:83:c5:b2:f7:39:b9:54:99:1f:c8:48:79:df:21:
                    ba:1e:41:40:71:25:18:e5:8d:d1:f2:8f:f3:ee:58:
                    52:be:45:ef:0b:7a:23:7a:ef:9b:11:35:04:a6:67:
                    18:65:fe:b8:a9:53:42:79:7c:78:68:b2:d7:23:e1:
                    5d:1c:c2:59:39:31:4b:15:0e:29:01:8c:db:0e:aa:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:34:1B:8B:81:45:1B:F5:47:93:0B:FB:B6:B9:1A:A7:2A:2F:6E:88
            X509v3 Authority Key Identifier:
                keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:cf:ed:b6:94:88:f5:60:81:c7:d7:38:45:ce:7b:79:13:
         e4:28:88:5a:6b:0d:1b:8c:3c:38:d4:9e:ef:39:1d:8c:ac:79:
         19:84:3e:ea:be:15:79:c5:d7:ee:b3:b7:91:d2:14:56:bd:e6:
         94:d4:b2:c5:ec:26:90:f9:54:b2:df:b6:e7:62:75:81:ad:06:
         83:68:a8:e1:9e:00:dd:da:a3:b6:3d:70:40:3c:a9:44:67:da:
         d6:07:f7:e0:e4:d4:2c:6e:29:20:47:df:a5:f3:50:59:68:e9:
         98:c3:d1:51:69:3c:d1:7f:ac:8d:cd:0d:6a:a6:a7:0b:2a:38:
         25:3c:6d:f3:43:7d:45:0b:56:c7:43:5b:4a:20:c7:38:ab:38:
         a1:fb:34:28:2c:1b:f8:33:d1:2d:a7:c3:4b:0e:59:45:f6:c8:
         76:20:76:17:55:97:c2:b1:37:00:49:96:80:bb:dc:49:82:53:
         7d:f3:1e:57:c6:71:c0:ad:b1:8e:92:76:a9:9b:1b:8f:61:6c:
         be:fa:b3:d8:ac:1a:14:e4:e8:55:38:91:1a:74:e9:e0:20:7b:
         ed:cb:4b:82:4d:b6:83:ec:d8:c9:3a:a6:c3:d8:bf:3b:60:27:
         43:66:96:1d:fa:20:a3:a8:1d:a3:4e:54:c6:98:a4:6f:58:b5:
         62:9a:27:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDkqK0UGuhEHaQBMuNFFLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTZmNWQzMjQ3NGJlODZmNjMwNTg5NDQ1Mzc2MjkzNDRk
NGYwMWEwHhcNMjUxMjIyMDEwMDQxWhcNMjUxMjIzMDEwMDQxWjAzMTEwLwYDVQQD
EyhjMTM0MWI4YjgxNDUxYmY1NDc5MzBiZmJiNmI5MWFhNzJhMmY2ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYgWb61RE4Xuw5hIi8UxJGB9cxtw
GEvf7ePHH6/VrBoMYmrZRZQ3XXi3QSGdOwBvLwpJbLmlUKhHPDKTBnjr2OH9ORtA
SQuRnW/hsJiEPZhDeFHxLrZHj82QxZVCl61iWEexsRil/lLC1fkQTe0lsCcesRvc
Lshr8h8FG6UYh2+vr5GUb49ZehBABQnYSLr37Oj5ZaCX37d1mKYUwI0iUEyfJZOK
iW48PoBcjC6jYdLxC8yYg8Wy9zm5VJkfyEh53yG6HkFAcSUY5Y3R8o/z7lhSvkXv
C3ojeu+bETUEpmcYZf64qVNCeXx4aLLXI+FdHMJZOTFLFQ4pAYzbDqqyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME0G4uBRRv1R5ML+7a5GqcqL26IMB8GA1UdIwQY
MBaAFBum9dMkdL6G9jBYlEU3YpNE1PAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYt
NTgwODFhMTZjYmRiLzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iYmVlNTktOTlmNC00MTNjLWIwZDYtNTgwODFhMTZjYmRi
LzEvRzZiMTB5UjB2b2IyTUZpVVJUZGlrMFRVOEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkPP7baU
iPVggcfXOEXOe3kT5CiIWmsNG4w8ONSe7zkdjKx5GYQ+6r4VecXX7rO3kdIUVr3m
lNSyxewmkPlUst+252J1ga0Gg2io4Z4A3dqjtj1wQDypRGfa1gf34OTULG4pIEff
pfNQWWjpmMPRUWk80X+sjc0NaqanCyo4JTxt80N9RQtWx0NbSiDHOKs4ofs0KCwb
+DPRLafDSw5ZRfbIdiB2F1WXwrE3AEmWgLvcSYJTffMeV8ZxwK2xjpJ2qZsbj2Fs
vvqz2KwaFOToVTiRGnTp4CB77ctLgk22g+zYyTqmw9i/O2AnQ2aWHfogo6gdo05U
xpikb1i1YponbQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 02:52:08 2025 by rpki-client