This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          4LBc9YrMcN02j7skmvbwl2enJC8TETg0bohvso+SgVw=
Subject key identifier:   F5:C3:D7:0A:33:E9:C4:FE:D6:9B:6A:F8:79:2C:66:7F:0D:0E:8A:D4
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019B3E6D92D7BB72FABE1BA39CEE84012638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          1715
Signing time:             Sun 21 Dec 2025 01:02:06 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:06 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:06 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: gBRulUKkSOAEiJ13cR22scpcIh3VN4Z32PrxQ5ynWYk=)
                          2: 8MrJou4jHWMvbrgNdX-4pxWfc90.roa (hash: WNU23R3SY6kHyJmbcKZj6sAJrT/H2apTu6VsmiUGadk=)
                          3: I2TVT7DNE2G9XXNPIvC7ssj4vy0.roa (hash: 5m+YSBm5ZTcuXSiyQRLawLxfa0qfeuRlBCs8VexXa7Q=)
                          4: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (hash: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=)
                          5: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (hash: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=)
                          6: w4zzq3GKAiXTtkaxwc19NwVaitc.roa (hash: J/2FTFkZfxRTxJNhlHUgf8n7TYgo+AXQ4IVYmjTCUKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 01:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6d:92:d7:bb:72:fa:be:1b:a3:9c:ee:84:01:26:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Dec 21 01:02:06 2025 GMT
            Not After : Dec 22 01:02:06 2025 GMT
        Subject: CN=f5c3d70a33e9c4fed69b6af8792c667f0d0e8ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:be:0b:9b:4b:68:14:ae:b9:25:84:f9:d7:
                    d1:bf:d9:d5:e0:0d:28:38:f0:3a:97:72:56:c2:32:
                    dd:2b:2b:ec:40:bb:e3:73:1f:d0:ee:37:61:9e:d4:
                    f9:8e:a3:cc:8c:64:96:17:69:dd:ad:e7:0f:01:64:
                    f2:06:3d:84:0d:f4:ed:a1:2a:58:86:c7:a6:73:70:
                    91:37:0a:2f:21:a6:1f:b3:30:66:cd:cc:9b:f0:25:
                    8f:03:8f:9a:5a:2f:10:42:f6:69:74:3e:be:b3:5b:
                    df:ac:dd:0e:7d:3a:5c:dc:a4:fb:12:be:95:2f:ee:
                    e7:51:85:cb:ee:48:aa:12:8b:2e:64:b0:74:6c:df:
                    63:c0:2e:3e:76:26:77:bb:16:2f:9c:da:0f:10:d3:
                    81:35:e2:b9:85:79:fa:a1:a9:07:1f:5a:5e:41:4d:
                    fd:b8:d2:88:38:60:8d:89:4c:8e:87:38:c0:0f:a8:
                    dd:58:3f:f5:e0:cf:ab:f7:0d:97:fe:a9:df:5d:a8:
                    ee:7b:98:6b:f3:a0:60:44:58:50:09:6e:a5:8b:52:
                    a5:1e:50:cb:6e:d8:de:4e:9b:41:02:77:5d:de:a3:
                    7d:d8:5d:fd:d6:ca:a2:44:04:12:f7:ba:b5:e9:00:
                    d4:a5:3c:67:09:b1:d8:d0:05:46:d2:9d:4a:97:b3:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:D7:0A:33:E9:C4:FE:D6:9B:6A:F8:79:2C:66:7F:0D:0E:8A:D4
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:4a:cb:60:b6:26:12:53:a6:da:78:24:c9:b8:5b:fa:dd:
         d0:e8:21:4b:86:e6:7f:8c:e0:ee:72:55:7f:c1:d2:ac:08:5e:
         ba:25:58:8f:15:c2:11:f9:24:3b:f4:14:5d:f2:38:ab:c9:bb:
         0d:28:fa:23:6c:10:6a:3d:f1:a1:a2:0a:ec:38:5e:fd:26:08:
         35:26:bb:fb:36:35:44:99:37:99:8f:c1:3a:6d:d2:8e:14:71:
         dd:41:9d:1e:a6:11:d9:b1:b7:2e:88:cc:cc:ec:f9:89:a2:cd:
         9f:38:c7:d4:6c:97:15:c4:33:66:f2:5f:3d:54:88:c8:d7:48:
         29:ec:40:27:c2:ba:3f:6c:72:1f:1a:7d:f6:73:b1:88:1a:fd:
         b8:20:66:06:40:d7:d1:c2:3f:0e:0e:49:1b:1a:96:47:a5:2a:
         69:c3:3d:f8:d2:ca:68:4d:7b:0f:59:e3:68:96:67:8a:e5:eb:
         f3:85:ce:46:54:f9:7f:08:bd:1d:e1:47:af:2c:61:e6:a0:7e:
         14:31:b4:7b:c5:0d:e4:cc:c7:e3:ec:96:be:5f:c8:2c:49:95:
         a5:69:e1:23:40:11:80:59:72:c9:64:89:a5:95:23:7e:f9:01:
         49:e1:a7:4c:fd:df:45:b7:09:ac:ea:a5:cf:c6:b6:38:49:e4:
         4c:65:19:a9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZs+bZLXu3L6vhujnO6EASY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWM1MGYxOWQ5OTMwYWVlYzA5Y2QyN2Y1MDhmYzUwMmVh
MTRkMWYwHhcNMjUxMjIxMDEwMjA2WhcNMjUxMjIyMDEwMjA2WjAzMTEwLwYDVQQD
EyhmNWMzZDcwYTMzZTljNGZlZDY5YjZhZjg3OTJjNjY3ZjBkMGU4YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aK+C5tLaBSuuSWE+dfRv9nV4A0o
OPA6l3JWwjLdKyvsQLvjcx/Q7jdhntT5jqPMjGSWF2ndrecPAWTyBj2EDfTtoSpY
hsemc3CRNwovIaYfszBmzcyb8CWPA4+aWi8QQvZpdD6+s1vfrN0OfTpc3KT7Er6V
L+7nUYXL7kiqEosuZLB0bN9jwC4+diZ3uxYvnNoPENOBNeK5hXn6oakHH1peQU39
uNKIOGCNiUyOhzjAD6jdWD/14M+r9w2X/qnfXajue5hr86BgRFhQCW6li1KlHlDL
btjeTptBAndd3qN92F391sqiRAQS97q16QDUpTxnCbHY0AVG0p1Kl7MLSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPXD1woz6cT+1ptq+HksZn8NDorUMB8GA1UdIwQY
MBaAFPusUPGdmTCu7AnNJ/UI/FAuoU0fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02eFE4WjJaTUs3c0NjMG45UWo4VUM2aFRSOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04Yjkx
LWQ2MmU0NTRiZjM3Zi8xLzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRlLzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYz
N2YvMS8xLTZ4UThaMlpNSzdzQ2MwbjlRajhVQzZoVFI4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA1K
y2C2JhJTptp4JMm4W/rd0OghS4bmf4zg7nJVf8HSrAheuiVYjxXCEfkkO/QUXfI4
q8m7DSj6I2wQaj3xoaIK7Dhe/SYINSa7+zY1RJk3mY/BOm3SjhRx3UGdHqYR2bG3
LojMzOz5iaLNnzjH1GyXFcQzZvJfPVSIyNdIKexAJ8K6P2xyHxp99nOxiBr9uCBm
BkDX0cI/Dg5JGxqWR6UqacM9+NLKaE17D1njaJZniuXr84XORlT5fwi9HeFHryxh
5qB+FDG0e8UN5MzH4+yWvl/ILEmVpWnhI0ARgFlyyWSJpZUjfvkBSeGnTP3fRbcJ
rOqlz8a2OEnkTGUZqQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:35:09 2025 by rpki-client