This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          gf5sMPUfp/SXhzhZj+Jrjej+cEeAkGKIUm0uSWH1mZc=
Subject key identifier:   C1:DF:DA:40:C4:E2:3F:E7:5E:59:A0:C9:8E:6B:B9:15:15:C2:70:D3
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       019B5DC06B1177A732815105C703C99E2FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          088D
Signing time:             Sat 27 Dec 2025 03:00:49 +0000
Manifest this update:     Sat 27 Dec 2025 03:00:49 +0000
Manifest next update:     Sun 28 Dec 2025 03:00:49 +0000
Files and hashes:         1: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: pmT+KkyomHEgR4a1wGewREopiwUCei4LyWVpodKdSl4=)
                          2: DKwuyeTzcXlsjfEEUBHaEvjmjlY.roa (hash: xehl5t/wnL1MYEirEc3rgYVSjSjy0B0WsVEtPaCVdVQ=)
                          3: SQDJFyKznGtCKVmkEUnYaLhptpU.roa (hash: XEPlk5OXn/XLJYfgloRDlJ7X9N7ypjZHyh9xzsTH0Bw=)
                          4: WjYfnGn8JNGnSmX7_ykN8mRYE1Q.roa (hash: UrBT6jttsWOx1wSA3yMUtuOUpT7eYOhn9yPDk92V6lA=)
                          5: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (hash: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:c0:6b:11:77:a7:32:81:51:05:c7:03:c9:9e:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: Dec 27 03:00:49 2025 GMT
            Not After : Dec 28 03:00:49 2025 GMT
        Subject: CN=c1dfda40c4e23fe75e59a0c98e6bb91515c270d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:89:94:f6:93:7d:f7:1c:e1:45:98:78:cb:
                    10:c0:9a:f0:32:71:c7:26:4b:67:bb:ac:6e:b7:d4:
                    0a:cc:fe:2e:8b:57:a5:e4:26:5a:d5:81:b9:c0:5a:
                    ad:be:61:34:0b:4e:38:26:16:99:02:61:21:eb:cf:
                    a4:1d:99:ed:18:f6:c2:82:04:19:fd:e7:52:cc:a2:
                    cc:8f:0c:22:6b:e1:20:23:9d:9d:10:ce:ff:59:0e:
                    26:1a:21:a2:d2:31:c9:e1:a9:ba:88:4d:6c:87:3a:
                    41:4d:f5:52:68:4f:85:e9:6b:29:1a:5c:4a:5d:e9:
                    3e:0f:70:9b:c1:76:a5:e0:0e:64:03:e5:c1:98:a8:
                    bc:68:ea:17:7d:bd:ff:ed:31:bb:b8:a0:03:11:25:
                    4f:a9:34:07:4f:89:39:c5:a1:54:f1:d5:b7:66:a5:
                    5a:a5:30:cd:93:a4:fd:66:91:02:97:7e:e2:84:dd:
                    a4:8f:e1:56:30:01:c4:c5:d2:7f:93:e9:e7:22:85:
                    42:f1:fe:8f:22:2d:14:25:cf:e9:aa:ea:0a:a1:3d:
                    77:95:d8:59:fa:5b:7b:d8:c0:07:4d:47:fa:8b:91:
                    4d:fb:40:5d:0d:0f:26:4c:3b:3d:70:52:e3:37:4f:
                    51:39:70:c4:0c:c2:f4:b1:d3:4d:e1:6e:f2:cd:ec:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DF:DA:40:C4:E2:3F:E7:5E:59:A0:C9:8E:6B:B9:15:15:C2:70:D3
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:f0:b4:74:d0:29:6d:56:62:e1:f4:1e:8c:60:2c:1d:42:
         d9:61:1c:92:0d:d8:7a:8b:06:c1:f6:79:e5:80:c8:0f:10:63:
         89:d0:04:27:4c:d4:41:d7:5a:28:39:c3:70:cc:21:4c:ab:54:
         85:97:3a:de:80:ba:9c:d7:54:ad:09:a3:e9:58:0a:51:b3:62:
         68:aa:58:29:45:50:fc:99:67:3f:96:62:3c:f8:5b:f7:67:c5:
         e0:ca:ce:5f:8c:f8:75:4a:a7:d5:e9:cc:28:57:1f:15:fc:ff:
         ff:5b:a4:82:3e:ba:94:00:dc:de:03:50:15:b2:af:d9:69:6e:
         b9:8f:9f:67:2a:c9:f9:3f:ba:94:28:ee:81:08:8e:f7:bc:86:
         54:f6:79:71:79:8f:39:6d:7a:9b:22:07:a8:ee:d1:d0:ab:91:
         a5:30:c7:4c:a7:41:5a:36:1a:be:5b:83:25:7c:e8:b7:2e:b3:
         63:3a:00:34:2b:c0:58:8c:a7:3c:50:da:a6:d2:1a:77:24:23:
         f9:24:d5:81:af:bf:8f:00:1f:34:b3:0b:9b:06:8a:7d:6f:60:
         88:72:3b:3c:27:1d:a1:e9:8f:6e:a2:57:bd:c7:4b:1e:32:b9:
         4e:40:2d:6b:68:d2:33:f5:67:d7:c9:70:3a:45:52:3a:31:01:
         e8:c8:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 11:39:39 2025 by rpki-client