This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          GEUeHTtgmPQCNMbMYXUgrhG7eaVQJBXs3XfJB5RduuI=
Subject key identifier:   81:3B:3D:4C:2A:4C:BF:2B:9F:D9:17:7D:BD:36:D0:79:B8:37:E2:27
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       019B2B1DF7F80A420060B0F92E84BEA2A487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          112A
Signing time:             Wed 17 Dec 2025 07:02:22 +0000
Manifest this update:     Wed 17 Dec 2025 07:02:22 +0000
Manifest next update:     Thu 18 Dec 2025 07:02:22 +0000
Files and hashes:         1: 1o1EO_QQPmnZ8plF5uOUWfPej3I.roa (hash: ih+zsElPgdS9pl3aJWT5y3rEqtTRMgUDV5NvhBE9Nxk=)
                          2: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: oJ7BGmWpcg6pjtSlFeeEe5zhgGPp/6c7nDInv+qIduI=)
                          3: KwwH1tV59uIMDd5TAGspH19uR4o.roa (hash: x1yYHpItXbsfzuH9Uo0WPpObfj69kidI+dgaDxqjw94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:1d:f7:f8:0a:42:00:60:b0:f9:2e:84:be:a2:a4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Dec 17 07:02:22 2025 GMT
            Not After : Dec 18 07:02:22 2025 GMT
        Subject: CN=813b3d4c2a4cbf2b9fd9177dbd36d079b837e227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:62:69:be:d3:a0:fe:84:29:8e:e4:c7:43:
                    4f:f9:18:a3:29:71:f7:88:6a:3e:40:14:d4:24:63:
                    df:17:17:58:6f:80:88:20:c0:85:37:a3:1d:8e:49:
                    55:bd:08:8a:d5:66:d3:44:ee:e0:ab:52:82:f2:6c:
                    b7:b8:da:fd:86:0a:e2:ec:8c:1a:d1:44:09:12:bf:
                    55:7a:ac:38:e2:d0:bc:94:d2:e0:ac:13:fb:ad:b9:
                    8f:24:c1:be:28:63:31:47:ad:5f:b6:20:20:f6:cf:
                    d9:a6:9d:16:a8:38:a3:74:53:4a:ff:f9:1b:75:aa:
                    68:c9:77:8e:34:64:1e:a4:e1:52:b7:87:9f:c9:23:
                    83:8d:7f:84:e3:5f:80:9b:d7:5b:83:62:e9:80:c3:
                    54:91:99:8e:34:0f:bf:3d:05:91:55:e6:33:a1:87:
                    c6:f2:08:70:34:1e:fd:92:91:8d:1d:b1:de:8e:59:
                    d2:c3:c5:9b:b2:1c:d3:4f:e0:2a:e9:bc:09:b9:b2:
                    d3:d0:31:76:5c:2d:5b:20:fd:23:a5:70:91:49:40:
                    84:18:07:58:23:22:ac:a1:e7:61:3f:08:d2:ef:78:
                    24:c1:6f:81:b1:3d:98:7d:23:bf:3f:d8:12:24:5d:
                    42:02:bf:cc:81:f1:e5:79:cf:0b:de:d8:1e:77:a0:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:3D:4C:2A:4C:BF:2B:9F:D9:17:7D:BD:36:D0:79:B8:37:E2:27
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:e9:84:e1:a9:e6:9d:c2:e7:46:18:68:72:ee:4e:1b:a8:
         87:c5:7a:21:bc:96:06:c0:1c:0f:e3:61:4b:33:86:b6:0c:eb:
         8b:18:61:e9:d8:d2:05:bd:9d:f3:c2:30:32:e6:21:26:2d:3a:
         3b:d4:58:88:21:54:05:0f:6b:5b:33:d7:5c:46:96:dd:31:72:
         76:64:8d:51:72:39:a2:47:7b:f8:07:de:45:a5:2c:05:51:62:
         54:0b:51:bb:0f:1a:85:57:0a:21:60:9e:a6:03:a5:3a:03:bb:
         3f:a5:4e:80:8e:03:13:a4:86:66:19:2e:3a:cb:91:0b:84:84:
         56:53:e7:82:b6:d9:56:e8:0e:6e:ed:db:53:04:2d:f8:40:e8:
         99:f7:8c:3e:0d:62:7a:42:31:1f:95:86:35:03:2a:9f:94:71:
         e5:71:03:71:fe:93:46:b7:96:3f:5d:b5:f7:d8:52:db:5c:00:
         fb:05:6c:07:72:96:a4:e2:e8:12:61:d6:e2:a8:25:33:2c:66:
         b7:bb:4d:53:ed:a9:d6:2b:79:79:af:09:13:2d:c8:5e:ab:65:
         7b:9b:cd:ac:33:0a:15:b2:b8:41:47:fc:2e:a6:41:fd:b9:bb:
         a9:47:d7:b8:a8:5b:56:5e:8d:c2:74:9f:d1:1e:95:b2:a7:0b:
         a6:2a:a0:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsrHff4CkIAYLD5LoS+oqSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzhmOTE4MmI3ZGE0NDAwMzU5MWVlYWUyNTYwZjg0NTFi
MzM5M2EwHhcNMjUxMjE3MDcwMjIyWhcNMjUxMjE4MDcwMjIyWjAzMTEwLwYDVQQD
Eyg4MTNiM2Q0YzJhNGNiZjJiOWZkOTE3N2RiZDM2ZDA3OWI4MzdlMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBJiab7ToP6EKY7kx0NP+RijKXH3
iGo+QBTUJGPfFxdYb4CIIMCFN6MdjklVvQiK1WbTRO7gq1KC8my3uNr9hgri7Iwa
0UQJEr9Veqw44tC8lNLgrBP7rbmPJMG+KGMxR61ftiAg9s/Zpp0WqDijdFNK//kb
dapoyXeONGQepOFSt4efySODjX+E41+Am9dbg2LpgMNUkZmONA+/PQWRVeYzoYfG
8ghwNB79kpGNHbHejlnSw8WbshzTT+Aq6bwJubLT0DF2XC1bIP0jpXCRSUCEGAdY
IyKsoedhPwjS73gkwW+BsT2YfSO/P9gSJF1CAr/MgfHlec8L3tged6DhfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE7PUwqTL8rn9kXfb020Hm4N+InMB8GA1UdIwQY
MBaAFOk4+RgrfaRAA1ke6uJWD4RRszk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmIt
NGRmNzI4YzU4ZDE3LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmItNGRmNzI4YzU4ZDE3
LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnvphOGp
5p3C50YYaHLuThuoh8V6IbyWBsAcD+NhSzOGtgzrixhh6djSBb2d88IwMuYhJi06
O9RYiCFUBQ9rWzPXXEaW3TFydmSNUXI5okd7+AfeRaUsBVFiVAtRuw8ahVcKIWCe
pgOlOgO7P6VOgI4DE6SGZhkuOsuRC4SEVlPngrbZVugObu3bUwQt+EDomfeMPg1i
ekIxH5WGNQMqn5Rx5XEDcf6TRreWP12199hS21wA+wVsB3KWpOLoEmHW4qglMyxm
t7tNU+2p1it5ea8JEy3IXqtle5vNrDMKFbK4QUf8LqZB/bm7qUfXuKhbVl6NwnSf
0R6VsqcLpiqg0g==
-----END CERTIFICATE-----
Generated at Wed Dec 17 09:43:14 2025 by rpki-client