This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier:          5aNj5Oh57m5L1yEZMznahoeTEIUFFVVH3KqpR3T3TD8=
Subject key identifier:   8E:80:6A:79:73:54:0D:02:B4:C1:6D:28:6C:40:1F:16:2C:3F:13:A7
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       019B40C864C2429610B58B473E189B6922FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number:          1794
Signing time:             Sun 21 Dec 2025 12:00:33 +0000
Manifest this update:     Sun 21 Dec 2025 12:00:33 +0000
Manifest next update:     Mon 22 Dec 2025 12:00:33 +0000
Files and hashes:         1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=)
                          2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=)
                          3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=)
                          4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=)
                          5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=)
                          6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: Xz39aITZbys5sutst/S/EC34ymA+n/K1KCMDqXFuWXc=)
                          7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=)
                          8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=)
                          9: 9nB9xptebm_yqovp27eMXwv2Kj0.roa (hash: A6LbvNPZp+pkrahA14ukMartOC6uLxnoJIQUTgrBExQ=)
                          10: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=)
                          11: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=)
                          12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=)
                          13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=)
                          14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=)
                          15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=)
                          16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:c8:64:c2:42:96:10:b5:8b:47:3e:18:9b:69:22:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Dec 21 12:00:33 2025 GMT
            Not After : Dec 22 12:00:33 2025 GMT
        Subject: CN=8e806a7973540d02b4c16d286c401f162c3f13a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:ef:21:10:81:64:1d:c3:45:4c:fc:4d:e1:
                    f3:ec:ce:79:5b:95:fd:a1:02:53:98:01:7b:9c:47:
                    2e:4d:bc:a0:73:a0:de:3e:03:a5:08:64:a3:4a:ee:
                    99:9a:58:a1:78:a7:9c:2d:42:f2:a9:74:26:e8:bb:
                    ff:ed:68:ca:bf:42:26:7f:fa:51:ff:77:8a:6d:de:
                    a4:af:6d:b5:61:5a:c9:be:36:1f:16:de:13:14:08:
                    12:de:22:c6:1b:8f:0f:ae:19:d9:9c:e5:cc:c7:8c:
                    84:09:eb:61:31:a7:1b:b7:38:68:87:37:0d:72:5d:
                    9a:40:64:95:9a:18:e4:57:e3:bd:49:7c:dc:27:2f:
                    62:09:8f:f8:74:07:81:ec:e8:d6:97:3d:d9:1b:13:
                    86:e7:af:e8:90:1c:93:0a:69:14:c7:6b:f3:dc:87:
                    ba:48:7a:41:6e:6b:98:c6:70:56:2c:30:7b:17:1e:
                    b9:37:4c:9b:05:c6:3a:a0:7d:27:83:bd:cc:2c:80:
                    0c:6b:f5:c9:4c:85:98:d1:1b:e5:6b:c6:7e:5c:87:
                    a1:f8:85:15:bc:4f:dd:41:91:98:7a:a8:e1:a1:75:
                    35:bc:9a:fd:92:86:5a:b0:66:c8:29:1b:f9:e0:c1:
                    ed:b6:bb:29:39:f9:6d:9e:ea:73:d6:d1:f8:62:b0:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:6A:79:73:54:0D:02:B4:C1:6D:28:6C:40:1F:16:2C:3F:13:A7
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:ad:71:ff:5b:83:b4:ad:54:2a:0d:3f:32:37:b0:34:ac:
         c2:5c:05:19:8c:ab:6c:f0:72:b3:7c:64:8d:d3:cd:63:ea:58:
         83:87:96:3c:7e:0b:c6:1d:ec:3f:cb:d8:35:a2:5b:02:7e:4c:
         14:b0:6f:f7:0a:04:83:80:6c:cc:b8:86:d2:83:cc:b7:c1:d2:
         99:85:fd:54:ce:46:7a:90:d3:13:93:f3:7d:c4:b3:cd:ff:c4:
         b2:df:50:81:6e:b7:1b:9e:7a:9e:57:f8:c4:9c:74:c2:c3:6b:
         3c:fd:d8:1b:b4:07:8f:10:41:34:c2:8b:90:1f:7d:a1:eb:5c:
         50:f3:8b:fb:73:eb:54:c2:69:34:a8:24:a1:4c:a0:2c:3b:17:
         38:a7:33:db:b6:86:d8:7c:33:1c:d1:74:37:b4:53:46:c8:13:
         d8:f3:52:85:6f:34:6c:6f:22:0f:3c:70:1d:4a:66:b7:2b:d6:
         8c:22:22:0e:4f:16:a7:98:4d:7e:46:81:f4:da:19:4e:7c:5d:
         a6:83:ad:49:32:7c:78:e8:f8:80:12:b4:d3:97:77:71:8f:c7:
         6b:fe:4b:86:01:86:1f:87:2a:98:b7:31:4a:1a:f6:1d:cd:c7:
         7e:e5:8d:91:91:79:a6:af:1d:76:84:30:83:4e:ba:b0:10:56:
         40:a3:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:37:27 2025 by rpki-client