This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File:                     _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier:          PA6i6n0W7lkSiXi5MHd3bKsxwUzBaT6qBaRpIE3hETE=
Subject key identifier:   F4:DE:7F:3F:8A:CB:B4:21:0D:6D:A5:BF:0E:C9:10:F0:E3:7A:6D:1E
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       019B35D7157361055AA79DA30F9BA255E90C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number:          16B6
Signing time:             Fri 19 Dec 2025 09:00:46 +0000
Manifest this update:     Fri 19 Dec 2025 09:00:46 +0000
Manifest next update:     Sat 20 Dec 2025 09:00:46 +0000
Files and hashes:         1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
                          2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
                          3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: fXLmFgnCtPhrCg+fz8nDyvVq9iTHZF8ji+L6JVRbsFo=)
                          4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
                          5: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (hash: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d7:15:73:61:05:5a:a7:9d:a3:0f:9b:a2:55:e9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: Dec 19 09:00:46 2025 GMT
            Not After : Dec 20 09:00:46 2025 GMT
        Subject: CN=f4de7f3f8acbb4210d6da5bf0ec910f0e37a6d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:70:24:b0:1a:c3:af:7a:d5:b3:c8:b3:49:04:
                    a4:33:d7:c8:e6:ed:10:c5:6e:dc:2d:14:c6:25:75:
                    24:4e:1f:ed:ff:95:b8:60:83:12:6e:2a:39:82:58:
                    e0:07:97:d6:68:7a:81:e7:05:88:45:aa:82:a6:56:
                    71:8a:2a:7a:b0:16:de:32:c3:7b:41:cd:9a:6d:c6:
                    b6:55:1b:30:f9:98:e8:b8:f6:38:94:2c:15:7c:7a:
                    bd:4a:41:83:c9:fd:49:76:34:77:9c:8e:10:91:d1:
                    7d:2a:7a:60:4f:5c:25:cd:a1:58:d6:22:32:2b:fe:
                    51:aa:5b:7d:70:6b:78:d6:74:f0:c2:d5:b3:4f:17:
                    8a:1e:8e:ef:5b:eb:a4:6b:26:ee:4a:be:1e:da:11:
                    86:92:ec:f2:9f:5f:77:47:d5:4c:a4:14:29:94:68:
                    c1:cf:3e:08:50:10:1f:35:15:7d:9a:ad:70:2b:84:
                    87:01:16:66:c2:27:66:5b:98:d1:d6:54:0e:09:9d:
                    4e:50:3e:8f:59:42:65:a8:5a:22:16:cc:60:f6:41:
                    cf:78:59:fc:2e:6e:9f:49:f9:ea:7a:26:85:cf:8c:
                    99:fb:5d:32:54:2d:c4:2c:e6:1c:6f:a7:94:be:f0:
                    8e:4b:06:93:50:5f:a0:b9:83:20:b1:39:b7:81:88:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:7F:3F:8A:CB:B4:21:0D:6D:A5:BF:0E:C9:10:F0:E3:7A:6D:1E
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:51:0a:18:7d:2e:2d:d5:fe:df:c2:40:b5:1d:e8:ee:af:0c:
         27:0e:38:10:1e:d9:1c:4c:5c:34:1f:89:1d:0b:63:58:48:5f:
         82:ba:f8:dc:9d:0d:40:a4:38:e9:81:a4:d6:39:e7:10:b9:7a:
         6e:44:4e:d7:09:0b:48:41:32:20:9f:c1:e6:2e:65:51:74:69:
         54:9c:5e:f0:85:b5:ca:ea:d8:f4:96:e8:43:a9:f6:2c:aa:f9:
         6f:fa:8b:6e:14:da:9e:18:a8:0c:31:f2:a8:53:80:b6:9c:aa:
         00:47:a7:3e:a8:55:ad:89:29:ac:9a:39:87:10:cd:eb:53:1e:
         1e:59:70:0a:4a:c6:96:df:16:e5:5d:51:51:7d:c0:60:7f:33:
         00:91:1c:ca:9a:09:65:7d:b4:e0:23:51:43:9f:48:fd:c3:84:
         c5:ab:8b:34:cb:e4:12:73:22:ba:5b:f4:6d:99:9a:9e:d3:d5:
         bc:e3:34:bb:d1:8a:e0:9d:e3:e6:d1:58:8e:b7:ce:d4:c7:ca:
         d6:a4:9b:8a:57:ab:90:2e:d2:06:a9:03:87:24:da:98:04:53:
         be:63:6d:ff:62:aa:57:e8:78:66:38:54:e0:c6:a6:38:81:c3:
         28:3c:e2:b4:f1:2c:1f:98:51:5a:bb:6a:ba:86:cb:c0:60:9b:
         17:81:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:44:29 2025 by rpki-client