This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File:                     alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier:          p8gZjNE9Y22Od0aWAUzx1QWUR0XNRdUSNayHlGfnoIg=
Subject key identifier:   83:2A:F1:EF:C7:6A:40:55:12:2B:3A:89:13:4A:E7:8B:14:3C:67:36
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer:       /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial:       019B462599DC9C08D8DECC923CE69F769669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number:          1793
Signing time:             Mon 22 Dec 2025 13:00:27 +0000
Manifest this update:     Mon 22 Dec 2025 13:00:27 +0000
Manifest next update:     Tue 23 Dec 2025 13:00:27 +0000
Files and hashes:         1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
                          2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
                          3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
                          4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
                          5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: 2/lAD06poxUtRKpGKh/i29myUm+OWS3UZ8wxuQzj+ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:25:99:dc:9c:08:d8:de:cc:92:3c:e6:9f:76:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
        Validity
            Not Before: Dec 22 13:00:27 2025 GMT
            Not After : Dec 23 13:00:27 2025 GMT
        Subject: CN=832af1efc76a4055122b3a89134ae78b143c6736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:3d:b5:a8:8b:b5:e3:6e:1a:4d:ee:69:b4:
                    88:d4:7e:83:19:f5:a4:e5:98:00:97:47:9c:94:2f:
                    9b:f0:99:32:46:24:52:27:23:16:4d:c3:56:ce:57:
                    23:90:82:79:46:1b:8e:6a:fa:a9:7f:0d:57:54:e3:
                    0c:1c:73:7e:11:e5:53:b7:1c:5f:44:fd:a9:92:c7:
                    cc:46:7e:dc:ed:cf:56:82:5f:44:f9:4f:02:ae:3e:
                    78:a8:44:54:f3:f5:30:fa:bb:83:3e:42:fa:92:a5:
                    11:ec:e7:52:3f:e0:b2:e3:3f:09:f5:28:8f:fa:2d:
                    08:8b:c7:e7:2c:81:03:ee:49:0b:5c:a2:21:0a:25:
                    43:ab:c8:4d:d9:b6:04:d8:83:dd:85:d9:05:5f:29:
                    23:51:4f:a9:e2:80:82:72:20:1f:bb:42:f2:bf:18:
                    b3:92:63:90:4e:a6:1d:0f:87:b6:7f:14:4d:09:3a:
                    3e:7d:3a:dd:1b:f6:a5:85:24:c8:0e:a8:f3:48:95:
                    93:18:f1:68:83:9f:12:bc:af:af:43:a1:6e:dd:41:
                    8d:ce:fc:24:e5:7a:d2:74:ab:d6:22:ff:a7:58:d9:
                    a5:26:af:50:98:73:64:d1:e0:4c:58:cf:bb:4f:f2:
                    e2:4a:44:2d:fa:80:df:27:83:f3:71:3c:9b:dd:ee:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2A:F1:EF:C7:6A:40:55:12:2B:3A:89:13:4A:E7:8B:14:3C:67:36
            X509v3 Authority Key Identifier:
                keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1a:c1:63:56:ae:d5:af:28:2f:33:f6:4c:dc:6d:04:50:fd:
         5f:b8:84:1e:74:4e:58:12:ab:2c:60:67:1d:48:e4:6c:c0:39:
         8f:62:61:bf:2b:3e:da:f6:92:67:af:74:8d:ed:62:39:15:d3:
         c9:6c:e9:25:2b:59:c2:6b:76:3e:5e:ac:6a:5d:2a:5c:52:2b:
         3b:99:0e:0d:20:a7:b5:90:2d:e7:fd:c7:a8:43:53:73:87:43:
         c4:72:7b:3b:12:cb:db:38:7e:94:fd:f0:71:b3:22:e9:22:82:
         19:1d:03:36:95:8c:3d:90:05:61:cf:ec:af:7c:46:d1:f7:c1:
         ff:4d:69:3e:c1:13:1c:f2:d7:6d:33:ee:81:7b:14:25:80:c2:
         0e:32:1a:37:97:06:35:0b:e8:2b:71:00:76:cf:55:de:53:cd:
         40:e6:c2:a2:53:ef:dc:cf:72:5b:6d:a9:ff:82:56:67:b0:59:
         14:cd:d2:cb:f7:a5:1d:46:cc:57:d3:78:55:35:b9:f0:f6:0b:
         ec:e1:bd:47:18:ac:18:e6:b7:13:3c:f2:67:d3:01:fe:0e:22:
         66:69:da:71:e1:91:e7:d4:61:04:46:4f:c7:49:ef:a9:ba:5f:
         33:0b:91:13:ca:7f:e6:72:1d:ef:0f:3c:a6:80:bd:f6:c8:6a:
         c3:07:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:10:17 2025 by rpki-client