This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File:                     bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier:          nhlfm1uGf7yY+EG+rwmWzUKtUVMdpYbLspA1ZizuJMo=
Subject key identifier:   EE:DC:DC:5E:4A:AB:7A:5B:44:7B:A7:C1:66:57:73:B7:AA:F5:03:0B
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       019B4ADF075A25832E3999C57931A34FEE85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number:          14DB
Signing time:             Tue 23 Dec 2025 11:01:28 +0000
Manifest this update:     Tue 23 Dec 2025 11:01:28 +0000
Manifest next update:     Wed 24 Dec 2025 11:01:28 +0000
Files and hashes:         1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
                          2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: HVcFzRzljuayEiRIQj2LHDSmcUlc36ps0zXyZMAk2GU=)
                          3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
                          4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:df:07:5a:25:83:2e:39:99:c5:79:31:a3:4f:ee:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Dec 23 11:01:28 2025 GMT
            Not After : Dec 24 11:01:28 2025 GMT
        Subject: CN=eedcdc5e4aab7a5b447ba7c1665773b7aaf5030b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:48:7c:16:7a:b0:f5:81:cf:03:bd:f9:46:
                    fe:29:f1:9a:d0:19:b9:be:ec:73:ab:71:0d:8d:79:
                    b2:b9:82:37:56:2d:cb:8c:62:0c:22:78:4e:9d:b0:
                    34:a7:23:85:6d:7c:94:35:c8:a0:eb:2f:86:61:a0:
                    cf:ec:d9:9a:c0:65:a9:b8:53:61:02:14:1c:d2:2f:
                    66:96:61:6d:8c:50:3c:4e:5d:42:d1:c1:b3:36:96:
                    14:d3:d7:75:d2:7b:b9:81:1f:0f:4c:a9:3a:a3:85:
                    69:aa:92:9e:16:0c:fa:8b:50:34:cd:fc:45:97:14:
                    e5:5e:c9:78:a0:1e:a2:64:5c:ba:55:6d:00:84:65:
                    8c:fd:4f:15:85:c0:b9:31:1a:ff:2d:66:ba:c4:0a:
                    31:02:79:26:f1:2a:a4:a1:6e:ac:b6:a6:67:48:61:
                    6d:7b:cf:3c:6a:d7:72:84:71:e0:03:6b:70:41:6e:
                    0a:94:8a:6d:a5:e8:41:4c:e8:16:35:49:f3:23:1c:
                    9d:59:67:31:54:ac:6c:c1:04:26:41:63:e3:44:19:
                    45:b3:29:18:34:07:d8:27:e1:fc:d8:a4:23:1d:04:
                    3b:9b:4a:9d:3f:3f:e9:51:e8:3b:10:f9:c3:9e:07:
                    1e:64:e7:7a:21:80:f8:c9:23:53:60:05:d7:34:ef:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:DC:5E:4A:AB:7A:5B:44:7B:A7:C1:66:57:73:B7:AA:F5:03:0B
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4a:b3:6e:d2:ae:3e:10:89:01:4d:82:ac:20:1a:3c:1e:48:
         33:dc:f1:ab:00:53:08:ea:4c:82:87:47:69:78:2d:dd:99:ee:
         ce:fd:35:24:b6:c1:b8:f0:4c:7c:0f:ef:13:11:3d:ca:bf:0e:
         a1:76:46:88:f1:10:0f:b4:c7:5e:67:68:c7:0f:81:26:a3:78:
         86:98:90:9e:0d:e8:c2:a6:2e:6e:d2:7e:ca:c1:db:aa:e1:43:
         45:e2:4f:a1:01:43:27:f6:8d:06:d3:16:b0:04:fd:d5:99:46:
         60:ca:ab:28:6a:1b:05:04:05:d1:cc:9c:ca:97:4e:d1:eb:66:
         90:8d:66:0d:3f:73:72:1b:47:36:6a:e0:c7:89:c4:d1:24:84:
         a1:28:71:50:6f:87:4c:48:2b:3c:8e:7b:7d:80:8f:eb:88:eb:
         21:ab:39:a6:fd:82:a2:5c:a8:e1:19:b8:e2:d4:45:cf:38:f3:
         75:07:2c:fd:80:10:58:6e:ea:96:ed:fb:7d:92:96:76:d8:a6:
         61:a6:2e:8d:e0:20:9e:94:40:b0:79:93:c8:43:c1:98:50:09:
         6a:21:7b:93:76:7d:78:f7:01:97:40:2b:e4:5d:73:8e:45:17:
         20:18:41:19:37:96:ee:55:62:7a:ea:1b:03:7a:b6:5e:7b:da:
         3e:63:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:34:41 2025 by rpki-client