This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File:                     G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier:          sPgxV07/xQYbannUD4ZQYzvgrLE/iBFHaEUTIJnO7qk=
Subject key identifier:   DB:F1:5F:40:2A:78:05:8D:57:E3:19:91:73:55:C3:B1:77:5E:9C:E8
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer:       /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial:       019B3D230960B5B4E3A1A5E573163EAE056A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number:          16DF
Signing time:             Sat 20 Dec 2025 19:01:04 +0000
Manifest this update:     Sat 20 Dec 2025 19:01:04 +0000
Manifest next update:     Sun 21 Dec 2025 19:01:04 +0000
Files and hashes:         1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
                          2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
                          3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: dr/+8OJmOA+yORl8swGNPka3l6Ogbq6r30qKJlBa+NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:23:09:60:b5:b4:e3:a1:a5:e5:73:16:3e:ae:05:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
        Validity
            Not Before: Dec 20 19:01:04 2025 GMT
            Not After : Dec 21 19:01:04 2025 GMT
        Subject: CN=dbf15f402a78058d57e319917355c3b1775e9ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:84:bf:60:b0:dc:87:6d:14:88:8b:3b:a7:
                    90:48:b7:b9:f5:88:6d:4d:5c:89:8c:1c:c3:b6:b4:
                    0e:51:6a:e8:4c:84:d0:ba:ff:b1:bf:cf:2e:ce:d2:
                    a5:04:ec:58:7e:52:46:81:1d:b9:97:79:81:7f:7e:
                    66:3b:0f:3b:f4:ba:df:5b:05:42:4d:ed:39:c2:8f:
                    44:9b:9c:44:1d:9c:63:ca:b0:12:5d:22:24:74:f3:
                    8c:bf:6e:b7:f2:4a:c1:2e:70:02:ff:b9:45:e0:00:
                    08:56:21:b5:99:a2:12:d8:d0:44:47:5c:9d:be:6c:
                    d7:77:90:d2:87:5c:2a:50:1c:95:ae:d7:ef:ea:28:
                    69:e9:f2:78:25:c4:76:bf:b1:20:3e:b4:5a:71:e2:
                    64:a4:e0:4e:d7:5b:a0:91:81:5c:04:b6:93:6b:b8:
                    b8:09:d2:41:2f:ad:0e:3b:b2:2b:9c:46:75:eb:26:
                    0e:b6:8c:d8:23:ec:98:ab:8f:f6:26:b7:27:da:c9:
                    5c:b7:40:93:92:b1:b0:d8:fa:1c:a3:55:b4:a8:35:
                    f1:ba:1f:da:dc:6e:27:c2:07:61:5a:9e:c9:5a:40:
                    a7:8d:d8:a4:a0:0a:03:c4:29:ed:79:ba:ee:42:96:
                    75:1f:52:49:8f:48:cc:04:17:ca:e2:35:a0:71:d1:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F1:5F:40:2A:78:05:8D:57:E3:19:91:73:55:C3:B1:77:5E:9C:E8
            X509v3 Authority Key Identifier:
                keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:40:4c:76:d3:3a:02:8f:a2:36:32:47:23:83:ae:a2:59:
         29:4f:f1:b9:2f:70:c8:62:45:4b:38:eb:0a:ce:12:83:14:12:
         41:3c:52:4c:17:de:a6:af:ad:ee:8f:98:23:b2:78:8d:56:63:
         18:d7:08:a5:de:dc:c4:ad:5b:02:9e:bd:a0:8c:ad:cc:a6:4a:
         2b:bf:52:7d:8e:bb:1b:5c:63:aa:6c:1f:c7:cc:dc:7f:f4:97:
         17:d9:21:ff:f9:03:59:30:cf:da:9a:c0:0a:c7:09:c0:7c:a0:
         20:59:19:bc:0e:9c:50:09:5a:e6:7d:08:31:7d:32:b1:d6:7a:
         ab:2c:b4:2c:b4:d4:63:b8:05:55:b9:29:20:1d:12:df:fa:78:
         f5:91:79:da:f9:8c:ed:47:c0:2e:b0:46:a5:41:7a:1d:50:52:
         98:e8:24:d6:20:b9:cb:01:d0:53:15:11:06:51:1e:ee:2e:12:
         55:b6:ec:66:6d:e9:69:12:67:af:fa:3f:54:a2:e0:0f:4e:62:
         1c:18:27:fe:1d:10:21:b7:9f:00:a5:50:57:d4:ce:c4:1c:78:
         0c:7c:e1:1b:93:03:28:2d:63:76:c4:a8:91:b8:58:c2:f1:8d:
         e5:73:6e:c9:7f:0e:11:2e:8d:b9:90:89:20:e7:58:fb:ef:48:
         82:5e:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:38:17 2025 by rpki-client