This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          OQW+/+KdXIxn78MqFwMz6bl6+BkNtQaFKcwD6FAUoRE=
Subject key identifier:   D1:9F:93:4A:14:5D:97:47:B2:63:7E:89:68:16:23:17:56:4F:0D:2F
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019B462631EA3043BB894BE98E7D826D9BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          16E2
Signing time:             Mon 22 Dec 2025 13:01:06 +0000
Manifest this update:     Mon 22 Dec 2025 13:01:06 +0000
Manifest next update:     Tue 23 Dec 2025 13:01:06 +0000
Files and hashes:         1: 31Lnqd98aILf2Q9ICfWlWSchBQQ.roa (hash: DcqcrHdJNZRvLJWfvAXOgG6RHZHxR0/3JTue0isYM5w=)
                          2: 4AyXvezl-yqEPm9B7grorGuuaCU.roa (hash: nr0Tbymm5gT2Px5I4yZcmfEB00Mwgpc5V9ZF1AUNTUw=)
                          3: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: APQXWcer3Yf4aS8JRxv0/wwc0Aar7z4A7tn0FxeI2uc=)
                          4: MVj_UryY6usDMGQf7jrICRKU9Xc.roa (hash: TvJrrNTxB79t+M5iqPy3C87lEZr00PLUFyfmpQY3E3Q=)
                          5: ptaM1onrhJcKal0fw9HXf-WMHZY.roa (hash: O+DKgB5l1bVNFuSJ+/nDkTvI9UVJFEJCp07K7RKqMQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:26:31:ea:30:43:bb:89:4b:e9:8e:7d:82:6d:9b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Dec 22 13:01:06 2025 GMT
            Not After : Dec 23 13:01:06 2025 GMT
        Subject: CN=d19f934a145d9747b2637e8968162317564f0d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:e9:74:05:d8:93:37:26:64:97:0d:d9:54:
                    44:f9:31:d1:c9:93:bf:fc:df:da:44:d1:c0:26:c2:
                    35:fe:04:eb:de:4b:c7:3a:61:0f:4e:fe:2a:3b:07:
                    56:2d:10:ee:1f:09:54:d4:df:dd:6c:8a:bf:9c:fd:
                    f3:5d:d4:b0:9b:2c:fa:3b:5e:0a:89:c3:48:79:c8:
                    0d:0d:a6:17:3c:a1:f8:db:08:6b:6f:ea:ba:36:a0:
                    e8:db:ce:d4:1e:97:ac:d1:9b:85:47:8d:ef:04:f4:
                    e6:f0:f7:ed:b7:4e:c7:a6:24:94:67:25:b1:e1:19:
                    e9:8e:4f:19:c2:07:93:32:c9:85:0f:4b:fd:5c:f0:
                    e8:7d:4e:5e:77:69:d2:d0:cf:93:6d:79:45:3b:b4:
                    56:78:d3:37:a3:ad:ec:ff:a7:1b:9c:b4:94:09:97:
                    2f:e6:8d:18:95:24:00:57:68:ef:db:e3:88:cd:c5:
                    bf:bc:8b:45:84:98:85:0c:71:65:47:92:08:1a:2e:
                    1b:56:51:91:a5:05:1e:94:73:0f:0c:27:74:d0:54:
                    b8:46:5a:63:95:3e:d2:8e:5a:ca:d1:3e:3c:7c:ee:
                    1a:3f:e6:1f:f5:e5:fc:16:01:1a:c0:15:74:cc:9b:
                    d6:2d:9b:9a:20:cf:53:6d:b0:2c:24:62:7e:41:51:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9F:93:4A:14:5D:97:47:B2:63:7E:89:68:16:23:17:56:4F:0D:2F
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:90:8c:52:cf:05:6b:0f:3d:16:8c:61:71:41:1d:00:22:
         02:9a:4f:53:33:3b:29:e9:60:12:86:37:e4:4d:a6:6b:c6:0e:
         7d:cf:e1:8e:e3:64:12:15:b3:18:f9:55:c1:18:53:13:d5:90:
         45:ed:f0:47:36:79:92:62:8e:7d:05:e5:bb:68:65:66:00:03:
         5d:32:d0:90:1a:71:fd:1d:74:fb:f5:d2:b4:4d:82:1f:9d:2d:
         90:a9:7b:30:b8:12:ad:8a:80:6a:b3:9f:bb:34:a3:48:dc:7f:
         e1:07:ab:3e:56:ef:7c:c7:e8:e1:85:22:82:50:e7:95:25:f8:
         ac:d0:2e:a1:d6:98:4b:b2:c4:b9:a4:a4:8a:60:e9:31:a5:26:
         4a:eb:50:a7:1a:28:a8:aa:2c:dd:a9:d7:d8:cf:fe:20:d4:e7:
         63:2f:ab:0b:ee:4c:79:c3:27:25:e5:f4:ff:12:b7:49:9a:bf:
         12:e4:dc:21:90:ad:d3:f7:b7:73:eb:b1:a3:48:35:6f:63:bd:
         5e:10:9f:39:9a:66:28:50:76:11:11:88:1e:b7:a4:82:ca:2a:
         0a:08:6d:36:87:77:bb:84:21:14:d7:f1:5c:80:1c:a4:9f:18:
         13:8d:91:3f:b7:01:e7:c8:c1:08:8e:dc:5b:91:19:2c:92:3f:
         d8:ef:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:29:49 2025 by rpki-client