This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File:                     boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier:          gKg47TZnrIdImoCxSmWbfSqUB71i1GtxeD0wu/KyPPY=
Subject key identifier:   66:69:3A:2E:EB:63:BC:86:54:1F:1A:12:8C:F6:9E:B4:42:FE:6E:6E
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer:       /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial:       019B4B83841B880A1F165516A659CD5E56A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number:          16E9
Signing time:             Tue 23 Dec 2025 14:01:08 +0000
Manifest this update:     Tue 23 Dec 2025 14:01:08 +0000
Manifest next update:     Wed 24 Dec 2025 14:01:08 +0000
Files and hashes:         1: 1taXUDcoKkrQ-dr580_7U9lAPFs.roa (hash: v10BOdn0ARMHeuLgu+DFFhQlFSBEpSVcbwEGZOdb93k=)
                          2: Q5r7HzOrwEP1GGFCPc7woWNwbtw.roa (hash: U5JbPSv/06NMHfKHAXVH+Wi4JladerrLqdwWPT8pKOs=)
                          3: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: lubNKo/Xvg3W48+bjzZGsfVC4/3IXUFogANGb0kQH0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:83:84:1b:88:0a:1f:16:55:16:a6:59:cd:5e:56:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
        Validity
            Not Before: Dec 23 14:01:08 2025 GMT
            Not After : Dec 24 14:01:08 2025 GMT
        Subject: CN=66693a2eeb63bc86541f1a128cf69eb442fe6e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:33:ee:c4:16:69:d0:56:89:76:74:2a:9b:
                    9f:bf:81:95:8a:e3:05:3b:cb:d3:6f:79:02:83:bf:
                    c5:69:61:35:39:71:ba:5f:aa:9b:1e:71:15:5c:89:
                    59:2d:b4:4a:3b:00:ea:1d:ab:92:9d:d7:f8:61:e7:
                    2c:e8:c6:74:bb:18:8b:2b:66:ad:2e:fd:5a:4e:6b:
                    84:26:6a:52:72:49:12:58:b5:ce:40:b6:0b:99:e5:
                    93:3d:f3:d9:ae:f2:98:6d:39:11:cf:34:f0:b3:2c:
                    fb:b5:9c:85:a4:19:96:54:19:19:a9:00:e8:5a:be:
                    91:f1:78:10:b2:88:7b:c9:16:6c:b8:c8:94:b0:3c:
                    ef:00:88:14:97:f9:36:9f:1a:f4:d0:2e:e9:bc:eb:
                    ab:22:e6:7b:94:39:e4:d4:81:c6:ed:ea:1a:8b:90:
                    c7:9e:c8:35:77:59:5b:3c:0f:10:2b:34:19:49:9e:
                    56:c9:8f:d8:c4:19:bc:9c:71:2d:c7:18:f9:b2:9a:
                    da:4c:48:a4:91:47:be:5e:27:f1:ea:a1:3d:9f:fa:
                    c7:2c:9b:5b:87:96:1f:5f:fe:10:c4:ac:f2:61:85:
                    07:f4:77:08:1f:ed:41:46:3b:16:e6:c1:00:c8:ec:
                    2c:f9:77:08:c5:44:fd:f5:dd:df:80:d5:5d:75:b9:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:3A:2E:EB:63:BC:86:54:1F:1A:12:8C:F6:9E:B4:42:FE:6E:6E
            X509v3 Authority Key Identifier:
                keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:84:9f:4e:0f:54:1a:81:ed:9f:c2:62:95:08:62:bd:2f:48:
         d4:65:93:70:b4:28:42:36:cb:03:01:b4:5d:7c:3b:41:69:b0:
         f9:0e:07:c0:04:b0:7f:f3:19:80:3f:be:83:7e:50:d9:5d:34:
         3e:1d:73:69:e9:31:51:6b:97:13:b9:12:57:83:bc:2a:d9:82:
         3e:d4:ae:42:eb:5f:6d:76:51:cf:38:67:64:40:fb:10:9d:05:
         59:f3:0e:f3:b0:3d:1c:e3:e7:ad:6a:7c:f0:97:b9:02:d4:16:
         f2:04:35:ea:ff:a1:39:66:9a:b6:7b:1b:42:da:7c:90:2f:07:
         b3:14:d5:4c:e9:c8:72:af:2a:b6:6f:11:bf:d8:55:ab:0e:2a:
         65:59:67:37:7b:ba:15:06:71:1c:9c:af:b1:90:37:35:4c:95:
         fc:c1:39:c2:f2:3c:48:20:27:4f:71:29:3a:29:0d:8b:5a:5a:
         da:4c:d7:dc:d7:bf:4a:d1:c8:92:80:da:f3:c4:d5:6a:9c:82:
         02:b8:b7:a1:b7:65:22:6c:6e:bf:c7:05:e8:73:52:90:7a:b1:
         37:69:00:a6:09:8b:2d:a5:13:e8:53:9a:29:07:80:28:9b:67:
         33:cb:50:77:c3:8b:8f:94:73:80:66:eb:d9:97:e4:28:ea:3d:
         10:2c:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:07:42 2025 by rpki-client