This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          Eg/o2gnKb9214yhApB8/cZm0nJnAD5DKY5QkrM4QYJY=
Subject key identifier:   FE:98:16:72:7C:EC:8B:74:E4:78:E8:80:9D:2C:49:59:6F:26:EF:BC
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019B3B6C0AF4A0E5AE046022352A4C5D8695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          1795
Signing time:             Sat 20 Dec 2025 11:01:35 +0000
Manifest this update:     Sat 20 Dec 2025 11:01:35 +0000
Manifest next update:     Sun 21 Dec 2025 11:01:35 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 1faD4ZFBclwFzb0_TlcJqclRz3s.asa (hash: y6k6blyX9AW8efyFUzs0HB1pisBHAVkRvkrWnYMgslk=)
                          4: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          5: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          6: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          7: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: IsiSfBMjMrV1YZIz7ZI+C0ODmRHGDNEBWpfX3qTcgd8=)
                          8: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:6c:0a:f4:a0:e5:ae:04:60:22:35:2a:4c:5d:86:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Dec 20 11:01:35 2025 GMT
            Not After : Dec 21 11:01:35 2025 GMT
        Subject: CN=fe9816727cec8b74e478e8809d2c49596f26efbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:75:a7:6d:1f:c9:13:36:2c:ee:1f:2b:de:
                    ee:d8:b4:e6:d5:7e:ce:71:ef:e3:f8:06:ed:c2:94:
                    dd:c6:be:60:d5:f0:54:f8:06:51:a4:89:bd:86:c4:
                    f6:32:a2:0b:d1:55:18:b2:f8:48:79:1d:60:9b:23:
                    f0:13:bb:05:7d:4f:97:e9:ec:ad:39:a6:29:d5:99:
                    3b:3a:7f:94:dd:45:1d:be:d6:89:fe:34:b4:f3:24:
                    9e:13:6f:c1:6b:f3:17:3c:2c:19:11:9b:e1:3f:7a:
                    c6:93:be:c9:e4:ad:e4:63:83:a8:64:b8:53:95:87:
                    86:9c:ec:ba:48:68:9a:5e:f4:53:1a:87:97:37:83:
                    91:74:81:e9:70:85:5c:74:5c:e9:71:00:f5:de:72:
                    b7:2f:a8:91:cc:b6:d6:37:ff:b7:74:45:1f:87:27:
                    68:ea:45:f8:1a:64:85:67:e2:65:01:60:64:96:0f:
                    9a:44:17:3d:34:6e:5e:4b:c9:88:a9:1b:a5:59:b8:
                    c6:3d:f1:52:11:d9:08:e1:32:24:16:2e:0d:30:31:
                    ca:d5:eb:64:e0:42:e0:5b:fb:cb:86:e0:b6:80:ca:
                    13:18:6f:52:19:9d:9e:53:d9:06:7d:ce:1f:1b:ff:
                    84:f7:7c:9b:e9:f2:2d:ec:8a:92:7f:61:e7:30:a1:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:98:16:72:7C:EC:8B:74:E4:78:E8:80:9D:2C:49:59:6F:26:EF:BC
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:4f:1e:c0:91:95:d6:3a:c0:30:23:95:64:f5:21:a8:07:
         4d:ea:f8:60:03:53:fd:cf:e4:ec:c4:e9:20:31:2c:46:d4:3c:
         47:94:53:42:8d:99:c8:ee:db:c4:03:30:1b:47:e6:c6:7e:d5:
         f4:7b:4a:36:06:89:17:1b:2f:c2:71:2c:a0:3e:bf:71:22:04:
         2f:56:9d:57:41:8f:eb:20:b7:08:f2:50:42:fd:b9:7a:f2:90:
         44:2e:09:d6:3b:ad:74:5f:b6:0b:ea:51:a0:03:e7:cf:5f:31:
         45:1a:1c:8e:3f:3c:bc:c4:0e:30:0e:c8:a3:68:e0:60:56:a7:
         95:b8:73:f4:52:f6:20:b1:37:04:5e:30:89:7b:cb:b7:9f:c4:
         cb:15:88:aa:d8:c7:95:e5:b3:04:f0:a3:ec:11:cc:e1:1f:78:
         d7:d8:f2:b0:99:58:07:a0:84:c3:45:26:97:35:ef:a1:ad:2c:
         da:d3:c3:b1:77:e7:80:ba:ef:7d:16:50:cb:1b:0e:82:32:d6:
         f9:ad:df:bc:5c:01:5f:62:4b:14:f7:c5:49:de:06:ab:5f:5e:
         22:f0:5c:53:2a:a3:b8:bd:8c:80:4a:83:63:2d:40:d5:a5:f5:
         ee:f1:f6:13:74:3b:09:9b:77:31:8b:e2:f7:4d:ec:17:d6:93:
         c3:68:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:18:59 2025 by rpki-client