This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          7TffOkCuPbARRkTqy4HgrZeKFXRNpbIpOf+13Ik9td0=
Subject key identifier:   C6:8E:1B:15:AF:8A:43:F2:41:28:80:E6:36:28:98:CC:7C:5E:8A:E6
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       019B5E6505AED1B04312C2045B89D31C497E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          0B04
Signing time:             Sat 27 Dec 2025 06:00:37 +0000
Manifest this update:     Sat 27 Dec 2025 06:00:37 +0000
Manifest next update:     Sun 28 Dec 2025 06:00:37 +0000
Files and hashes:         1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
                          2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: qfrOcamB/YhZvjTmE625SPmifSGssCkUo5xurM0ejQo=)
                          3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5e:65:05:ae:d1:b0:43:12:c2:04:5b:89:d3:1c:49:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Dec 27 06:00:37 2025 GMT
            Not After : Dec 28 06:00:37 2025 GMT
        Subject: CN=c68e1b15af8a43f2412880e6362898cc7c5e8ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:5b:74:e6:7e:7d:b5:20:70:bf:06:d9:16:
                    9e:2a:dc:11:22:0b:7b:ff:e9:a3:12:2a:b7:a1:1a:
                    1c:d3:38:13:88:c6:36:46:d3:24:f0:9d:25:86:25:
                    cb:01:54:9f:c8:60:99:a0:ad:9c:8a:c1:72:cf:51:
                    ef:ae:ac:1b:20:65:9f:0a:91:ae:e8:11:26:21:9b:
                    a4:b8:ce:8c:81:91:3a:dd:49:69:07:8d:01:46:4b:
                    07:df:3c:78:27:13:95:b6:fa:eb:44:3b:f5:17:b4:
                    5d:06:fa:41:f3:15:cc:d9:92:86:2b:17:c8:70:37:
                    28:88:52:c7:00:4e:48:a4:09:e1:4a:ad:1f:3f:0c:
                    c3:fc:96:80:ce:70:2f:4f:7f:85:ee:e7:98:30:13:
                    81:9b:14:ea:42:18:5d:f0:d2:8a:b8:84:d2:6f:66:
                    2a:ca:51:9b:33:c9:a3:4d:07:61:51:28:ab:a2:ee:
                    81:7c:d0:3e:36:b9:2e:24:84:88:48:0b:c0:c4:c8:
                    be:58:b1:05:b9:75:6d:b3:5a:d9:26:f7:66:57:24:
                    01:a8:21:57:1c:95:d0:a7:fd:08:05:16:b1:88:34:
                    b2:f9:b3:99:7a:a6:60:05:4c:0c:34:ba:fa:7e:cb:
                    f3:cc:44:a8:a4:83:ef:b9:ff:a5:ad:55:20:84:55:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:1B:15:AF:8A:43:F2:41:28:80:E6:36:28:98:CC:7C:5E:8A:E6
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:ce:9e:81:4a:f1:a5:1a:69:aa:67:36:14:71:11:5b:d8:
         cf:fb:60:1d:59:e0:8a:b3:8b:94:7d:7a:b4:77:8d:fd:e3:4f:
         81:63:dc:73:c5:29:b3:16:4d:82:67:ff:b1:f2:60:e0:97:fe:
         e2:d3:df:fa:c3:35:2a:cd:48:a9:37:44:be:ef:f0:66:ce:51:
         bf:a8:de:6d:18:c4:db:dc:c3:b5:7c:39:79:08:f5:b3:cd:23:
         78:96:29:79:ac:60:95:4f:17:20:ed:88:8d:09:59:ed:72:cf:
         da:b6:19:2c:81:d4:6e:f7:df:55:3d:ac:77:0e:16:9e:a6:92:
         b7:ee:ec:ea:17:b7:c0:5b:7c:7c:cc:0a:8a:10:d3:31:73:e5:
         62:3f:81:cd:cd:45:b3:b0:b7:3f:4f:01:d8:2e:6e:cb:17:02:
         7d:95:ed:de:be:d9:f7:6c:75:b8:95:ef:6c:00:e5:ce:37:79:
         03:a5:44:06:33:1a:92:59:a4:b8:26:48:b9:d2:83:15:65:99:
         48:03:63:a3:7b:ae:95:84:99:8e:55:c8:1b:44:3a:da:34:80:
         b6:df:d0:22:d7:91:32:0a:dd:8a:7c:6b:37:ba:c4:0e:40:3a:
         5a:2e:67:01:68:31:f6:e2:25:07:ee:40:f9:70:fb:e3:5e:6d:
         3c:9c:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:40:43 2025 by rpki-client