This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          gEsXHjYzeCZq0OxM4PPYpvw5kQY+JaIhJVi0OE38u8Y=
Subject key identifier:   32:18:69:2F:78:C3:5D:52:4E:37:3B:D5:A6:46:B3:A1:06:3D:D2:7F
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019B3AC672A1F343E0F8F4AF89EA7CDC7D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          156B
Signing time:             Sat 20 Dec 2025 08:00:42 +0000
Manifest this update:     Sat 20 Dec 2025 08:00:42 +0000
Manifest next update:     Sun 21 Dec 2025 08:00:42 +0000
Files and hashes:         1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
                          2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: OuILV7oZyHr40ivecQSVuKlzV/yhEGYOI7SOBCRk5ls=)
                          3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
                          4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
                          5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
                          6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
                          7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
                          8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:c6:72:a1:f3:43:e0:f8:f4:af:89:ea:7c:dc:7d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Dec 20 08:00:42 2025 GMT
            Not After : Dec 21 08:00:42 2025 GMT
        Subject: CN=3218692f78c35d524e373bd5a646b3a1063dd27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:c8:5e:f6:91:20:3f:4c:96:a4:78:72:49:
                    60:ed:11:63:f7:ef:c3:8e:99:03:95:71:f0:c9:25:
                    4a:02:b1:05:35:1c:c4:a7:e6:c7:23:47:db:5f:71:
                    6e:66:7e:4b:ad:cc:d6:13:9a:29:d7:29:13:86:db:
                    e4:2e:bd:a5:e8:c2:06:9a:b5:d2:a8:4d:c3:9e:8d:
                    4f:9b:b8:e4:2e:da:6f:e4:29:60:58:74:17:00:6f:
                    2c:31:6a:a1:5c:f5:d7:8e:fe:e3:8e:7f:72:d0:35:
                    7c:34:d4:89:9f:17:b6:6d:81:cf:cd:cc:14:ab:eb:
                    6c:e3:e6:fe:b9:f1:e6:34:1b:b9:a1:16:97:fe:33:
                    e3:b9:35:64:90:48:7f:6d:18:22:72:07:a6:a2:82:
                    ab:97:05:b0:1c:75:ff:b2:9b:18:49:e6:90:2a:13:
                    6a:dd:2e:71:b9:65:1b:82:4c:08:93:12:da:81:81:
                    e6:75:cc:5c:06:af:27:12:8a:d9:df:7d:f0:9c:3f:
                    fb:7e:4c:49:c5:45:f4:16:d4:c8:0b:af:fc:f9:17:
                    8c:59:bf:91:a9:fd:bd:e4:85:00:90:b8:78:1c:e3:
                    79:7c:06:af:ea:58:e6:9d:3e:96:d9:1f:fa:c7:21:
                    a8:23:4f:b4:76:9b:f2:90:5e:a5:4e:01:84:bd:62:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:18:69:2F:78:C3:5D:52:4E:37:3B:D5:A6:46:B3:A1:06:3D:D2:7F
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d4:20:d5:10:3f:6f:e0:8c:77:05:8a:14:43:6d:1a:52:af:
         74:8f:8a:a2:79:6b:5f:92:55:16:41:3e:f3:19:25:69:3f:d8:
         33:30:83:9c:fb:51:e7:95:c7:ea:93:b9:bb:12:2a:8f:66:72:
         c9:11:c5:3e:00:0e:89:7d:ee:1f:41:d8:df:30:81:b3:51:67:
         86:cf:8d:4f:24:50:3a:5b:b8:da:b8:2f:f7:8a:c3:c0:9e:7b:
         ef:8d:5a:d4:46:59:47:28:45:74:5a:fe:bb:2c:0d:d4:a6:46:
         27:05:7a:92:85:99:d7:12:96:7f:82:5c:8b:f6:56:d7:2d:ce:
         e3:47:ef:60:59:7d:74:85:d5:d1:12:7e:eb:c4:f1:67:ea:ab:
         9d:8c:d9:5b:51:c4:12:73:fd:13:0f:0d:d6:d5:00:d9:00:e7:
         13:9e:20:a1:50:68:f9:2e:2a:2b:4a:63:f9:83:21:65:f1:ef:
         1b:4f:17:d2:cc:03:23:61:b2:a4:fc:d9:33:b8:47:49:b7:c9:
         bd:2f:a8:40:cf:49:49:2f:31:b5:6c:56:47:80:6b:31:10:a0:
         fb:6d:4d:20:cd:8f:e6:0e:72:d1:41:90:bd:fb:11:ce:b5:9b:
         7e:b9:78:4a:47:c9:3d:e9:62:51:11:85:3a:fb:33:1b:c6:dd:
         e1:31:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:12:56 2025 by rpki-client