This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          6c0tGWep0PINKNuqVGh4L92HbC+Pq5r6w0wjWgpi/Xs=
Subject key identifier:   35:30:BD:4B:33:82:CB:C2:E0:28:2E:C0:BA:06:F0:9D:2F:6D:DC:31
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019B4A70B16026B76A6F73154F5BB58EF6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          178F
Signing time:             Tue 23 Dec 2025 09:00:57 +0000
Manifest this update:     Tue 23 Dec 2025 09:00:57 +0000
Manifest next update:     Wed 24 Dec 2025 09:00:57 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: 7OFLxa6l2bQJxkUkJ16S3ERTc/65NHqFdW0D433IiPo=)
                          2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:70:b1:60:26:b7:6a:6f:73:15:4f:5b:b5:8e:f6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Dec 23 09:00:57 2025 GMT
            Not After : Dec 24 09:00:57 2025 GMT
        Subject: CN=3530bd4b3382cbc2e0282ec0ba06f09d2f6ddc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dd:3e:7d:ca:1f:a1:43:88:06:b2:90:17:62:
                    46:0b:15:c1:a0:e9:2a:09:7f:92:40:4e:18:30:2b:
                    50:23:d4:a6:3d:9f:c9:66:07:3c:8d:40:d9:24:91:
                    b7:a6:d4:22:78:7d:4a:bc:76:6d:2c:ba:2b:f9:01:
                    ac:e1:12:73:68:7c:b9:fa:4e:d1:41:86:83:6d:d1:
                    70:5f:07:79:12:09:b4:ca:55:f1:67:e2:05:40:50:
                    ed:bc:82:16:a4:66:35:c7:48:7a:af:48:33:7f:a6:
                    63:82:79:53:61:d6:ea:f4:3d:cc:16:60:b9:fe:de:
                    fe:83:2c:ca:a8:1c:a7:19:b8:f2:a8:91:c7:6a:65:
                    27:e9:68:ac:d4:23:c0:07:19:06:8f:2a:fe:1e:8a:
                    48:fe:8a:95:19:cc:7d:ad:e3:b1:97:28:31:a2:2b:
                    66:10:c9:51:c8:d1:12:82:b0:57:d5:ac:12:6c:22:
                    f3:c5:2e:1a:fa:05:04:ae:1d:02:3e:c8:78:c3:35:
                    87:17:e2:24:02:7f:d2:d4:8b:b9:5f:aa:68:b6:af:
                    6a:bc:87:38:25:c7:30:42:ff:07:e2:3e:e8:88:41:
                    6b:fd:93:ba:c5:e1:fd:03:c2:c8:96:a5:3e:82:d8:
                    5e:53:fc:67:ad:91:72:b3:58:fe:01:9c:6b:5f:7b:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:30:BD:4B:33:82:CB:C2:E0:28:2E:C0:BA:06:F0:9D:2F:6D:DC:31
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:26:72:10:45:aa:8c:fe:f7:f4:2d:be:8e:3f:06:fa:1f:ce:
         4d:0f:b5:02:64:9c:e7:06:17:4c:e9:3d:c9:c5:d4:c4:8f:c4:
         04:72:09:c0:49:4a:99:31:a2:53:f0:c3:62:e2:9a:f4:02:e7:
         52:97:99:a1:f7:06:13:7a:f3:2d:21:b0:db:51:cb:3e:ac:e9:
         6b:31:f1:cc:95:10:06:b0:ad:45:5f:f9:78:41:75:8a:6b:0d:
         c8:60:b8:ab:ed:4c:28:69:92:bf:cf:00:b2:09:6b:0c:ce:d3:
         39:76:e5:3b:2b:5d:00:ea:59:c4:53:bc:39:5c:df:67:0c:c5:
         f7:ef:b6:b1:ff:8c:4d:2e:25:e9:35:34:c1:10:ee:40:ba:c1:
         94:09:28:4d:9c:dd:7f:3b:38:90:af:a7:ff:3c:1d:01:c5:29:
         49:9a:b6:2f:5f:76:87:e3:bb:ca:bd:22:03:d6:8e:e1:73:fa:
         2a:bf:ac:17:55:f4:27:8a:19:94:3d:5d:8f:a8:69:01:48:bc:
         5d:7a:dd:01:f1:43:14:c6:7e:bc:c9:f6:50:f1:3d:0a:ed:8d:
         7a:ec:1f:14:52:03:b0:08:ef:66:d0:b8:0d:52:05:41:0d:13:
         fa:8f:3b:a4:25:78:14:ca:41:2a:cd:4b:b2:1b:78:e5:da:2d:
         93:f5:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:16:44 2025 by rpki-client