This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File:                     g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier:          m/HseQPwVzsU0pkgEwLEHw1v1QNAsb/fwQ1FFojSsVE=
Subject key identifier:   4F:45:A4:76:16:C2:E9:23:FD:66:00:BC:ED:ED:E3:4B:6C:7A:86:4E
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer:       /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial:       019B2F9E97C7413E68BBCC13E0D56ADE82C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number:          1781
Signing time:             Thu 18 Dec 2025 04:01:21 +0000
Manifest this update:     Thu 18 Dec 2025 04:01:21 +0000
Manifest next update:     Fri 19 Dec 2025 04:01:21 +0000
Files and hashes:         1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
                          2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: 4xjZFS8StxB07QDW44ohA1xsNQL59//xGsNN1P7hZjs=)
                          3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:9e:97:c7:41:3e:68:bb:cc:13:e0:d5:6a:de:82:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
        Validity
            Not Before: Dec 18 04:01:21 2025 GMT
            Not After : Dec 19 04:01:21 2025 GMT
        Subject: CN=4f45a47616c2e923fd6600bcedede34b6c7a864e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:91:dc:af:d9:01:7b:c3:63:a7:96:75:a2:
                    1c:1f:28:1f:20:e8:fc:39:5c:3c:a0:ac:d8:da:61:
                    4a:72:63:93:33:c8:c8:8a:52:02:97:f9:46:50:54:
                    79:40:d3:72:97:5e:83:f1:fd:ee:69:01:d0:f1:79:
                    e6:a3:f2:da:ee:db:1d:9d:c9:36:a7:96:be:54:55:
                    9b:4b:89:6a:de:15:b9:23:54:3a:c7:9e:b0:d7:dd:
                    86:4a:04:ab:d7:a1:0a:0e:6d:e4:c6:b1:30:44:f3:
                    28:a3:b5:25:41:8c:04:36:68:7d:e7:be:d3:bc:b6:
                    37:c3:1b:4f:03:60:c6:37:a7:8e:2f:1d:21:e9:f9:
                    76:f6:c8:9f:e1:bd:a8:28:ef:26:26:92:cd:33:1c:
                    00:1c:f7:e6:b9:8c:29:22:17:3b:57:97:26:43:06:
                    50:6c:b0:ad:fc:46:78:b3:e9:bf:d7:c0:42:2d:d1:
                    b2:bc:4b:ec:29:4a:a2:5b:4f:66:fd:4e:2f:70:38:
                    bc:04:77:1f:ad:30:fc:a2:05:2a:fc:d0:c8:22:40:
                    85:0c:f4:1d:e6:24:d8:7f:b5:e6:89:5f:49:66:73:
                    23:b3:f6:ae:2e:cf:f9:8a:db:4c:59:89:e6:1e:d4:
                    cc:fa:7d:b0:40:7a:f2:89:11:87:e1:26:37:87:3a:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:A4:76:16:C2:E9:23:FD:66:00:BC:ED:ED:E3:4B:6C:7A:86:4E
            X509v3 Authority Key Identifier:
                keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:6b:62:d8:b8:04:eb:7a:70:7f:31:97:6f:a3:f9:5e:2d:
         4b:9c:f6:8a:95:86:a8:46:0a:0f:3a:f1:c7:01:06:46:06:7b:
         69:fe:60:d7:ab:96:9d:65:f4:ba:11:86:29:63:bc:f8:c7:e3:
         7f:f1:d4:85:6d:c9:c7:a5:52:07:a4:a7:47:67:be:0c:f8:2c:
         22:0f:56:07:c7:5e:a6:6e:b0:29:b6:fa:6f:ad:1e:0b:f0:b8:
         24:1d:35:bc:72:d2:e9:7b:3b:8f:23:e7:bd:62:18:46:28:e8:
         00:4c:ab:fb:c3:ce:17:e8:5e:0d:4e:46:01:8a:b7:7b:9e:ca:
         d2:10:f1:8e:36:2b:f3:62:80:35:6a:28:c6:dc:20:85:ec:5f:
         a0:b5:34:dd:7d:7e:a4:59:f9:89:f9:14:90:73:77:29:65:93:
         39:c4:c3:81:51:a0:f8:33:83:18:68:f2:cb:87:8a:52:28:52:
         47:71:d0:8a:7b:c9:bc:8e:c6:74:75:c9:21:dd:eb:be:d7:2e:
         af:7d:39:a7:b7:21:bd:2b:b4:de:e7:24:74:12:36:e0:cf:87:
         68:45:e1:87:49:69:da:25:c0:51:31:1e:e6:c5:c0:7c:38:4b:
         42:2d:1c:76:ea:3c:88:a2:9a:61:96:05:5b:28:7a:a2:62:8e:
         0d:bf:89:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvnpfHQT5ou8wT4NVq3oLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjUxMjE4MDQwMTIxWhcNMjUxMjE5MDQwMTIxWjAzMTEwLwYDVQQD
Eyg0ZjQ1YTQ3NjE2YzJlOTIzZmQ2NjAwYmNlZGVkZTM0YjZjN2E4NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4mR3K/ZAXvDY6eWdaIcHygfIOj8
OVw8oKzY2mFKcmOTM8jIilICl/lGUFR5QNNyl16D8f3uaQHQ8Xnmo/La7tsdnck2
p5a+VFWbS4lq3hW5I1Q6x56w192GSgSr16EKDm3kxrEwRPMoo7UlQYwENmh9577T
vLY3wxtPA2DGN6eOLx0h6fl29sif4b2oKO8mJpLNMxwAHPfmuYwpIhc7V5cmQwZQ
bLCt/EZ4s+m/18BCLdGyvEvsKUqiW09m/U4vcDi8BHcfrTD8ogUq/NDIIkCFDPQd
5iTYf7XmiV9JZnMjs/auLs/5ittMWYnmHtTM+n2wQHryiRGH4SY3hzqhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9FpHYWwukj/WYAvO3t40tseoZOMB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn1rYti4
BOt6cH8xl2+j+V4tS5z2ipWGqEYKDzrxxwEGRgZ7af5g16uWnWX0uhGGKWO8+Mfj
f/HUhW3Jx6VSB6SnR2e+DPgsIg9WB8depm6wKbb6b60eC/C4JB01vHLS6Xs7jyPn
vWIYRijoAEyr+8POF+heDU5GAYq3e57K0hDxjjYr82KANWooxtwghexfoLU03X1+
pFn5ifkUkHN3KWWTOcTDgVGg+DODGGjyy4eKUihSR3HQinvJvI7GdHXJId3rvtcu
r305p7chvSu03uckdBI24M+HaEXhh0lp2iXAUTEe5sXAfDhLQi0cduo8iKKaYZYF
Wyh6omKODb+J0Q==
-----END CERTIFICATE-----
Generated at Thu Dec 18 14:04:33 2025 by rpki-client