This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File:                     a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier:          D5E8W0vc49nNx/HRx9EP+qSAgw2TY1xbQfFxtLpXfdo=
Subject key identifier:   7A:A1:07:9F:68:E5:23:2A:EC:C3:B1:5A:85:1F:1C:FD:5D:00:4F:89
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer:       /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial:       019B3AFE2EEF24688638E97F5926E9799FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number:          1447
Signing time:             Sat 20 Dec 2025 09:01:35 +0000
Manifest this update:     Sat 20 Dec 2025 09:01:35 +0000
Manifest next update:     Sun 21 Dec 2025 09:01:35 +0000
Files and hashes:         1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
                          2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: pvw2Y4H8nMmmNYsTqfwYJCooMlTUYk9K7WFw7BxmBKU=)
                          3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:fe:2e:ef:24:68:86:38:e9:7f:59:26:e9:79:9f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
        Validity
            Not Before: Dec 20 09:01:35 2025 GMT
            Not After : Dec 21 09:01:35 2025 GMT
        Subject: CN=7aa1079f68e5232aecc3b15a851f1cfd5d004f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:47:e8:83:a4:9d:18:ca:7f:10:f5:36:46:
                    2a:23:61:3c:d5:fe:ab:ec:b4:0d:75:f0:d2:ae:a2:
                    9d:2a:fc:6f:4d:c3:2e:15:0d:29:1c:1a:56:01:b2:
                    c7:0c:bc:c1:40:a4:8f:eb:bd:41:25:e2:3e:eb:f1:
                    dd:98:a7:d6:e9:bc:9a:f6:47:66:ac:03:06:e2:c7:
                    64:9f:88:14:07:44:3a:18:8d:2d:f8:44:91:23:e9:
                    a7:ec:b0:9e:68:fc:67:03:4e:c9:7a:2b:10:f7:15:
                    4b:3d:5b:c8:f5:55:60:1e:d7:4e:ab:0c:60:6c:64:
                    bc:aa:c1:e5:3d:8e:8f:92:8a:d5:f5:ab:33:39:46:
                    8d:b9:78:16:8e:25:72:80:45:bb:00:df:fd:30:c2:
                    43:5a:c5:e0:5c:42:96:95:e9:2b:0a:76:36:ea:59:
                    0f:45:58:91:98:b0:cb:a8:a2:47:4d:da:4d:37:e5:
                    fd:dc:5b:47:c5:7f:dc:41:d5:5e:53:7a:ca:0a:f3:
                    a2:60:86:05:ac:8d:34:62:fc:40:6e:41:88:e2:1a:
                    22:7a:26:f1:0f:80:a3:af:99:82:58:0b:46:65:8f:
                    48:61:c4:6d:24:b3:72:47:bb:ab:5a:5c:44:f8:7e:
                    0a:23:35:20:b0:af:ba:a8:61:f9:b4:2b:de:01:b9:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:07:9F:68:E5:23:2A:EC:C3:B1:5A:85:1F:1C:FD:5D:00:4F:89
            X509v3 Authority Key Identifier:
                keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:49:06:0a:56:cf:87:36:c3:86:58:27:a3:9c:92:52:56:c4:
         53:de:38:e7:d9:39:e3:43:2e:f8:28:63:ad:08:a3:77:ea:ab:
         1d:ae:ff:21:e3:4c:ed:35:db:42:cd:6e:ae:26:ef:69:4c:2f:
         f1:78:d3:fc:e8:70:f6:58:2f:be:7e:39:0c:e3:b9:c8:28:fd:
         3a:28:05:8a:47:01:06:e2:0c:d5:f8:54:79:72:09:79:0d:b6:
         bc:7b:d2:58:a1:07:63:82:72:26:7c:5f:1e:56:5f:a5:cd:05:
         7e:4d:59:ce:81:d7:7a:50:93:f2:3a:4f:9b:6c:fc:fb:65:ea:
         d5:4d:f0:6c:bd:df:35:8f:9a:2f:a0:6e:4e:9f:da:4d:a0:b6:
         38:cc:88:d1:1c:28:0f:4a:6e:cf:8d:2a:27:9d:f0:4b:2f:d4:
         58:9f:fd:83:9b:26:12:73:d8:63:c9:33:d5:41:9d:35:50:21:
         d2:75:cf:0c:98:40:fb:60:d4:bb:76:0d:ff:35:e4:e1:63:c9:
         33:1f:a5:c5:37:2f:35:29:ff:f1:8c:6a:71:ab:6a:01:45:4f:
         7d:16:e1:ab:b8:fe:12:81:58:51:aa:55:ad:e4:e7:60:6e:2d:
         a1:55:04:b1:0c:9e:a2:50:d9:15:37:ed:76:30:ea:f8:c3:bd:
         fd:71:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:47:44 2025 by rpki-client