This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
File:                     6SV01xbLvb9yTXBsEReXD2Z7I34.mft (raw, json)
Hash identifier:          ZrD81fJmvjREB1z8OLyZjJ5SLCGbGV1GGF6DQa6xGRc=
Subject key identifier:   BF:71:F4:9C:0D:F5:6F:31:7A:89:82:A7:F2:81:0A:6D:83:A7:E6:88
Authority key identifier: E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
Certificate issuer:       /CN=e92574d716cbbdbf724d706c1117970f667b237e
Certificate serial:       019AF164094521A05B8534B4D7379156A738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
Manifest number:          073F
Signing time:             Sat 06 Dec 2025 02:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:56 +0000
Files and hashes:         1: 6SV01xbLvb9yTXBsEReXD2Z7I34.crl (hash: 5IScWzpfaKXy3YrbsayzvxvJrC67Gv/D13AHUkCxCJ4=)
                          2: ZCJA2foGqRJY0SrXotU5jxVHXyA.roa (hash: +H657MmtlNk/r/cAb3qcz3eX9ms9jyBKdEpjFf9D62I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:09:45:21:a0:5b:85:34:b4:d7:37:91:56:a7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92574d716cbbdbf724d706c1117970f667b237e
        Validity
            Not Before: Dec  6 02:00:56 2025 GMT
            Not After : Dec  7 02:00:56 2025 GMT
        Subject: CN=bf71f49c0df56f317a8982a7f2810a6d83a7e688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:5d:e8:25:3e:b1:3c:a0:58:2a:c3:90:fc:
                    9d:95:26:9a:45:11:5f:e4:27:39:9f:8d:ca:4e:e8:
                    8e:97:c5:a9:45:ef:d4:14:c7:98:5e:52:0e:bf:50:
                    01:bb:78:e1:1f:17:41:94:e3:0f:da:eb:ba:1a:fb:
                    39:72:79:05:e4:c0:7a:c5:a0:3e:4e:d0:42:ab:9d:
                    ee:d8:17:22:38:0b:fe:26:fe:24:77:14:26:8e:bd:
                    c3:0f:99:17:64:b3:a5:da:72:4e:36:22:0c:4c:69:
                    e8:4f:13:8f:ab:39:e1:44:76:e7:b9:8d:bb:8f:d4:
                    cc:f8:f3:7b:d5:51:3e:f0:0f:7d:e6:a0:d3:0b:37:
                    50:4a:dc:1b:53:9b:27:53:98:d5:a9:c1:7e:a2:f2:
                    99:08:1e:9c:03:50:f3:05:b4:cf:65:d8:47:d3:e5:
                    9d:06:1a:42:f1:b8:99:bb:fc:e3:94:b1:f7:61:71:
                    41:7d:ec:7d:c4:de:11:0b:e6:46:48:92:71:48:2f:
                    bd:76:b6:b4:b3:64:8e:0b:77:23:a8:ec:06:d1:d5:
                    e8:01:a4:50:8e:d1:29:e7:3a:48:6c:74:07:36:86:
                    ee:00:10:90:dc:30:59:09:b4:e1:ea:1e:91:a3:e3:
                    5b:e4:fa:fb:05:90:4f:3e:dd:ed:35:4d:b6:0f:c8:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:F4:9C:0D:F5:6F:31:7A:89:82:A7:F2:81:0A:6D:83:A7:E6:88
            X509v3 Authority Key Identifier:
                keyid:E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:78:1c:ab:b5:08:51:2c:6d:62:18:c6:2e:e2:a8:4f:88:
         06:22:b3:3d:c4:8a:60:2c:44:11:e6:0b:37:ee:7a:4f:df:96:
         94:b2:95:b0:86:be:4d:85:af:d4:ed:a5:12:68:01:08:eb:de:
         ca:3a:f2:cf:79:1a:e1:90:da:8c:f7:4f:4d:74:c3:41:c5:24:
         f1:25:53:fb:39:38:ac:36:f2:64:bd:62:41:cb:d1:c0:3c:c3:
         b4:ab:e9:cb:96:33:40:77:d1:e2:35:c2:7a:ae:9c:80:1d:95:
         47:c8:a1:8c:42:f3:09:36:f2:37:4d:cb:f9:dd:5d:3b:3e:ff:
         19:af:2b:34:ca:dc:6b:b9:c1:b0:52:af:2e:81:c0:eb:87:41:
         17:68:06:a6:dc:3e:e1:de:d9:61:b6:91:f6:63:6b:3c:eb:35:
         37:46:26:cb:62:32:47:72:cb:92:be:b1:41:2d:be:10:c0:ae:
         38:42:3f:ba:c6:e0:5b:83:84:87:d1:72:a7:37:15:3b:7f:71:
         07:dd:ae:24:e9:ba:99:10:e4:f6:c1:bb:9c:41:30:bf:cb:71:
         8f:a9:54:dc:40:e2:fd:5a:25:29:03:8e:dc:84:61:ef:a8:ec:
         3b:86:6e:0f:7a:13:6f:52:6b:b8:64:43:11:13:44:c6:7c:f8:
         f2:47:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:52:34 2025 by rpki-client