This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File:                     6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier:          ivU5NsEYS6MhKhvAmdiZbhQfKLIY+KjGDfmQ7w/u6+M=
Subject key identifier:   01:2E:00:51:E8:EF:80:05:91:3A:3C:41:10:D6:1D:A9:AE:C8:95:F7
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer:       /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial:       019AF31C8E9F9C60E0A9348EB8D66076E43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 10:02:06 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:06 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:06 +0000
Files and hashes:         1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: ouIibOAcEq2Vd2+9u6nOXefzCEvcddpJNeMKpUFCmZU=)
                          2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=)
                          3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=)
                          4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:8e:9f:9c:60:e0:a9:34:8e:b8:d6:60:76:e4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
        Validity
            Not Before: Dec  6 10:02:06 2025 GMT
            Not After : Dec  7 10:02:06 2025 GMT
        Subject: CN=012e0051e8ef8005913a3c4110d61da9aec895f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:79:0d:ec:19:cc:23:5e:bc:6e:14:3b:7d:
                    33:b3:31:38:f8:34:52:ee:c9:5c:6a:93:d7:d1:da:
                    46:a8:65:b0:0a:ea:e0:33:a1:3d:e1:5e:a6:f1:d9:
                    9d:1e:83:a5:af:0b:03:8b:75:1f:d6:b1:78:f8:52:
                    d3:55:a6:b5:7d:83:f7:0e:55:e1:b6:69:c8:4d:6c:
                    a9:d6:cb:dc:1d:2f:cd:6f:11:46:49:16:84:87:50:
                    eb:12:b1:16:5d:38:11:e6:85:8d:76:83:a9:ca:c3:
                    ed:35:c1:3b:77:e1:15:cf:4e:77:6a:0f:7f:1c:e9:
                    c3:49:4a:fc:1b:c6:03:f1:21:0b:17:43:9a:f4:76:
                    f3:9b:46:e7:c7:28:34:77:eb:a5:dd:4c:a2:d6:25:
                    9d:d4:8b:01:e3:e7:ec:83:6a:9d:66:b0:eb:41:1d:
                    f2:eb:e6:c2:83:87:1c:df:d2:9c:ed:f8:5b:90:30:
                    7b:0c:4b:88:95:b4:19:f2:85:d5:02:6b:32:b4:b1:
                    4a:90:eb:d7:62:72:9c:d9:da:12:20:3b:ff:57:ee:
                    d4:84:95:b8:bb:ef:06:f7:cd:b4:59:8a:05:89:9e:
                    18:15:a2:46:c2:82:1b:73:7c:25:e6:f7:6b:a2:01:
                    e9:c6:9c:5b:b3:16:2b:96:f7:fa:0a:9a:d8:38:15:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2E:00:51:E8:EF:80:05:91:3A:3C:41:10:D6:1D:A9:AE:C8:95:F7
            X509v3 Authority Key Identifier:
                keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:05:9c:a6:2a:0e:69:6b:13:f2:00:b4:20:dc:25:80:fe:8d:
         07:4e:85:17:5e:48:c9:85:8d:8e:b3:3b:80:15:0e:f1:90:38:
         3f:e2:7e:a6:86:74:3f:c3:e2:88:f1:8d:b3:e8:c4:75:04:3c:
         ab:3c:72:81:9f:cc:a5:65:5e:b8:f9:e8:c2:ff:03:bc:e2:fe:
         19:d2:99:ad:a7:17:46:0f:e4:55:a1:0d:e9:43:c2:d8:2d:d2:
         24:a5:ea:b6:6a:30:a3:1d:66:8b:4f:cc:89:bf:55:8a:87:d3:
         8f:89:1c:6a:8b:31:d4:3e:c9:72:26:8c:b0:39:94:d2:fa:32:
         bf:c0:5c:6e:91:7d:87:04:54:2e:54:78:1f:01:27:1a:e7:f3:
         0f:a9:2e:04:40:5c:89:bf:51:bb:4e:f8:59:bb:c9:b6:81:2b:
         1e:91:44:34:28:18:fb:c2:27:43:7d:c7:c8:b7:b0:1c:e2:71:
         72:d7:f0:c5:dc:af:3b:75:e9:36:d6:1e:cb:2a:33:5d:fe:01:
         5b:c2:31:65:71:13:2f:9c:77:d8:91:ff:41:da:db:be:b1:a2:
         88:bc:27:39:43:fd:e5:e0:3c:89:05:3a:4d:21:5b:5f:ff:ca:
         02:90:6e:0a:7b:84:e2:e1:d8:d6:2e:96:8b:f1:23:fa:b4:b0:
         de:34:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:38:05 2025 by rpki-client