This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File:                     C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier:          nn4lSf48jVXeC+VwvmxelEkR0nlSiP1DY2Av/j9R/r0=
Subject key identifier:   9C:D3:EA:CE:FE:FE:A9:C5:E5:28:BB:65:EB:B1:6A:0E:6C:7F:0D:29
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer:       /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial:       019AF1D1F9386B37F715DDDF112BA658774D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 04:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:01 +0000
Files and hashes:         1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: +OVwLWsMFZkBVtyWILUhvqGYXW0ia0SixkpU9KmxtK8=)
                          2: YZzAhQaL88-jCpJ3mBWG-64btDU.roa (hash: RCtjkx1poAnNZoTiswLMPNgLTI2laFXye8HspCS+ElI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:f9:38:6b:37:f7:15:dd:df:11:2b:a6:58:77:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
        Validity
            Not Before: Dec  6 04:01:01 2025 GMT
            Not After : Dec  7 04:01:01 2025 GMT
        Subject: CN=9cd3eacefefea9c5e528bb65ebb16a0e6c7f0d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:f5:81:24:a6:31:8b:d7:6d:f9:78:1e:c5:
                    74:e8:8b:fb:29:00:f1:1d:57:c0:93:70:3a:47:35:
                    4e:d6:88:95:ea:a9:22:95:d3:0b:8a:d6:97:4d:4c:
                    a5:0f:35:35:c6:f0:8d:74:73:10:ba:63:23:ee:dd:
                    c2:0f:d3:7e:98:9a:d6:80:7d:2f:95:c0:84:f5:ef:
                    ce:03:af:f0:1b:e5:03:23:45:dc:7e:7e:be:00:31:
                    61:51:15:3a:b9:0f:a6:d9:4c:83:76:3c:e0:ec:93:
                    c8:c9:b9:44:91:f5:95:1f:88:50:b4:3e:62:ec:59:
                    f3:ae:66:48:48:36:8c:5b:80:70:e0:d2:a6:0a:48:
                    95:09:4a:6e:07:59:95:b8:8e:de:bf:17:a5:bc:2f:
                    68:24:ba:e4:9f:08:7c:cb:af:92:7d:db:9c:be:35:
                    c7:ed:e1:d7:2b:0c:63:6c:6f:b9:c1:b3:48:ed:3e:
                    66:47:c8:8d:e3:bb:94:66:45:cd:df:c8:fa:00:97:
                    b3:28:e9:f1:a6:26:0b:85:cd:be:05:47:bf:19:9a:
                    64:8b:b2:3b:93:58:7e:81:56:05:e4:94:ad:4a:a6:
                    6f:cd:af:3d:14:58:be:77:08:b1:50:11:5c:c5:a6:
                    40:5d:3c:b6:f5:70:80:7c:5d:23:38:92:11:53:13:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:EA:CE:FE:FE:A9:C5:E5:28:BB:65:EB:B1:6A:0E:6C:7F:0D:29
            X509v3 Authority Key Identifier:
                keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:15:ff:60:86:b7:6b:dc:6c:88:ee:11:9e:93:f0:f9:f1:
         fb:d5:1c:f5:e5:3e:1b:b5:aa:b7:8f:68:61:25:a8:9b:3f:a9:
         e9:0e:97:40:91:48:c7:3b:a0:e4:43:9b:f3:3e:a4:66:4a:31:
         5f:75:41:3b:17:44:58:16:0d:09:5b:73:c0:6b:2b:08:a3:44:
         7b:7f:e8:e0:59:00:3b:0e:e8:a3:bf:54:19:31:57:3a:d4:f4:
         35:7e:f1:05:1c:2a:b8:64:ca:40:f3:f2:8d:75:b3:46:13:ec:
         79:77:36:89:ef:31:3d:63:b8:f8:0c:e5:f3:7a:cb:78:b2:c0:
         74:67:f5:0b:3a:ab:94:cd:d7:e3:5a:0a:5a:61:0b:e0:e1:1e:
         56:e6:78:c7:4e:51:8c:e7:3d:84:e4:9a:86:18:f3:74:b5:40:
         be:90:8d:85:cb:d4:3b:ab:23:6a:0d:a0:d6:f4:db:59:b9:48:
         3a:d7:df:09:0e:a4:bc:af:ee:cc:75:9c:9b:fd:4e:49:c0:ab:
         91:1d:67:50:d3:7b:99:49:5d:56:c5:b1:bb:69:92:89:01:c3:
         45:34:f4:fb:c1:98:5a:08:44:13:d2:8b:80:26:6e:f3:e9:c6:
         3d:64:c3:a4:40:26:1d:a0:cb:b6:7a:70:10:83:79:c8:65:3d:
         bd:fa:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:44:10 2025 by rpki-client