This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
File:                     6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft (raw, json)
Hash identifier:          gZm3KIIEgd6ws0hptJ+blVDaRee2bp7LrO+1H+585nQ=
Subject key identifier:   6E:D4:64:3B:CA:C0:A7:17:D1:D5:13:58:A8:DD:84:76:D0:C8:78:6E
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Certificate issuer:       /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial:       019AF08860D8B0E53A856B43F94A82FDBA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
Manifest number:          1764
Signing time:             Fri 05 Dec 2025 22:01:00 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:00 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:00 +0000
Files and hashes:         1: 6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl (hash: Jq4ZANCDBAOp+8Kyqglx4/t3WpNSLdptse2HM9M03kU=)
                          2: IoQpRFacFQZ9HszRYXAifj0QYlo.roa (hash: znH4whLDnueXgOA1JHvpV7iCtsRDpxJ5aLqB4eYvdQ4=)
                          3: MBJXD_zFW9aI1-FakwyfSE1lyZE.roa (hash: Z/ipiMlii0qdUHpEZW4O+JSHQ5fbPSCwF2GC5O5sknU=)
                          4: bUvunvA1qeI1B6U6Omnh_Mewaqk.roa (hash: ldi80J/6WwUbivA33XBOIZR3qCbUxP7anEn+i9Zhmmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:60:d8:b0:e5:3a:85:6b:43:f9:4a:82:fd:ba:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
        Validity
            Not Before: Dec  5 22:01:00 2025 GMT
            Not After : Dec  6 22:01:00 2025 GMT
        Subject: CN=6ed4643bcac0a717d1d51358a8dd8476d0c8786e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:30:79:e0:07:e0:e7:5d:70:14:dd:91:a5:
                    c2:88:f2:03:0e:9d:10:91:1d:c5:38:91:94:0f:02:
                    05:98:a2:17:fa:d7:e4:be:ac:03:1f:bc:12:87:fa:
                    c3:92:1f:71:d4:39:f4:65:26:aa:d7:4f:d8:32:43:
                    d2:a1:59:62:47:88:20:e9:9b:eb:4b:49:0c:ef:05:
                    0b:37:e8:21:ca:83:b4:67:e9:08:f4:0f:6a:7a:4f:
                    f7:ac:c4:4e:74:d5:60:be:47:13:6e:72:99:34:fc:
                    f8:ff:f9:39:a7:1c:07:8e:86:85:4f:e5:18:59:11:
                    ca:5e:d8:fe:b9:56:32:50:6c:7e:ae:a7:7b:01:c4:
                    2a:6f:aa:ee:5b:13:c1:73:a5:aa:ab:6d:7b:f5:b0:
                    6c:8b:69:cd:3b:4d:87:47:55:a9:b2:91:09:dd:45:
                    6b:c3:17:0f:82:3b:b9:12:e2:f9:64:44:01:66:eb:
                    47:32:a3:58:65:9b:e2:87:a1:bb:b5:10:8a:b5:31:
                    13:bd:e6:db:2b:54:e7:ae:f0:7c:97:c2:d7:7d:56:
                    ff:fe:ee:8d:c1:14:4d:33:5c:e9:a9:a3:e8:7e:f1:
                    86:d4:7b:61:d7:a4:c4:b4:e2:13:9a:a3:4d:69:c5:
                    88:20:6b:e9:c6:89:30:3b:19:20:5d:6d:35:3d:af:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D4:64:3B:CA:C0:A7:17:D1:D5:13:58:A8:DD:84:76:D0:C8:78:6E
            X509v3 Authority Key Identifier:
                keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:ad:67:46:20:da:46:98:f7:94:aa:b2:3e:3a:e5:b0:9a:
         64:ac:6a:b5:31:38:17:b3:70:e4:5e:ae:df:a6:b8:e6:14:ed:
         c8:a6:57:87:b9:8d:9b:4a:ff:a2:cc:2d:1a:81:cd:ca:3f:29:
         a3:9b:5e:9b:13:a4:44:48:65:2b:6f:c6:4c:6a:6f:f5:d4:ca:
         71:46:35:0b:63:75:7a:ee:07:51:1b:81:b9:2d:22:53:bc:4f:
         f3:a8:29:f7:1e:ce:31:65:30:6b:33:bf:b9:64:31:e3:28:04:
         c1:e6:0b:cb:b6:81:85:aa:6e:f2:87:92:1c:93:cd:47:f4:e3:
         cc:f7:b3:a8:35:85:f4:57:e2:4b:5b:5c:47:19:dc:7c:70:54:
         a8:40:91:a9:69:27:46:6a:2a:7a:dc:35:4f:6e:bb:55:fe:10:
         47:94:ec:8a:51:5d:ee:56:5f:e1:fa:89:63:21:6a:ff:ad:67:
         24:82:38:18:0d:54:a2:9b:c4:29:1f:e6:b2:0b:b1:32:84:05:
         26:4b:d1:fb:b8:a1:a6:68:c1:e8:03:a0:e7:62:02:c8:39:75:
         ea:b9:3c:19:57:91:46:b2:e2:9d:25:51:1e:c8:95:02:dc:94:
         1a:12:ab:07:2b:90:30:4f:25:3c:3b:b0:0f:93:3a:26:f8:fe:
         6d:35:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:43:01 2025 by rpki-client