This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File:                     1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier:          WFKDEHPzjtCNkbdoM1Q9ePGA5RRkr+2VhnWsjKbWKn8=
Subject key identifier:   FE:90:B8:D9:82:84:FF:F7:10:AC:B0:43:E2:CA:DC:E1:4E:05:5F:FE
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer:       /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial:       019AF31B83F3F8D82845308A7D3CE0376CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number:          06F8
Signing time:             Sat 06 Dec 2025 10:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:57 +0000
Files and hashes:         1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: jiy0B4kYtdGuIykk0QoxMCSdSCSdTLu8Np/2rWM0PRw=)
                          2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
                          3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:83:f3:f8:d8:28:45:30:8a:7d:3c:e0:37:6c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
        Validity
            Not Before: Dec  6 10:00:57 2025 GMT
            Not After : Dec  7 10:00:57 2025 GMT
        Subject: CN=fe90b8d98284fff710acb043e2cadce14e055ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:4b:2f:cc:a4:f5:ee:a0:71:d1:49:96:29:
                    95:8a:3d:05:b0:58:a1:0f:5f:a5:07:46:d3:a8:93:
                    fc:a5:71:58:ed:fe:8e:73:3d:f5:7f:7c:4d:68:f6:
                    ae:9b:0e:90:17:09:00:11:3b:30:d7:55:ac:af:71:
                    2f:63:03:17:ca:c2:1c:f1:02:5d:0a:a7:71:c6:3c:
                    38:bd:2f:7b:1d:c4:ef:13:69:97:fa:2b:48:12:b2:
                    5c:68:73:67:e9:c7:17:21:dd:10:9c:68:35:92:dc:
                    e7:ad:e9:e1:34:3b:41:62:12:25:76:ae:f8:ee:57:
                    39:83:3d:06:20:a0:61:88:4e:e4:bc:6e:5c:a8:d7:
                    e5:92:2a:e9:48:ee:6b:cc:d2:af:6e:37:f8:90:29:
                    05:a3:42:c0:cc:ed:5e:b9:54:d9:3e:b6:69:2e:57:
                    30:31:c4:bd:ea:64:9f:70:62:f1:60:e5:16:84:08:
                    58:52:cd:b9:60:42:ad:2d:9b:cc:21:d2:2b:cf:d5:
                    d1:94:f8:b1:25:f6:b6:00:6c:a3:35:2b:52:4e:60:
                    c2:83:2d:a4:04:09:6f:f0:c8:09:f5:c3:80:dc:a4:
                    d7:58:a4:f8:2c:d8:94:bd:71:45:54:8c:62:09:05:
                    7a:45:ce:f7:ab:bf:71:09:01:a8:74:f0:18:e7:e5:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:B8:D9:82:84:FF:F7:10:AC:B0:43:E2:CA:DC:E1:4E:05:5F:FE
            X509v3 Authority Key Identifier:
                keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fc:b2:a8:18:bd:e7:5e:e6:d6:77:6d:87:99:10:fa:f5:83:
         97:6e:bc:3e:c7:09:49:6a:b9:da:06:e3:a5:4e:97:a5:e3:87:
         f5:84:e9:10:40:f5:e2:28:f8:11:2c:a5:01:d1:86:ac:60:3e:
         2e:9c:4f:f9:ff:32:9c:71:f2:8b:cd:22:fc:22:e3:80:0b:f9:
         cf:ec:87:c8:d5:b0:fb:c2:83:e3:bb:62:69:4f:ca:43:46:a6:
         73:52:9c:8a:31:34:0a:dc:95:f0:9d:51:88:76:99:20:3f:0e:
         a5:43:10:bc:de:8e:24:3b:43:46:b9:8f:b9:fe:6c:a2:a1:e8:
         a8:f1:f8:1a:ba:61:77:11:c6:df:9e:44:9a:39:9e:51:8c:61:
         77:cb:3f:89:72:61:39:ee:3d:9d:3d:bd:c0:74:b6:2a:4b:2c:
         0e:e4:67:d2:b7:20:ff:cf:f6:37:b1:94:ff:2c:b5:f3:32:d3:
         01:02:ab:5b:da:37:8e:80:f7:70:e5:0e:7e:89:10:b8:da:c4:
         99:ed:15:19:e8:e8:a4:89:7d:96:db:6c:73:f4:50:99:98:1b:
         70:9c:eb:de:86:93:3e:ac:e2:d5:75:b3:81:aa:e7:ab:f9:ac:
         f5:cc:88:48:a4:8d:b7:f5:ef:66:f4:92:5a:34:d2:8c:2a:6a:
         06:89:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:08 2025 by rpki-client