This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
File:                     6RvExCxQPaC3-K8W9-5LVHH_DgE.mft (raw, json)
Hash identifier:          T1uxuKzLw1A2xQ5annYWZ0imknplmotH7XcbUVlXZFg=
Subject key identifier:   CE:47:78:BC:9B:93:13:A1:CD:BD:FD:CA:19:05:EF:94:C1:D6:63:0F
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Certificate issuer:       /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial:       019AF2AD69F4348EF522771D0A3696B7A69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
Manifest number:          01E0
Signing time:             Sat 06 Dec 2025 08:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:42 +0000
Files and hashes:         1: 0eASUYw5buzWADKhJAPCD_thD4s.roa (hash: Uq52mQ0d5aOs+tiyr9sazFI/NXMlXJdBfmeH08G5ncI=)
                          2: 6RvExCxQPaC3-K8W9-5LVHH_DgE.crl (hash: sO6Wo4VxBE4axUniIOrYbUE1tjH0lcQyNdb601HCWe0=)
                          3: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (hash: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:69:f4:34:8e:f5:22:77:1d:0a:36:96:b7:a6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
        Validity
            Not Before: Dec  6 08:00:42 2025 GMT
            Not After : Dec  7 08:00:42 2025 GMT
        Subject: CN=ce4778bc9b9313a1cdbdfdca1905ef94c1d6630f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:17:6c:d3:d1:15:0e:8d:a7:c0:e4:9e:3e:
                    99:72:3d:84:51:5e:39:c0:2f:bd:89:0b:fb:2c:11:
                    2a:2c:4a:6c:11:a0:81:aa:da:7b:77:cc:49:13:b2:
                    85:98:c9:39:e9:7c:9d:d8:9d:b5:fd:a4:2a:d9:6f:
                    e8:23:cc:86:8b:9b:b5:30:6a:b2:b1:07:b2:87:bb:
                    8a:54:64:45:ab:72:6f:5b:5d:df:47:33:29:95:58:
                    a3:53:70:74:99:72:86:93:21:c9:ee:38:98:53:a7:
                    e1:dd:e0:62:eb:91:28:3b:28:bb:c9:7c:c6:62:4d:
                    12:1c:04:67:35:e2:1b:ad:b1:ad:a4:7d:80:c3:88:
                    07:af:c5:86:c5:81:f9:4d:2c:c0:7d:b7:12:9f:13:
                    e4:d7:21:f0:05:93:c3:4d:c7:f0:07:ac:20:2b:5b:
                    bd:e4:32:cd:8b:dd:98:72:01:bb:ae:be:d4:68:ae:
                    3d:33:30:2d:df:c8:37:c0:db:b7:eb:de:c5:27:d2:
                    f4:09:12:e2:b5:e7:82:d7:1b:cd:cb:4f:00:9d:05:
                    64:30:59:35:45:8b:19:42:12:78:da:d6:bf:bc:89:
                    4c:ad:7f:d9:50:c4:db:01:87:fe:b5:02:e3:66:70:
                    21:76:3d:d5:9d:18:9a:a1:ad:23:db:84:0a:38:d0:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:47:78:BC:9B:93:13:A1:CD:BD:FD:CA:19:05:EF:94:C1:D6:63:0F
            X509v3 Authority Key Identifier:
                keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:ac:a1:ce:1e:52:ca:ae:29:c4:5d:a5:ca:19:c0:1e:21:
         3d:0f:2f:eb:b5:d3:7a:1a:f0:ff:1e:e9:03:f8:fc:b5:d3:4d:
         21:2d:11:c8:dc:12:ad:31:94:83:e0:16:ec:39:24:f6:c8:0c:
         53:dc:8d:ef:f2:fd:18:02:66:1e:f9:ea:54:2a:4f:1c:8f:71:
         8f:94:02:c5:40:56:b6:b1:1f:71:3f:7b:a4:96:6c:01:2b:27:
         b0:35:12:0c:73:00:3b:9d:c1:ef:6d:b9:88:a2:d3:81:a4:4f:
         50:7c:6c:fe:12:b7:98:05:6d:77:b1:f8:fa:c8:ce:7e:b2:6a:
         dc:56:0b:06:bc:de:e1:cf:50:52:67:93:cc:1f:cd:65:5c:c4:
         be:8e:ca:4e:41:62:a3:8b:ca:e5:d1:5a:78:bc:8c:dd:60:0c:
         83:9b:d5:aa:eb:ba:c0:22:00:3d:b3:ef:aa:d9:b0:a0:4e:99:
         08:9c:01:50:3b:ff:52:09:a9:83:4d:98:9a:7d:1a:e2:94:8f:
         20:e4:9f:ae:ae:f2:cf:13:20:4d:8d:32:5d:98:1c:3b:17:46:
         5c:46:1e:56:e8:20:88:8a:f0:0f:73:a9:9f:4f:14:20:d2:29:
         e4:82:25:0c:d1:da:44:52:bf:91:61:2d:2f:8b:0b:25:82:fc:
         39:0a:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:26:25 2025 by rpki-client