This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          uQ5vW3TYm98oIHoz5DM2YqU+5uBUpsFAIqEfA65h/wM=
Subject key identifier:   99:3C:27:39:7B:61:01:27:2A:4B:8C:5B:8B:99:67:EF:E9:E2:CE:81
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       019AF0888BBA0E0FC71FECA9CD5F55D4D545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          177B
Signing time:             Fri 05 Dec 2025 22:01:11 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:11 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:11 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: eAVSJw8Ng7sMKbXrQlui9Ff53S95HsEXzvjw6hlL+vs=)
                          2: CgTYr4EhLa24IM21Hqih4Qqwlhs.roa (hash: L3KclJobQeVHsKxlYqzQz1I9Nwx/XkKtDyzqL3uEzCQ=)
                          3: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
                          4: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:8b:ba:0e:0f:c7:1f:ec:a9:cd:5f:55:d4:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Dec  5 22:01:11 2025 GMT
            Not After : Dec  6 22:01:11 2025 GMT
        Subject: CN=993c27397b6101272a4b8c5b8b9967efe9e2ce81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:7d:36:16:bb:2b:4b:e0:51:6d:65:95:0a:
                    60:dc:f5:93:a0:b2:9e:38:e9:0d:54:e0:0f:8a:95:
                    86:81:46:ae:61:80:20:ec:f2:a3:38:7e:a9:42:83:
                    e9:e0:39:91:06:be:0c:49:23:11:49:f7:05:59:09:
                    7e:f4:6f:ab:51:17:8f:ba:88:9a:68:18:c4:b3:06:
                    47:b4:44:16:30:6a:18:e5:eb:5d:a9:68:71:db:fe:
                    17:af:07:9b:5b:bb:ba:77:c4:e0:ab:38:d7:ba:56:
                    c5:26:ca:c4:5e:40:9c:71:f0:e5:61:48:6d:f2:22:
                    81:89:1c:e1:7b:f0:a8:27:fe:62:7d:aa:5a:dd:68:
                    c2:d2:9d:08:49:2b:5c:5f:00:8d:dc:85:a5:7b:31:
                    98:c7:10:8f:08:e0:96:3f:4d:4c:b3:b7:7e:92:1a:
                    be:db:d5:89:e4:0b:d6:bb:bc:29:50:d4:12:a7:8c:
                    dc:0b:82:f5:3a:7b:cd:d0:eb:12:68:83:d0:c9:68:
                    bd:ed:a1:9b:2c:1b:92:59:2c:66:dc:90:07:3a:99:
                    92:e4:1c:cf:9e:bb:f5:3b:34:41:47:ef:b5:d1:41:
                    33:18:06:02:d8:4f:60:13:8c:0d:a3:09:3c:b4:00:
                    a4:e1:e8:f9:3e:09:45:67:80:48:91:71:fd:89:68:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3C:27:39:7B:61:01:27:2A:4B:8C:5B:8B:99:67:EF:E9:E2:CE:81
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:60:7d:7f:1e:19:b3:1e:e0:2c:df:a2:43:9b:2f:af:ad:7e:
         c1:7e:70:66:0e:85:7e:38:f7:8c:b3:29:24:e8:a3:c0:27:54:
         a7:43:d2:7b:2f:86:d6:8b:5e:ae:83:a1:b4:62:3d:45:2c:f8:
         40:be:ab:95:06:11:cd:85:6b:d9:e4:8f:86:5b:04:16:87:e9:
         a9:cf:a5:be:3f:bf:c4:c0:8c:24:e6:24:0c:0c:d7:5a:1e:fb:
         c5:b8:5f:82:f2:bd:90:ed:5b:d5:a2:e9:63:12:37:48:e6:0b:
         d8:1b:10:1c:38:3f:ef:66:b0:30:eb:01:4f:8f:1e:09:99:2e:
         75:7f:98:17:fd:6a:7b:42:af:c2:d7:39:f7:35:6e:d1:ba:e1:
         dd:6f:c9:5c:23:51:8e:15:36:68:d0:2e:e2:9a:a7:c3:71:a1:
         21:b4:bc:9d:d6:7e:0d:81:7b:51:1d:1e:31:0f:82:40:8d:42:
         c5:7e:8d:9d:82:c1:6f:8c:51:71:26:6d:d0:2d:7c:c0:13:04:
         1c:67:ec:19:04:06:b7:b6:c6:d0:b6:51:3a:8d:db:61:3c:96:
         c5:c0:97:f5:51:8d:c3:da:26:dd:dc:e8:41:0b:55:fa:e4:b8:
         9c:ce:a6:bf:af:29:7c:6f:6a:7b:e3:61:70:59:c1:07:82:79:
         c8:08:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:16:06 2025 by rpki-client