This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
File:                     6QUkmbAAPqDurqJCYzjDTgv4_c8.mft (raw, json)
Hash identifier:          zdUPGs+sE+AGvh4uGMNMxoiT2a6nhLv10Vra/BKmYvU=
Subject key identifier:   F3:2D:9F:CB:13:60:FF:E3:7E:41:8A:77:64:1F:0F:C8:88:6D:99:29
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Certificate issuer:       /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial:       019AF19AC2272501128FE6835B6C622406D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
Manifest number:          0B4C
Signing time:             Sat 06 Dec 2025 03:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:42 +0000
Files and hashes:         1: 53gBiMV-U5T_UTNr_H6y2uJN32c.roa (hash: loF7sBRMOPze87N7XZhvPgafCESVBxbr6i5uTn+lW9k=)
                          2: 6QUkmbAAPqDurqJCYzjDTgv4_c8.crl (hash: jh5ENNlq21x+27j+HAaoyT4trjwfpGVo1xBiaktz6Ik=)
                          3: lUuN68-IxOYTjJomy5kGo9veb00.roa (hash: IB0rOxo9mML04bmfaPFamlA+rNBljWr4GfuyYt2d/RU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:c2:27:25:01:12:8f:e6:83:5b:6c:62:24:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
        Validity
            Not Before: Dec  6 03:00:42 2025 GMT
            Not After : Dec  7 03:00:42 2025 GMT
        Subject: CN=f32d9fcb1360ffe37e418a77641f0fc8886d9929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:af:31:b1:66:d9:69:d0:ce:f1:9d:8d:79:
                    74:e7:27:43:17:d0:a5:e8:a3:c1:4f:36:df:72:51:
                    7f:46:2d:c7:34:93:d9:3a:91:7a:ef:b1:13:38:15:
                    2b:b5:e7:24:57:3c:0d:61:9b:9b:ca:2d:db:1d:ac:
                    6c:2e:83:73:d7:d9:29:e5:87:f0:1d:74:7c:91:a5:
                    3a:07:63:4e:5a:8e:fe:80:56:ad:cb:86:ac:74:96:
                    aa:7a:83:63:10:c2:a9:62:09:4e:b4:ae:b2:a0:d5:
                    43:9e:07:0d:81:84:62:cb:29:1f:dc:ed:88:bc:13:
                    2d:81:50:26:ad:7b:df:81:17:d0:40:ff:ab:2a:b9:
                    19:65:99:17:3a:fd:1e:a3:7f:a5:cb:8c:29:c8:55:
                    0b:b4:11:fa:b3:eb:75:d3:4e:1f:73:db:4b:81:6b:
                    f9:0a:24:bd:fe:27:0c:5f:33:2f:34:8a:03:6c:49:
                    ba:0a:62:93:23:d5:b7:23:5c:d0:4f:eb:f2:aa:05:
                    86:0d:b7:c6:dd:a0:44:92:53:12:68:cf:af:ad:89:
                    f1:31:1b:17:14:22:73:47:53:24:9a:92:39:2e:03:
                    02:09:c3:59:44:ee:09:a4:8e:27:fa:6e:99:d9:10:
                    d4:94:f8:3b:dc:81:5a:86:64:43:13:2f:9e:d0:f0:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2D:9F:CB:13:60:FF:E3:7E:41:8A:77:64:1F:0F:C8:88:6D:99:29
            X509v3 Authority Key Identifier:
                keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:35:a1:88:6f:b9:6f:ee:4c:2b:bb:1c:1f:fb:eb:5d:46:
         4b:66:6a:93:16:09:8c:cb:69:df:32:6b:fb:d4:fe:d4:22:aa:
         52:d8:23:4d:38:c1:34:02:6b:f3:6a:77:79:8a:8b:61:a8:c9:
         f3:9f:73:fe:e9:a4:2b:2c:86:1f:e6:38:22:83:d4:0f:1b:c4:
         aa:19:b9:7d:8c:2c:d9:99:4b:38:ff:a5:49:b7:2a:5e:20:42:
         44:f7:70:78:c8:46:44:e4:b0:b6:99:bc:53:5a:43:c0:4a:c3:
         fb:91:a1:aa:c8:32:23:00:58:27:8c:ee:5c:79:e4:e7:7c:4f:
         af:e7:23:49:24:14:bb:b1:1a:18:b3:66:ed:49:7e:18:03:e0:
         bd:35:e6:25:62:52:29:94:5a:42:c0:ad:df:57:a7:f8:00:e2:
         5d:35:e4:34:f8:39:03:b3:e4:ac:7a:a4:95:58:c6:9c:7c:2f:
         60:82:ec:28:db:06:fa:ae:21:e3:c8:05:c6:f5:73:aa:23:70:
         2d:82:eb:07:d3:a6:d6:b2:a3:a3:4b:d2:c4:82:16:e7:76:1b:
         78:c0:9d:3a:ec:71:fc:52:b0:42:fa:36:89:cc:5e:02:6b:95:
         5c:b1:11:2c:18:c0:aa:83:ac:06:0d:3a:56:c3:6d:19:75:4e:
         d7:b7:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:36:44 2025 by rpki-client