This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          mpbmLu5E1ikOZ+MEWLZ+Huh9+dvZxLiiKYaci/AHffo=
Subject key identifier:   07:75:93:66:5C:70:5C:79:80:13:0B:CD:5B:33:C5:86:99:DE:98:82
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       019AF23FC3D29CEFD6F232EFE41E6C4195D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          1078
Signing time:             Sat 06 Dec 2025 06:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:56 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: UQZHW0c9ZLQ3ZOfmI45Q1XMt0OolPsvFH+vjw/I35KY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:c3:d2:9c:ef:d6:f2:32:ef:e4:1e:6c:41:95:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Dec  6 06:00:56 2025 GMT
            Not After : Dec  7 06:00:56 2025 GMT
        Subject: CN=077593665c705c7980130bcd5b33c58699de9882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:0a:fc:96:6d:b1:9a:1f:75:d9:b9:3d:6a:
                    a6:74:3b:f6:f6:8b:5f:9b:c7:5f:40:b6:83:59:ed:
                    8c:b3:6b:7b:71:50:7f:36:c5:b9:05:b8:b6:12:d3:
                    f8:12:7b:3f:5e:1a:84:00:f6:e4:d4:bd:74:76:c7:
                    85:3d:20:56:37:12:7f:89:86:33:fb:be:c2:74:a6:
                    18:4b:22:41:f7:8c:f3:51:57:08:5c:7a:bd:31:5a:
                    f2:25:58:96:c9:8b:6f:53:59:13:4d:18:4e:7a:97:
                    36:dd:82:52:90:a4:ea:07:28:4c:a3:93:b4:b3:82:
                    90:be:8b:03:32:c0:1c:84:c3:63:26:96:7b:b3:88:
                    5a:a6:be:97:47:b4:8e:82:54:31:21:7a:88:e0:a7:
                    7d:4f:71:1c:ed:61:6a:ac:8c:87:d6:6d:23:f0:81:
                    fa:c6:4a:f3:de:a7:b6:8f:a5:bb:6e:5f:2c:9c:e2:
                    00:ac:d5:6f:55:71:60:35:0f:6e:f6:16:6e:e1:01:
                    99:d1:c3:fd:45:77:49:aa:3d:a0:d0:5a:a7:7a:c3:
                    ca:e1:c0:a1:da:34:aa:cf:b3:94:e8:71:7e:21:6b:
                    56:d5:ac:ae:11:13:21:24:a0:fd:a9:01:c9:93:c7:
                    06:f0:25:aa:02:fa:ee:b7:f1:08:00:43:8e:38:1f:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:93:66:5C:70:5C:79:80:13:0B:CD:5B:33:C5:86:99:DE:98:82
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:13:4c:f1:2b:86:2f:dd:a2:46:90:be:d3:d9:d6:17:f8:34:
         37:d9:36:55:d1:90:41:d3:f5:cc:95:84:ab:51:e6:c5:d2:cb:
         e9:25:b9:6b:d1:37:48:c1:16:e6:da:a0:e6:1f:34:d4:ba:3f:
         93:f3:3d:14:67:07:ec:e0:69:f8:45:5d:84:14:a5:51:6f:f2:
         ac:c6:74:1f:14:c4:1f:c3:96:37:47:42:26:e6:f3:4a:4b:ea:
         89:f5:bb:01:20:06:61:2e:01:bf:11:2c:01:ac:12:89:9b:5b:
         9b:35:7e:7b:f3:cb:eb:e2:b0:81:e9:86:62:b2:d5:f5:63:e6:
         d5:da:81:e8:91:59:40:7d:a1:9a:11:24:39:ab:35:38:5b:ca:
         8b:3e:8e:e6:d1:6d:65:6c:0e:d1:a8:7e:dd:3a:80:c8:f0:78:
         16:fb:b1:aa:a5:2f:85:8c:e0:e2:42:c1:9b:ef:d1:b6:82:99:
         c5:3c:26:de:74:80:34:eb:a5:28:99:86:eb:47:9f:fc:ae:c3:
         4e:01:3a:66:78:39:75:ad:19:68:b1:46:c8:79:ff:b9:2c:ba:
         1d:db:3f:7c:dd:45:55:24:ec:3c:94:01:ca:15:70:5d:1e:c0:
         3e:d0:eb:a1:f5:3c:d0:52:a5:ad:ae:75:7b:45:34:08:be:75:
         8f:10:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:14 2025 by rpki-client