This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File:                     REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier:          SNk77oqDOOeVLxvyq9vfhh6+QsQfuenylefw7I0GFuM=
Subject key identifier:   A5:EE:3B:9B:FB:CA:7A:47:79:6D:E2:A8:62:C8:6C:03:7A:92:3E:D7
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer:       /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial:       019AF31BA84BAEA8C94BF7A2BE3AC8E19067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number:          175F
Signing time:             Sat 06 Dec 2025 10:01:07 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:07 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:07 +0000
Files and hashes:         1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: m96wXqmB1xN1Rdu+HwgXgflrmyVm3toZwMyr5QoW4V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:a8:4b:ae:a8:c9:4b:f7:a2:be:3a:c8:e1:90:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
        Validity
            Not Before: Dec  6 10:01:07 2025 GMT
            Not After : Dec  7 10:01:07 2025 GMT
        Subject: CN=a5ee3b9bfbca7a47796de2a862c86c037a923ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:2c:15:37:da:03:03:d1:9f:03:29:70:c8:
                    50:63:d2:78:6c:74:bf:7c:9a:e7:40:56:9f:e5:b6:
                    09:a4:16:b9:40:38:76:49:b0:f0:9c:e7:91:6f:60:
                    82:1e:d2:3e:ca:d5:37:6e:fa:5d:21:2d:cc:6e:7d:
                    17:7f:19:f5:a9:d0:e8:8d:19:ec:05:94:55:b0:d4:
                    e2:c0:b1:c8:f5:e2:b1:f4:f6:3e:4c:11:38:b4:d1:
                    f7:99:1b:80:44:4b:d3:4e:4a:47:62:75:62:b8:6d:
                    cf:ee:55:20:a0:28:b9:96:f5:ad:14:d2:eb:da:a0:
                    26:53:39:a6:2d:34:3f:b8:09:4e:cc:25:ce:2d:9f:
                    93:4e:df:52:ff:c2:1e:e7:1c:b6:0f:18:7a:86:42:
                    39:d0:43:2e:52:56:90:c4:7d:64:30:1a:23:d8:cc:
                    08:1a:21:91:87:f3:cc:ba:ad:bf:e5:af:8d:37:3c:
                    a2:e4:c8:d5:93:cf:aa:8b:87:d5:91:06:79:83:6a:
                    7c:08:fa:b2:53:c7:de:38:fc:34:5e:c3:e0:81:ec:
                    9d:b2:f8:55:19:b3:2f:86:fc:99:45:17:6c:49:cb:
                    0b:36:ad:06:d5:91:5f:28:72:69:06:c8:e1:07:76:
                    71:97:83:23:b5:ac:d4:54:d9:36:3c:28:c7:ef:a4:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:3B:9B:FB:CA:7A:47:79:6D:E2:A8:62:C8:6C:03:7A:92:3E:D7
            X509v3 Authority Key Identifier:
                keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:c8:1d:cd:2b:e2:27:81:07:04:a4:b5:33:38:85:1a:20:
         0d:13:6c:6e:b5:4f:e4:96:6c:20:f2:4f:0d:67:05:71:f5:81:
         b3:f0:a4:ee:45:cf:20:32:70:5f:4c:53:8a:8c:7b:ea:5d:f7:
         ff:af:b8:79:fe:34:ce:da:c5:b4:ff:8b:27:4e:9e:a2:fd:36:
         8c:49:8b:cf:e5:12:46:70:56:be:fe:4c:b0:f2:ce:23:8a:40:
         ec:cd:4c:3d:95:74:1a:71:05:34:c4:11:22:f6:5d:7f:7a:b1:
         7d:3c:a0:61:60:05:70:59:21:d7:b8:15:e5:f3:55:c5:b1:0b:
         a0:b8:4a:d0:f4:0f:9d:3a:cd:72:50:af:ac:e3:3b:ad:98:46:
         4e:95:e9:f1:7d:fc:90:34:63:b1:d2:15:a2:5f:0b:99:f1:05:
         5a:23:0a:92:e9:78:11:be:f9:f5:6b:f0:b3:97:e2:42:41:04:
         3f:31:13:5e:62:5c:99:15:ec:7f:68:34:0a:49:57:ca:0b:6d:
         cf:b9:c3:70:0a:5a:37:ae:c1:c3:1e:4b:8c:0b:c3:eb:69:30:
         92:e0:04:76:f9:94:e3:61:b3:db:28:82:ea:4a:78:4c:4a:20:
         c3:8c:6f:ca:36:07:3a:cf:ad:8d:6e:d2:da:e4:a8:0e:88:72:
         4a:b7:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:49:21 2025 by rpki-client