This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File:                     2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier:          Lc//BH8RvwBUCLYWjQDVa9yIg3/spkNDDP6+MyYt1HE=
Subject key identifier:   76:CF:DA:E6:09:A1:BD:3E:42:33:44:90:65:36:4C:0A:B2:CC:A7:18
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer:       /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial:       019AF57772126FD857829078F44B68B207E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number:          04EC
Signing time:             Sat 06 Dec 2025 21:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 21:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 21:00:37 +0000
Files and hashes:         1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: LJZS0ib634MlwMFzGazfzOGnnTk8CtEC1IScwF078g4=)
                          2: unxQV4Al2mLpnwI70qRpIDmTnOs.roa (hash: nWcMiPSfSb9yfnTzVXtb4VL1rzMEuoLvPQwzaYNt8PI=)
                          3: vQ_BwqF-3Ov1ig9gZpa4J3HSW9I.roa (hash: Fg81qYF19AaSbeLDfj9BfeZ+UCo1V2TWp+mQX1SfkJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:77:72:12:6f:d8:57:82:90:78:f4:4b:68:b2:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
        Validity
            Not Before: Dec  6 21:00:37 2025 GMT
            Not After : Dec  7 21:00:37 2025 GMT
        Subject: CN=76cfdae609a1bd3e4233449065364c0ab2cca718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:ae:c9:86:5a:20:dc:a7:bd:35:5b:c2:80:
                    69:d1:e8:7a:4e:31:4d:1f:73:dc:67:30:d9:dd:92:
                    5e:fa:3d:23:2f:e2:ef:06:d2:3c:fb:ce:2d:43:ff:
                    5e:ce:ad:6b:a3:0d:71:56:c6:f7:9c:e6:cb:7c:3d:
                    4f:1e:74:99:59:61:8c:11:b4:5f:34:3d:c1:0a:85:
                    bd:ba:b8:64:96:a6:69:72:68:06:58:a9:d4:4c:74:
                    36:88:f3:c2:8a:cd:ed:5a:15:01:f0:a6:a9:1c:e9:
                    85:e3:41:bc:4e:6c:79:2c:11:e6:1d:8b:71:62:8d:
                    d6:ef:3b:5b:13:d6:2a:55:66:a2:99:3d:86:dd:c6:
                    74:7d:7e:c2:e0:82:47:81:69:92:12:ab:df:25:e9:
                    c5:04:cd:32:a0:48:f2:3d:7a:2d:38:e4:8a:3a:6b:
                    ac:05:9a:65:ef:17:e9:8d:89:48:1d:c2:a3:d4:6f:
                    42:bf:c7:eb:d9:74:4b:b0:6d:50:28:d6:c9:ac:e1:
                    19:00:1f:54:25:30:53:70:ca:cd:d8:20:84:a8:dd:
                    67:24:5d:d9:c3:4f:f3:1e:89:de:8c:fd:57:e8:d5:
                    58:bc:dd:48:6e:e8:b9:fe:e0:ef:59:e6:9f:f6:c2:
                    0f:30:68:da:41:21:81:a3:b3:41:78:56:6b:1c:9e:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:DA:E6:09:A1:BD:3E:42:33:44:90:65:36:4C:0A:B2:CC:A7:18
            X509v3 Authority Key Identifier:
                keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:12:2b:e4:a0:39:03:3d:f1:35:80:23:83:25:91:85:2f:
         33:30:a9:a4:85:a4:f3:c7:04:59:f0:2e:df:2e:06:78:85:a6:
         2c:12:51:37:ba:fb:84:e9:01:cd:a5:6a:be:f8:3e:eb:90:6c:
         83:0f:2b:4a:c5:b9:fb:f0:c2:47:f2:93:e2:c6:36:c6:b9:1e:
         a0:33:1d:8c:3a:ee:7a:2c:50:73:87:5c:58:14:f9:4e:27:b3:
         b1:b9:98:5b:67:56:29:ba:1c:30:71:d2:7f:8b:91:b6:0f:12:
         26:6d:93:e8:25:84:65:5d:27:06:f6:5d:7a:2e:5d:64:6c:9e:
         a0:1a:42:cb:73:09:b8:90:84:96:93:dd:5e:74:bb:c5:59:96:
         46:07:a4:47:00:17:07:21:e5:dd:4a:58:d7:dd:31:ef:95:3a:
         a0:fd:a8:a4:ef:7c:c0:9d:b0:69:3c:95:2d:3f:8c:a3:7d:a1:
         78:a6:f4:c7:2a:f7:0c:b1:bb:d9:6a:91:c6:85:88:c5:f3:7c:
         24:1a:e3:50:2b:56:d6:b4:81:b9:45:1f:b3:24:e1:45:54:ed:
         29:d3:10:e3:c1:fe:e3:7e:4c:50:a0:0f:12:65:6e:22:f2:18:
         4b:24:b0:d0:c1:b1:d1:e3:67:b8:09:4f:45:16:31:cc:3c:d4:
         2e:26:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:36:25 2025 by rpki-client