This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          jmhTa3Oq466rr8hYHHAom7cOvL+5uFh3y9ctVOUFFZo=
Subject key identifier:   EF:9D:95:C6:74:BB:F1:63:C9:B0:35:9F:2D:A3:D5:CF:F4:B0:27:1D
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       019AF389555DD7184C58AAAE1919FC73EBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          071A
Signing time:             Sat 06 Dec 2025 12:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:54 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: uuehrHKInu4kkrb87UJ2t3bCUXavMwKnVads1xzYnvc=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:55:5d:d7:18:4c:58:aa:ae:19:19:fc:73:eb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: Dec  6 12:00:54 2025 GMT
            Not After : Dec  7 12:00:54 2025 GMT
        Subject: CN=ef9d95c674bbf163c9b0359f2da3d5cff4b0271d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:ab:5b:ed:7d:b3:35:91:8a:47:b0:fa:3a:
                    c4:cf:44:7c:d2:f9:c7:dd:15:4a:4e:9f:18:2d:ae:
                    68:6e:b7:99:32:3f:4b:4c:2b:6a:30:37:7f:01:d7:
                    47:c3:5e:81:eb:75:07:9d:37:5a:11:cf:82:da:ce:
                    b6:11:ad:32:06:01:23:d8:6a:ee:25:ec:76:dd:49:
                    b9:df:26:c6:9e:33:95:d5:5a:96:67:21:d6:f9:8b:
                    86:d0:cf:f3:e9:8e:e8:4d:6c:5d:f0:7d:ab:54:eb:
                    14:82:24:8c:56:88:32:17:51:b5:86:df:58:1b:04:
                    0e:30:47:fc:1e:7f:e0:2a:a5:c0:96:d7:39:fe:18:
                    c2:ea:28:7e:de:fe:46:c4:aa:d4:f1:00:5c:4e:d2:
                    0c:fb:9c:58:ea:b2:10:a3:5c:ec:69:c5:45:d5:4a:
                    0a:92:f3:6a:70:cd:93:65:ec:0b:f0:22:25:d6:d1:
                    90:21:b3:49:a9:66:21:6a:25:35:01:1d:1e:c0:17:
                    34:d9:42:9b:bf:c1:a4:8d:64:54:a1:ef:f9:f0:24:
                    4b:d4:75:2d:8f:a8:37:37:54:6f:5b:13:13:b2:7a:
                    56:cb:7b:8d:bc:75:a1:b4:01:25:11:a2:4f:bb:60:
                    b4:27:20:b6:1c:f5:91:25:de:10:bb:58:cb:02:69:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:95:C6:74:BB:F1:63:C9:B0:35:9F:2D:A3:D5:CF:F4:B0:27:1D
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:98:86:26:b3:97:21:63:d4:7e:dd:72:3c:be:35:50:99:
         33:f2:91:94:b5:f1:89:0a:6a:db:c2:7c:bb:4c:1b:b5:b1:9f:
         2f:98:b8:ab:34:74:b6:11:1c:8a:92:c5:af:4f:3f:14:80:e8:
         54:ea:39:fc:ef:a8:86:ec:b0:88:8f:56:49:06:70:02:cf:df:
         66:69:d9:46:24:ae:be:b9:41:85:25:12:7c:8e:7d:58:e5:03:
         26:66:df:ce:1d:e6:bd:e5:aa:59:44:1e:59:e5:80:38:34:cf:
         82:9f:42:7a:67:1b:c1:7a:92:74:2d:7f:79:a3:93:03:cd:de:
         53:4d:18:1c:da:d9:43:5e:58:dd:b4:76:be:ae:2e:9e:26:aa:
         99:a5:a3:bf:65:76:72:28:4a:8a:a0:96:4c:f1:17:91:76:70:
         25:60:d8:f9:29:98:8f:88:aa:80:46:9b:f6:76:5d:33:05:8c:
         e6:84:97:d9:e0:c3:ac:f0:d2:1b:78:07:48:c7:89:d1:ac:85:
         d1:09:05:d5:e5:54:1c:ab:94:c5:f5:91:74:20:7b:9a:dd:3d:
         14:66:0f:8c:af:16:94:10:a1:c8:ce:ef:a9:44:ea:cb:9f:61:
         14:bc:4d:e5:7c:d4:ed:f3:1a:34:a3:83:54:f6:23:24:26:c3:
         0a:f4:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:55:47 2025 by rpki-client