This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File:                     Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier:          XvxBeHDphxH06O2H37HiXfIGQrM9Gr7mTd1/o5jkymY=
Subject key identifier:   46:9C:4C:81:F9:FC:14:EA:47:76:60:4B:03:FF:96:9E:21:5A:45:3D
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer:       /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial:       019AF8788591F1C77C104E1610858827AF00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number:          0F16
Signing time:             Sun 07 Dec 2025 11:00:39 +0000
Manifest this update:     Sun 07 Dec 2025 11:00:39 +0000
Manifest next update:     Mon 08 Dec 2025 11:00:39 +0000
Files and hashes:         1: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: jrsQSMdDcmv3n56c3FwWnEjFhl9TPGMPt592umsz7Xk=)
                          2: agomHzSEGLU5uAKAS4YLGwlj-Q4.roa (hash: 7ISU2WJyj8nXTFjL/d0M7asR7w4tkrVLJaIrTwedHgs=)
                          3: vkfZgYornLyFRcsSczSPVSrUfQk.roa (hash: KEormr1cuV7WUv9lxgaJIBb9fC8nujOGpBV6adXBfrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f8:78:85:91:f1:c7:7c:10:4e:16:10:85:88:27:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
        Validity
            Not Before: Dec  7 11:00:39 2025 GMT
            Not After : Dec  8 11:00:39 2025 GMT
        Subject: CN=469c4c81f9fc14ea4776604b03ff969e215a453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:ab:dc:30:34:e4:5a:93:cc:c3:69:88:26:
                    ed:a2:9c:de:d1:73:d3:9a:83:26:84:1e:14:d3:a6:
                    c9:4d:52:43:fd:e5:f6:93:7d:e3:fe:56:d8:4b:e6:
                    ed:bb:ee:42:e8:0f:af:e3:d1:c0:84:71:06:d3:99:
                    44:8a:65:57:32:fd:5b:eb:69:77:ae:d2:8b:a7:3b:
                    67:34:ef:13:d3:15:54:76:49:43:8b:77:00:f4:52:
                    38:4e:12:94:1e:62:f4:a8:ec:81:fb:a9:88:2e:6d:
                    7c:c7:9f:dc:53:eb:7b:09:bd:5e:1b:fe:cc:d2:dc:
                    c0:19:a5:62:a6:7a:22:b5:5f:97:a4:eb:69:d1:22:
                    c5:02:ab:cc:64:2b:16:52:4d:08:ef:c9:06:f5:af:
                    06:87:66:a6:f2:27:4d:b8:ed:f5:bf:0d:4b:16:18:
                    ce:bf:1a:bc:17:6a:79:e2:3c:f6:da:53:43:52:c2:
                    dd:71:86:60:8f:b9:47:e8:c4:4f:1c:a0:63:76:6b:
                    e9:71:24:6c:4e:55:7c:6c:50:9c:54:41:d0:42:b6:
                    81:0b:b9:c1:54:52:67:21:aa:72:69:ae:01:9b:be:
                    89:02:8d:4a:86:1c:18:e2:dc:9f:25:2c:76:7f:07:
                    0b:4f:76:c2:b0:22:51:52:bf:08:4e:9e:1f:ef:8f:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9C:4C:81:F9:FC:14:EA:47:76:60:4B:03:FF:96:9E:21:5A:45:3D
            X509v3 Authority Key Identifier:
                keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:34:02:4f:76:fe:00:06:8d:9c:69:3a:3b:04:4c:24:e5:
         1e:d6:7b:9f:1e:39:25:7c:e2:2d:84:06:ba:c4:cd:54:89:62:
         34:f7:e9:2b:a7:82:38:8b:c1:a9:31:e3:ad:f0:d0:9a:9c:58:
         b0:bb:25:0a:8f:5a:46:92:48:86:00:d2:ed:c9:0a:fa:8d:58:
         b6:35:fa:10:31:24:32:5e:17:14:17:70:54:7d:9f:cc:d3:cb:
         73:67:6c:4b:af:2c:4b:f7:ac:63:f3:dc:69:a7:d1:9c:e6:e8:
         58:0c:f6:85:24:04:6b:6b:98:8b:c3:3e:2d:bf:c5:ee:05:0b:
         0d:13:0b:89:a5:df:37:39:a4:ae:12:ea:0e:7a:d5:26:95:14:
         03:d8:73:2d:84:74:79:7a:42:23:e5:06:1a:43:fd:95:78:6a:
         c0:a3:eb:a8:9b:37:df:57:c3:f2:34:c3:40:0a:ed:4d:d7:e4:
         ef:15:fb:27:a4:b4:ba:f7:e5:e7:11:3d:d5:1d:a4:d9:cf:2b:
         64:22:a4:c7:f6:05:7e:9a:68:95:af:73:77:34:81:15:5d:99:
         ea:41:20:ed:a5:d1:16:3f:e5:52:de:24:d4:5d:5c:85:d8:e4:
         28:85:99:d2:04:f6:1c:71:70:2a:94:4f:5a:9f:2e:55:a6:f5:
         b9:85:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:33:19 2025 by rpki-client