This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
File:                     e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft (raw, json)
Hash identifier:          NKDd4lwEaMW99zs9rBmE3USzD9kw2OhNtzOhYukCFmU=
Subject key identifier:   C2:46:D6:7E:88:2F:9E:82:40:B2:CD:1A:24:DA:9C:28:58:EA:F9:87
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       019AF2ADC66C1CFC6871C57B798C39152B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
Manifest number:          0D5E
Signing time:             Sat 06 Dec 2025 08:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:05 +0000
Files and hashes:         1: 7X_WSvEFamMfNZjyNbtSSNp_DT4.roa (hash: BIAWYZiJ2Q5byj31tXy8i/6T7c/qS05IEfJLF0mtR+0=)
                          2: FsJ3zITAe84c1D5csHES5hjciz4.roa (hash: YNKbDTh8tdjiYkEUi21i1eLdfiJOkLdo8vV3R3CkNJc=)
                          3: P8Eoq9RR0aGjSpGwX1OgPUIROxQ.roa (hash: s3K98YwNuWaxYBAIxIP0FKSAzloX75bONeEAcTalG7c=)
                          4: Zokk9-ke3e4g6tf_NzEP8-t6QmQ.roa (hash: LDa+p34hUBYWv+O47IPPq2d0lQ+F5fOMupLZzH7le48=)
                          5: e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl (hash: gI5mEceoPRf+TcxPi+8zd6XSO+UVqLqOd4mmt7ZSbPI=)
                          6: yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa (hash: UvfLf0kl1I/2dxM34pZ3U07NlO8Q7BM1QyFjXwpJPeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:c6:6c:1c:fc:68:71:c5:7b:79:8c:39:15:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Dec  6 08:01:05 2025 GMT
            Not After : Dec  7 08:01:05 2025 GMT
        Subject: CN=c246d67e882f9e8240b2cd1a24da9c2858eaf987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:8a:0b:93:4c:ee:93:9d:1d:61:ee:1a:3b:
                    5b:21:36:12:07:14:3c:8c:a4:2a:74:d2:99:09:62:
                    01:c5:f4:cc:79:0f:4e:ac:d5:49:54:77:8d:df:9f:
                    03:c4:c7:9c:bd:06:ae:9c:4e:f6:4c:cc:4a:53:6e:
                    1d:d9:9e:26:f2:eb:04:c3:3b:d7:2a:38:65:a5:6d:
                    8c:f6:88:14:cc:5d:d5:53:a4:5f:0e:3e:bf:0c:e8:
                    f2:0e:7d:f1:53:0a:55:af:71:0e:87:a4:78:e4:cc:
                    7a:55:09:cb:50:e5:4a:fc:93:82:39:8b:37:12:7f:
                    23:31:89:4c:c5:6f:53:0b:eb:63:0d:e0:21:04:9a:
                    ce:b0:5c:48:23:7b:a6:18:74:13:f0:bf:16:fb:84:
                    fa:18:55:14:d3:9b:d2:0e:33:d9:35:48:91:23:53:
                    b0:e0:b4:c2:9d:ff:58:51:14:37:aa:b5:7c:a8:01:
                    da:14:af:5a:0d:02:ff:fd:b6:34:f4:29:28:35:36:
                    37:a6:90:0f:72:e7:62:ce:62:6d:5f:36:a1:c1:32:
                    9d:68:31:67:fa:47:ec:4d:bb:92:57:af:64:b8:c4:
                    bc:77:b8:ba:6e:be:22:66:02:15:ef:60:95:b9:a9:
                    71:0b:32:98:4c:23:5c:e8:82:5f:6d:00:fa:ad:ca:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:46:D6:7E:88:2F:9E:82:40:B2:CD:1A:24:DA:9C:28:58:EA:F9:87
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:84:e2:e7:a9:73:8d:06:43:a0:14:dc:e3:73:0a:50:11:07:
         be:3b:98:37:5c:02:58:1b:04:18:b4:37:ae:8b:a3:36:c9:6f:
         8b:a8:45:6c:0e:75:31:6b:f2:bb:8b:07:d9:5a:9b:18:0a:8a:
         0f:4e:8c:15:5c:9c:df:b8:04:8a:0b:6c:42:22:21:03:d7:26:
         32:08:f3:b0:a7:9e:f4:a4:13:12:35:84:0a:66:13:20:ab:dc:
         07:a0:0e:ce:df:c3:fc:af:ba:7b:5d:54:35:70:f3:a6:eb:23:
         26:1a:23:81:17:79:6c:dd:46:ed:98:c5:3f:01:67:7e:2f:bc:
         9e:73:6a:25:9c:0e:11:54:bb:3e:16:af:35:50:91:4f:02:41:
         66:71:3e:c4:d6:30:4d:10:f3:b3:d4:f5:6d:77:cc:09:4e:c8:
         cb:ec:b3:88:9a:a4:0a:64:c3:87:f7:76:45:82:6a:2b:53:4c:
         c5:86:23:fd:39:c7:ae:ec:77:c3:e7:17:4b:af:a7:3d:0d:e7:
         d0:5c:d3:05:eb:12:a2:38:c2:d5:80:45:68:23:80:6a:77:6b:
         80:42:8d:49:1a:44:92:f1:43:47:ab:4d:6f:1e:e4:1b:66:51:
         2d:ff:78:b8:fd:c2:cc:25:9d:50:35:37:a8:8e:3c:87:30:ad:
         8a:89:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:16 2025 by rpki-client