This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
File:                     6u-o-3F64LhsHl1nA1DSxzuefE4.mft (raw, json)
Hash identifier:          YvlXI+Tpa6fZ2YuG6Ihxr7nIU10bLSRJRbAqxP4Odzg=
Subject key identifier:   07:DC:2F:D0:37:96:5E:E8:66:74:F8:C0:B5:EA:9D:88:12:DC:A7:AC
Authority key identifier: EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E
Certificate issuer:       /CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
Certificate serial:       019AF12D22F27F4C817619273E12C4A9B960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
Manifest number:          53
Signing time:             Sat 06 Dec 2025 01:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:58 +0000
Files and hashes:         1: 6u-o-3F64LhsHl1nA1DSxzuefE4.crl (hash: 5pSP+DadrPenjQNUakfAnGCOAqbBVtyFYjUcnh09Ubc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:22:f2:7f:4c:81:76:19:27:3e:12:c4:a9:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefa8fb717ae0b86c1e5d670350d2c73b9e7c4e
        Validity
            Not Before: Dec  6 01:00:58 2025 GMT
            Not After : Dec  7 01:00:58 2025 GMT
        Subject: CN=07dc2fd037965ee86674f8c0b5ea9d8812dca7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:f2:42:8e:27:75:4a:ca:12:fd:34:6b:3a:
                    60:6d:d4:6b:aa:e5:1c:51:5b:a2:eb:54:27:43:b1:
                    f4:22:36:ee:a2:4e:48:63:1e:a4:7d:41:aa:f6:d3:
                    72:c0:51:17:98:92:5c:6d:ea:fd:5d:99:80:f0:ec:
                    4a:5f:d1:61:66:29:dd:57:46:45:c2:f9:e3:46:9e:
                    c8:4c:c3:16:5f:03:eb:06:51:e7:af:83:22:ed:7a:
                    99:86:cb:8f:e3:ae:ab:c7:99:fb:b1:81:70:6c:0c:
                    36:67:e9:85:95:6c:56:9a:fe:99:77:77:ef:d1:18:
                    40:c9:95:c7:bb:a1:e5:53:c6:1f:47:7f:51:1f:57:
                    60:ed:79:4a:6c:1b:61:ab:b7:2f:b1:8f:e9:72:2a:
                    20:e9:01:81:b8:72:50:d4:93:bb:6a:c8:e5:00:83:
                    c7:8e:e0:8d:01:0a:6d:e4:3d:a4:61:0a:18:c5:d3:
                    c3:7c:e8:88:7e:41:19:91:df:da:71:ce:db:37:48:
                    29:fc:34:15:f1:df:3e:a7:d7:6f:42:1a:5c:b7:01:
                    a6:76:1c:43:2c:f0:39:74:64:0a:2f:3f:53:d5:46:
                    e2:27:f5:16:62:35:2f:67:6e:df:2d:44:3c:72:91:
                    de:fd:f8:ff:9d:c3:ee:51:8e:c8:e4:1e:84:ac:16:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:2F:D0:37:96:5E:E8:66:74:F8:C0:B5:EA:9D:88:12:DC:A7:AC
            X509v3 Authority Key Identifier:
                keyid:EA:EF:A8:FB:71:7A:E0:B8:6C:1E:5D:67:03:50:D2:C7:3B:9E:7C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u-o-3F64LhsHl1nA1DSxzuefE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e76f15-6853-4dfb-b6bf-344bbb724249/1/6u-o-3F64LhsHl1nA1DSxzuefE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:82:46:98:43:d1:67:f1:11:07:d6:f2:3d:bd:88:66:5b:a9:
         50:9c:7a:de:55:ff:3c:0b:0f:67:49:ff:32:65:5f:1c:a6:0f:
         e1:21:b3:f9:61:1a:95:99:f1:e2:bb:0a:40:95:37:d8:f5:72:
         2c:82:63:f0:7a:28:aa:72:b2:7d:de:be:56:4d:7a:e7:3c:da:
         ae:e5:86:89:a6:13:ec:24:82:a0:5b:93:49:03:96:19:2d:25:
         79:8d:6e:cb:e1:8a:6a:9a:46:33:51:ef:27:11:3c:61:d5:22:
         bf:64:d9:41:20:2f:b8:58:47:d9:51:d3:5a:05:28:19:22:10:
         24:a6:1e:1c:e3:c3:79:64:3e:c3:ff:bc:eb:a5:32:75:ec:1b:
         3c:52:14:59:af:29:5f:23:03:35:81:5a:98:36:b3:4c:fb:e2:
         c1:5a:72:6d:ea:a8:1a:8e:0d:36:21:7d:dd:cc:25:85:57:19:
         c0:4f:9a:c4:7e:8d:37:3c:6d:a5:6e:59:29:b0:33:0c:18:fc:
         1c:f1:70:10:52:10:ec:66:96:de:ae:b6:c7:55:d4:36:97:d0:
         05:be:63:77:90:20:94:54:ef:06:96:6f:91:0c:3d:db:09:42:
         85:5d:8a:76:3c:2d:5b:bd:d6:a0:6e:58:21:8f:0f:54:84:f4:
         0e:5f:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:42:31 2025 by rpki-client