This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File:                     6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier:          eu0IgKYDh7l+OQ27dY8OwWxgu6SNzqf4vTjMoPpG9hY=
Subject key identifier:   D4:55:52:3B:A7:1C:FA:75:2E:C3:EC:C7:DC:A8:D0:5D:18:18:8D:14
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer:       /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial:       019AF2402E993808D608575871E52FE61AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 06:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:23 +0000
Files and hashes:         1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: h6d/kEPS+eJiEX1HEYIsQ5bpEQU7N5XLdoZ9oe+GTFs=)
                          2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
                          3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:2e:99:38:08:d6:08:57:58:71:e5:2f:e6:1a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
        Validity
            Not Before: Dec  6 06:01:23 2025 GMT
            Not After : Dec  7 06:01:23 2025 GMT
        Subject: CN=d455523ba71cfa752ec3ecc7dca8d05d18188d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:94:d4:06:fc:4d:aa:12:22:cf:d8:08:a8:
                    4d:83:9d:e9:3a:11:62:6c:ce:ae:61:5c:ac:c0:89:
                    3e:8c:47:6b:99:fc:76:e9:2a:c2:c7:87:30:cf:ab:
                    82:69:0a:e2:73:f2:07:ba:a0:5a:74:8d:e7:91:da:
                    fe:45:0f:08:79:5b:d5:5e:03:98:29:7d:0c:03:51:
                    18:75:22:66:dc:b1:a0:ab:2e:8e:fb:24:f5:7c:1f:
                    cd:c1:b4:39:ba:06:d4:e8:12:af:e8:e2:18:d2:db:
                    8d:9e:18:b2:e8:35:5b:56:94:f7:5c:0c:ad:ea:01:
                    25:d9:18:d4:6d:a7:79:70:0f:b7:fb:e9:0b:b8:d8:
                    2b:9c:5f:5a:48:e6:57:70:00:80:e8:83:37:dc:20:
                    a8:17:1a:cd:59:31:5b:ee:43:57:c2:04:77:65:38:
                    65:70:ac:03:10:08:16:52:45:95:3c:7c:99:23:30:
                    79:a7:89:c4:a1:34:4a:06:81:77:99:69:92:1d:f2:
                    27:5e:e1:8c:9f:fa:4d:3c:82:83:8f:20:1f:96:85:
                    3f:7c:0f:39:b5:c6:da:31:27:fa:a2:dc:22:b5:a8:
                    f2:34:1a:be:c2:f6:65:e3:0e:74:ce:26:0d:d4:1e:
                    bb:84:43:24:e1:6e:c1:46:56:de:29:bb:27:d5:85:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:52:3B:A7:1C:FA:75:2E:C3:EC:C7:DC:A8:D0:5D:18:18:8D:14
            X509v3 Authority Key Identifier:
                keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:54:bb:92:07:3e:69:3d:be:b1:97:12:f0:52:a8:e8:9e:a1:
         ad:70:5c:90:81:77:ef:f5:34:8a:36:3d:66:a2:04:38:75:50:
         32:1e:22:69:67:a1:96:a3:5b:04:ce:9e:3c:5b:0c:31:df:c5:
         2b:81:b6:1e:6f:c6:47:55:e9:2e:33:8b:0f:17:7c:cb:b9:7e:
         db:8e:1b:e2:93:ed:d4:6a:e7:2f:28:31:b6:30:6f:9e:e8:0d:
         3e:e6:8c:02:3c:2e:83:f1:9f:d7:82:dd:2a:38:98:d6:04:3c:
         7a:b4:cb:26:92:42:3d:90:99:ab:22:97:a2:10:f3:e0:fe:92:
         9c:00:03:68:65:38:32:2e:6e:7b:a2:97:21:c8:20:37:bd:f7:
         d1:e2:66:d0:a7:57:fa:b1:dc:28:f6:21:4e:c3:4e:fa:29:28:
         86:d4:e0:74:5c:b9:74:fd:3f:c0:d1:ce:30:d3:fb:55:34:fb:
         96:ae:6d:20:ff:60:e8:51:ab:fa:9c:5e:95:cd:24:93:30:bb:
         ca:a1:d9:88:70:d5:fb:49:38:5d:23:9a:d7:cb:a8:d2:14:f3:
         17:a0:fd:f0:52:95:91:2c:d0:a3:c9:fc:a6:d7:75:80:d4:9f:
         c6:19:47:01:61:19:95:51:82:fc:fc:d6:f3:cc:85:d2:19:bc:
         2d:da:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:15 2025 by rpki-client