This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          DLpvTdH1VAq/iLRiik5HopjPC2Bq2wU5QhKKIExWeXQ=
Subject key identifier:   7B:56:BF:70:B6:6C:A5:B7:62:7B:29:58:1E:B1:92:DD:48:91:E8:5C
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       019AF12ECBC27520900AE1F7608CC06D3FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          11C4
Signing time:             Sat 06 Dec 2025 01:02:47 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:47 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:47 +0000
Files and hashes:         1: Dg_nZXNMxQynE5ehC7tXyWYcMIY.roa (hash: GdXBqs86r5DAb+MyyV4wEtv+zLO6JrCMc/QjbYWwSSo=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: Bolnr8eFWx3nh7uD1nKb2VY5Tpu/XFGXNiiBOL3ecGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:cb:c2:75:20:90:0a:e1:f7:60:8c:c0:6d:3f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Dec  6 01:02:47 2025 GMT
            Not After : Dec  7 01:02:47 2025 GMT
        Subject: CN=7b56bf70b66ca5b7627b29581eb192dd4891e85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:1a:2f:05:ac:32:5c:80:a3:35:43:8c:ba:
                    ba:27:2f:3e:01:c7:6c:5b:65:de:58:e5:1b:10:93:
                    f3:63:47:fb:5d:f2:fa:51:62:07:2f:7f:42:56:e2:
                    3d:06:b6:fd:40:21:57:a7:8e:60:cd:bf:4e:72:75:
                    84:23:38:ee:bd:c1:d4:0d:cf:bb:7c:6b:99:31:4b:
                    91:78:48:ee:e9:14:0c:7e:36:1d:51:80:b2:a1:07:
                    54:2d:e7:30:8e:f5:a6:17:1e:4b:38:3c:ae:ef:50:
                    3d:12:6d:68:c4:84:43:44:ea:af:cc:5c:7b:74:04:
                    c3:cd:c2:14:8d:9a:a9:78:56:95:75:26:d1:86:20:
                    da:25:f9:c9:23:df:d0:8f:f1:e5:7b:27:eb:05:4e:
                    af:43:70:c2:b0:e1:72:f5:75:1d:0d:2a:10:67:06:
                    75:00:a5:b8:a4:bf:29:78:1f:d4:d7:05:c0:26:b6:
                    e4:e1:e4:a7:d3:ab:e4:3b:ca:2b:d8:b5:37:b5:c6:
                    f8:7f:6a:66:15:1c:14:b2:f7:25:c9:f6:e7:af:8e:
                    90:c9:aa:e5:f9:8b:02:ce:d8:76:8d:ad:b4:35:56:
                    e4:1c:89:cc:63:eb:34:14:0d:70:3c:29:61:c8:6c:
                    d6:cc:3a:32:73:d3:01:93:1b:24:b6:4a:5b:05:56:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:56:BF:70:B6:6C:A5:B7:62:7B:29:58:1E:B1:92:DD:48:91:E8:5C
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:53:4f:d1:1b:f2:f3:ac:8f:a1:0f:5f:25:5e:4d:ee:2f:
         07:4e:3a:96:46:5f:3d:98:14:77:f6:5c:57:f8:c3:f2:8f:38:
         b9:f7:f6:c6:7e:54:9e:46:71:ea:a1:18:4e:7a:61:b7:5a:27:
         33:2d:49:0f:39:1b:61:9c:15:7f:d9:6c:e8:eb:9d:2f:0b:b2:
         47:a6:81:4a:bb:64:81:0a:36:be:ae:7b:b3:e0:c5:67:87:e5:
         a1:58:54:59:38:05:40:33:83:9c:99:3a:72:be:b7:7f:80:6d:
         13:23:9d:f1:f1:f1:bc:c1:35:c3:03:3b:78:43:5a:34:89:b2:
         10:e0:60:5b:7e:7b:95:ae:59:f0:20:d6:fe:c5:c5:e6:57:48:
         07:0a:da:ab:f8:4f:a9:20:38:3c:46:ed:d9:71:62:a8:e3:b0:
         11:99:8c:f9:1f:45:45:ca:51:7f:f2:49:47:68:ac:a9:bf:88:
         55:7b:dc:22:64:7e:bf:ad:a1:8f:0e:fc:1c:d7:44:14:f1:36:
         db:5b:d6:ca:ec:44:45:9e:ac:0e:2c:e2:5e:ec:69:41:4b:8a:
         2e:01:23:57:df:46:e0:bd:14:8c:8a:04:9e:3b:08:0c:42:40:
         83:92:e8:d4:c4:23:92:ce:a2:ae:50:d9:ae:ce:7f:52:e9:63:
         a6:75:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:09:00 2025 by rpki-client