This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
File:                     6Hzn3yMUDAAFElphqtchUx5oHw4.mft (raw, json)
Hash identifier:          OKiMpxfD+uSqbvfM00pb0ZGpKMy+CVLbL6hpa/YJ02A=
Subject key identifier:   C3:DB:92:80:99:87:04:5F:CD:5A:5D:06:CD:51:B8:88:5D:F3:F2:0B
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019AF05121402959B24C993A5E2E0D6DC964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
Manifest number:          1510
Signing time:             Fri 05 Dec 2025 21:00:39 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:39 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:39 +0000
Files and hashes:         1: 6Hzn3yMUDAAFElphqtchUx5oHw4.crl (hash: a85nhoGgn5XGWoiK9J2ISU/blfPJ86iIfIb6bKEYrGw=)
                          2: 93H-M2YyFdByF3_m4UTdVNG3rnA.roa (hash: NZdZDzcAYrRqjG7IML02jAFdaMVtT3noP2YHjNJwoR0=)
                          3: N9uVt8-2z0dXmjID6iR9e9MgbVk.roa (hash: n9sIL4/YW67/qBoixPSCi+GKHMtO0JV9xlXo1RPhaOU=)
                          4: _mlHYvNOqlWn3kV4X-JxKfP06uI.roa (hash: nSc6Enn4OnvgwO+jJT800LzQF9tqpEFUJwGLWJoDG80=)
                          5: haML-aesPdHDrfKfNJ4GEsc_gPQ.roa (hash: /PovY2vwBA2lMcdVZ631+GF0OPyYkLCFUcs9P6/i2kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:21:40:29:59:b2:4c:99:3a:5e:2e:0d:6d:c9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Dec  5 21:00:39 2025 GMT
            Not After : Dec  6 21:00:39 2025 GMT
        Subject: CN=c3db92809987045fcd5a5d06cd51b8885df3f20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:91:67:ec:89:3b:5f:6f:cd:4c:a5:20:e1:
                    e3:b4:c3:b1:07:53:48:ff:cb:a2:92:7d:ea:1d:2a:
                    61:4f:53:b6:72:98:c1:73:ea:24:db:0b:6e:59:70:
                    50:f1:c7:3a:3f:ab:5c:b9:93:0d:af:da:c3:89:1e:
                    06:9f:90:1b:4e:c6:58:8c:76:ae:9a:de:31:fd:19:
                    c1:bc:19:27:ba:9a:00:47:44:d3:fb:6b:90:2f:38:
                    1d:3d:92:1d:d8:03:8a:20:b3:68:5b:d3:a3:7a:06:
                    45:44:2d:f0:93:2a:c7:0b:60:ed:a8:1f:99:80:80:
                    c8:8b:b6:ff:19:68:e3:ad:09:eb:90:30:5a:dc:f7:
                    3e:28:74:fe:e9:7c:55:b8:76:62:61:14:15:7e:20:
                    08:9d:79:84:eb:e4:10:f9:36:4b:bc:67:6a:5b:a4:
                    d2:8d:d9:5c:c4:e8:41:54:48:23:d9:2e:82:61:85:
                    36:69:19:09:9b:cd:52:b7:66:55:7f:29:fd:b6:4f:
                    bd:f1:51:74:4e:33:b6:04:45:99:df:18:14:b3:5e:
                    16:2c:65:5a:f7:22:b5:3a:ad:7b:ad:c2:c1:b5:98:
                    92:66:a9:12:2a:dd:79:fb:2a:fa:f0:8f:85:ba:52:
                    06:12:1e:63:32:1d:be:75:39:9a:54:a1:d1:ba:fe:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DB:92:80:99:87:04:5F:CD:5A:5D:06:CD:51:B8:88:5D:F3:F2:0B
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f5:b1:4d:13:bc:84:3b:14:9d:55:0c:74:67:cf:71:3e:fa:
         3b:c1:bb:3b:32:15:24:3f:0b:f5:19:8a:c3:02:82:f9:a9:14:
         f7:f8:88:47:77:d7:97:76:41:9e:5c:ea:cb:95:95:58:06:74:
         49:75:71:4c:3e:01:3d:14:57:1f:3e:a9:9e:e1:6e:80:e3:41:
         93:b7:c7:a1:70:15:c2:e8:04:c8:94:52:2c:12:6e:a2:63:78:
         82:7c:1e:f0:27:d0:69:fb:b2:20:af:96:41:a6:5e:9c:5e:d3:
         6c:52:a7:b5:49:a5:87:e9:f9:56:bb:1e:7d:e6:c9:96:43:0a:
         ef:1b:22:e8:35:6a:cf:67:b8:1d:b5:d3:fb:1d:1e:37:d1:29:
         bc:b7:48:37:3f:82:aa:ae:97:2f:4b:fe:f9:08:eb:6a:72:8e:
         70:39:49:5d:8f:63:27:12:61:87:8e:d6:cc:dc:85:eb:1e:78:
         f4:cc:f4:9d:4c:aa:a5:3f:66:83:9c:7f:dc:73:8c:56:0c:5b:
         76:a9:5f:9e:67:da:32:08:9c:d9:41:99:ab:3a:a8:4c:66:10:
         da:e3:12:ab:8f:53:b0:c5:25:5e:50:35:48:a3:0c:35:ec:f9:
         08:a8:d4:69:99:19:c5:c0:31:e2:89:ac:bc:93:d8:32:00:10:
         5b:bf:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:36 2025 by rpki-client