This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File:                     E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier:          T7qYOgIOqBVrV300xESokeIA7gUTFqCpO3tXUCuRb28=
Subject key identifier:   46:4B:55:2B:B5:3A:C8:E4:C5:A5:3C:7D:AF:66:D1:C8:F4:21:58:0E
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer:       /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial:       019AF12E35A050D67F74CA92B78172F4AC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number:          1273
Signing time:             Sat 06 Dec 2025 01:02:08 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:08 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:08 +0000
Files and hashes:         1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
                          2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: c2fzgOKzJJhi6ZnjM4r2AcfkMCjGeFLk3myhRVTP/2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:35:a0:50:d6:7f:74:ca:92:b7:81:72:f4:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
        Validity
            Not Before: Dec  6 01:02:08 2025 GMT
            Not After : Dec  7 01:02:08 2025 GMT
        Subject: CN=464b552bb53ac8e4c5a53c7daf66d1c8f421580e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:38:05:e6:b6:db:25:8f:7f:71:dc:56:64:
                    de:39:48:c8:a4:ff:5f:0f:c9:7b:4d:b8:09:9d:18:
                    41:a7:84:fd:87:d5:a2:dc:58:93:04:c3:ce:d7:35:
                    21:64:a6:51:9f:2e:16:8b:b9:ad:fd:f1:d3:b4:7c:
                    45:0a:ea:96:b3:59:24:0a:56:fe:4e:90:fe:63:c4:
                    6d:ab:af:a5:bb:c7:dd:8c:02:55:49:2e:e4:1f:43:
                    10:4e:42:62:4f:25:d0:57:8f:5f:c7:44:a8:c0:2a:
                    ff:ea:b8:d4:50:b6:07:13:14:64:9b:bd:0e:1e:49:
                    82:6a:39:fa:06:ee:df:64:90:3f:6f:a7:7d:8a:1c:
                    c1:4c:74:f0:2f:58:aa:c7:4f:a0:7b:55:62:17:98:
                    f1:ff:95:45:a5:94:13:08:55:79:08:86:5c:c7:0f:
                    15:da:c0:08:14:87:2e:37:09:a9:23:3a:a2:f4:bb:
                    d1:a3:fd:8f:32:ac:c8:10:f9:f0:78:62:37:59:0c:
                    74:13:90:83:2e:7a:9e:b0:eb:e4:a7:75:23:c7:34:
                    af:ab:ff:9c:df:c5:70:c9:5e:7b:34:4b:3d:f4:df:
                    98:a0:83:91:36:ec:81:fe:37:d2:fb:6b:4a:c8:b6:
                    7f:2d:6b:f9:42:fb:ff:73:9a:cd:ed:d7:55:46:0a:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4B:55:2B:B5:3A:C8:E4:C5:A5:3C:7D:AF:66:D1:C8:F4:21:58:0E
            X509v3 Authority Key Identifier:
                keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:48:b2:61:fe:b9:f6:4f:e5:08:14:d2:75:e6:73:32:84:0b:
         cb:28:39:d9:c6:11:cc:7a:6c:f4:cd:30:93:3c:64:77:66:e1:
         81:3e:a7:87:32:10:0d:01:a5:63:71:4c:f4:c3:6a:0a:dc:ad:
         7c:1e:ba:1a:61:78:a7:f5:5d:e6:1c:9a:50:f8:97:ef:06:24:
         ef:1f:9d:28:3c:ab:e2:47:e9:b0:5c:35:94:0f:66:e1:eb:60:
         bf:76:47:df:30:d9:48:ca:5d:4f:78:36:f3:fd:96:69:6b:c1:
         06:73:e1:f0:31:2c:74:98:5d:3d:f8:d7:95:f7:0a:82:6c:c8:
         31:69:19:af:43:5b:80:e8:12:6e:bb:05:35:1f:de:97:77:16:
         ac:55:3b:ec:77:8d:d4:32:a3:a1:22:74:1c:f6:09:09:b8:34:
         5a:ea:a1:a0:cb:64:42:fe:52:6d:74:49:66:b0:00:db:ca:f6:
         47:06:29:6c:1f:39:8f:b7:67:2d:dd:89:19:a9:d3:59:5a:26:
         db:b9:de:89:ed:f9:06:f6:69:d1:b9:b4:75:9c:f9:9f:7f:ea:
         70:d0:30:cc:22:8d:02:89:87:db:b7:1c:77:48:f0:16:4b:80:
         fc:16:bc:ca:4f:58:fb:35:00:00:a9:29:03:25:41:fd:32:fe:
         b6:71:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:31 2025 by rpki-client