This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          T1vmykz6hfScVofxgl+fHBbnlVKOLkf+Q2uRwOWSSAg=
Subject key identifier:   26:DD:02:C6:0B:1F:06:43:3A:9F:08:0A:42:9C:01:3F:40:8B:B1:08
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       019B24ACE5478BBEA98A4FB614774CB5316E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          177B
Signing time:             Tue 16 Dec 2025 01:01:09 +0000
Manifest this update:     Tue 16 Dec 2025 01:01:09 +0000
Manifest next update:     Wed 17 Dec 2025 01:01:09 +0000
Files and hashes:         1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: 8SY+OL5VY19LpMtYoULtl3j+oF0iQ8ZhzUEnVg1b7uo=)
                          2: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (hash: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:ac:e5:47:8b:be:a9:8a:4f:b6:14:77:4c:b5:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Dec 16 01:01:09 2025 GMT
            Not After : Dec 17 01:01:09 2025 GMT
        Subject: CN=26dd02c60b1f06433a9f080a429c013f408bb108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:ac:ef:20:85:75:f4:ed:13:d6:c7:6e:91:
                    c5:cd:f2:8c:f5:ab:a3:5d:e7:2a:f7:e7:95:37:0d:
                    eb:ac:15:52:25:b9:dd:6d:0f:9d:02:52:52:5b:87:
                    5d:96:d6:39:7c:56:8d:e7:fa:aa:da:13:e8:93:48:
                    92:8f:18:13:79:be:e7:d9:8b:0b:02:44:e1:67:86:
                    0d:0a:53:21:39:53:73:67:0b:0d:06:df:78:63:55:
                    fe:33:cf:b2:7c:1f:ef:c4:00:b7:c6:01:a7:6c:de:
                    6f:32:e5:4f:b0:7c:f4:90:fd:2d:43:d7:eb:f2:75:
                    77:59:56:62:1f:b2:a9:3e:cb:bd:14:e7:84:a3:f1:
                    b0:3b:fe:72:4a:c3:ba:38:b2:ee:3a:42:f8:ca:e6:
                    d4:12:30:1e:62:74:2b:f4:d0:9f:51:9a:79:df:5f:
                    68:f3:40:eb:64:3f:1a:2e:dd:75:ab:7e:45:59:e1:
                    9a:f1:86:02:fd:62:50:ad:bf:84:27:65:d3:63:c0:
                    6e:22:e9:1d:9f:88:4d:b2:2f:67:d4:59:dc:fa:51:
                    19:61:b0:7e:95:da:ce:b3:c1:ed:c3:f8:44:20:31:
                    88:2e:a1:c6:60:59:dd:cc:a3:c7:4b:38:88:12:e0:
                    e0:f2:71:d4:6a:a3:e1:9e:04:00:3c:04:df:e7:73:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:02:C6:0B:1F:06:43:3A:9F:08:0A:42:9C:01:3F:40:8B:B1:08
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:27:ce:7c:2c:6b:65:3d:08:70:c9:92:f9:d2:17:b5:04:
         b4:87:12:92:23:97:df:2e:4c:bd:0b:4d:7d:ab:38:6e:34:62:
         9e:72:c6:ee:fe:74:db:ea:fd:5f:6c:81:8a:e2:c0:21:e5:b8:
         fe:bf:07:83:3a:f9:61:52:f2:12:ae:36:52:60:91:b5:1e:99:
         84:ff:44:6a:8e:04:82:1a:a9:57:43:bd:06:66:7a:be:0c:1b:
         48:1f:b3:e4:b3:8b:a1:12:a0:43:06:6a:af:af:70:ff:f5:91:
         d8:f0:34:83:59:c3:d9:1e:cd:13:e1:48:a9:cb:59:8f:3e:71:
         fc:82:98:57:08:e0:97:b3:27:93:9f:d2:86:c9:ad:dd:a8:d3:
         a6:82:07:a4:6f:42:83:39:12:bd:2c:25:28:00:26:b9:17:ad:
         d8:0b:03:dc:22:12:c2:4c:f8:bb:b5:7f:83:b5:ae:24:ed:33:
         6a:b1:93:2d:92:a9:8b:9e:25:79:35:61:5c:28:f3:92:7e:35:
         d6:69:d3:a3:fe:6c:cc:5e:ea:aa:43:ad:9f:01:3a:99:55:e5:
         12:81:7a:b8:c8:ba:18:86:9b:66:38:f6:ba:8b:0c:f6:f4:f6:
         28:b1:af:a5:7d:ab:48:5b:4b:df:69:3a:e8:26:9f:27:9f:7c:
         ce:68:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:03:12 2025 by rpki-client