This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          pm5uW7MqocmCIcDPrzi6obr0wYddTZGXf9nzE8xqbBk=
Subject key identifier:   68:27:67:F9:7C:A2:AA:22:5A:46:45:0E:06:7A:EC:68:EB:1C:9A:AD
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       019AF051189C1FD04AC3301D55E39A18F258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          1764
Signing time:             Fri 05 Dec 2025 21:00:37 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:37 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:37 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: C/XiKVRjf99iLWWaSZbAYkQvSoEX0ZuPSTtYS+nNocw=)
                          2: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
                          3: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:18:9c:1f:d0:4a:c3:30:1d:55:e3:9a:18:f2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Dec  5 21:00:37 2025 GMT
            Not After : Dec  6 21:00:37 2025 GMT
        Subject: CN=682767f97ca2aa225a46450e067aec68eb1c9aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:02:ab:3e:ff:95:f2:94:ac:ea:83:97:5b:
                    91:c6:a1:6a:3b:56:ce:a2:46:8d:b6:b1:a2:3c:3e:
                    1a:71:a7:e7:97:a1:a4:53:70:68:ff:70:fa:8e:53:
                    4f:1f:cc:62:8d:08:c5:34:39:e5:68:43:0a:79:82:
                    58:d3:e0:f2:3f:5c:a2:1c:af:8b:46:4c:a6:d3:7f:
                    33:56:e8:bc:ee:cc:b3:92:fe:ce:2e:b2:6a:99:49:
                    5c:6b:cc:d1:c7:4f:32:6b:11:a6:b7:98:57:be:24:
                    ea:e4:c3:57:8c:e4:83:08:6b:bc:80:7e:d9:f7:b1:
                    81:84:65:b1:f0:f1:84:e4:08:46:93:fa:4e:8b:22:
                    d4:19:99:b5:c3:9c:9b:a7:9c:f7:73:04:07:ed:a7:
                    03:92:c3:ae:0a:8b:ad:72:ae:86:00:f9:82:b8:64:
                    d0:d0:2c:0e:67:36:f8:f2:17:35:3a:db:4f:17:ed:
                    a5:26:0f:b3:30:36:c7:aa:ed:a9:bc:47:b0:eb:8f:
                    6e:9b:50:7a:42:d5:65:79:e3:57:f4:8f:03:d5:ce:
                    bf:29:4e:4a:5d:77:3c:b6:02:21:22:a5:6f:e7:9a:
                    59:fb:8e:71:1a:8e:a3:05:fb:72:66:09:ad:a0:f0:
                    a7:1d:51:26:b0:05:08:cd:2e:43:e7:4c:cc:ef:98:
                    d0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:67:F9:7C:A2:AA:22:5A:46:45:0E:06:7A:EC:68:EB:1C:9A:AD
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:36:e0:3e:2a:88:bb:f0:08:dd:b5:f5:fc:2a:25:a4:77:52:
         52:54:a4:91:89:28:f2:ea:f1:89:90:d9:32:f4:99:25:de:98:
         8b:3a:aa:05:3a:5d:93:00:ab:40:4d:ae:36:48:36:83:44:c8:
         d1:cf:12:55:ea:4d:48:5a:f5:11:0f:57:05:1e:97:63:10:83:
         b4:96:5c:be:11:15:a7:eb:6b:ac:ee:8b:0c:b9:2a:c5:7c:4f:
         27:b4:42:4b:08:61:e9:79:94:a6:09:a6:0d:cb:79:95:3b:6a:
         bd:32:25:bf:7e:99:01:50:e8:e8:8e:db:64:f4:3d:ab:36:4b:
         ba:d6:9f:b7:b0:d3:f6:d8:c6:0d:93:43:a0:e0:24:51:a1:0c:
         81:04:a2:45:c4:1e:1d:06:48:66:ef:2b:94:13:9a:45:79:87:
         e4:09:2d:92:8a:c3:bd:e5:16:c0:d9:1c:1b:62:2c:f8:b6:3a:
         08:a2:cf:37:30:a7:93:84:21:d9:11:64:90:32:8e:a5:37:60:
         61:59:a2:a6:d0:bc:ed:4b:bb:05:3f:b7:86:90:9b:79:31:fe:
         f3:25:ce:e4:75:2b:b4:58:22:78:79:45:15:71:bb:c7:74:86:
         0b:8d:9c:d3:bc:16:8c:fc:80:58:99:68:65:91:54:88:f5:2b:
         ea:0c:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:06:42 2025 by rpki-client