This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          vJvDfTJuV9FbrJN5cwebKsRtOuNRD+jA8PgF1+hcPfo=
Subject key identifier:   35:69:BC:60:CD:53:E7:69:BE:46:27:95:26:40:26:E4:50:DE:DA:D6
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019AF352A4ED8D46A20100CF853134F1A148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0B6D
Signing time:             Sat 06 Dec 2025 11:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:10 +0000
Files and hashes:         1: 1-ZSGsCHMEIt-zdJlJw6apZX2Wrw.roa (hash: jSCF0+9de5r9THp7fXr99R1xtgUUcEM1y8WA8CvHwCI=)
                          2: DgOZwnFO8AhdHBgLmgcNwBsxDAc.roa (hash: h4KsWMGXdyj/8wNpX8sYIR4JqIdgBrnn4TPvXbnDMpw=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: dO91f9c05NznX8S/Ngb94+jzdhL3YzvyU4AxEoaPWR8=)
                          4: RR6pycHaTPsIe6GNf5JqSPKOd08.roa (hash: obNVdba5R47x54SSSjM+mOVGtvigMbqXtqMicMTi4UM=)
                          5: U9VsXfCDsGKpry_AQUbKGYz8tRI.roa (hash: SBzZHW/ujJ7yylMaWV4gG1R9SCvZEB29AnTHypdaXgY=)
                          6: m3gokZ3oqrQAkT9aNHEn43WdviM.roa (hash: MQtM6YjLXyL+j/Sfr97BhpgH5ErvjAr3xvEfcREF22c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:a4:ed:8d:46:a2:01:00:cf:85:31:34:f1:a1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Dec  6 11:01:10 2025 GMT
            Not After : Dec  7 11:01:10 2025 GMT
        Subject: CN=3569bc60cd53e769be462795264026e450dedad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:bc:63:21:bd:be:b7:13:69:25:48:21:f0:
                    cf:57:11:c5:68:4c:eb:36:21:c2:57:75:a7:59:5b:
                    72:1e:8e:1d:0f:68:3b:cd:c6:c1:e2:7d:ff:a4:ac:
                    4b:a2:f4:47:20:9a:e2:38:97:af:9f:8b:fe:74:9a:
                    c7:0f:f4:41:f9:56:a2:fb:a2:8b:3a:73:ad:7f:e7:
                    25:bf:90:9f:82:30:3e:67:bd:1d:b4:89:b8:ed:52:
                    f7:fc:2a:34:29:c9:01:a3:ff:02:a3:ff:7f:d1:61:
                    be:46:3e:0d:e6:2d:12:b3:88:42:fa:6d:ad:bc:b7:
                    16:54:88:af:e0:a6:48:aa:aa:19:0d:72:67:20:84:
                    5e:de:ef:28:2a:97:01:d9:19:8d:19:bb:ee:11:49:
                    d9:2a:39:c3:01:3a:44:49:67:68:b4:af:e5:b9:08:
                    60:9b:6c:b0:01:d4:f9:90:23:d2:7d:87:26:25:36:
                    dc:c2:0f:4f:2c:19:ca:b1:da:38:68:be:19:63:1e:
                    1f:3e:68:ad:46:85:d0:d2:29:e3:e8:70:3f:f6:05:
                    d2:a5:62:4a:ee:4a:2f:41:2e:4c:40:da:24:27:26:
                    34:74:9a:bd:23:7f:b7:a7:cc:45:d4:be:a1:b8:32:
                    76:8f:6e:70:bb:70:db:f6:6e:c8:54:4d:00:0f:5f:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:BC:60:CD:53:E7:69:BE:46:27:95:26:40:26:E4:50:DE:DA:D6
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:0f:fc:61:d8:68:15:37:08:96:f7:0a:45:32:bd:4d:5d:
         eb:55:0e:e4:43:ce:2b:1f:aa:0f:f8:8a:75:57:04:d2:1e:65:
         a3:b6:a4:5b:a9:73:57:cd:6e:86:50:7a:26:ab:9d:42:7c:49:
         93:70:26:31:91:a2:ed:3f:50:db:64:5d:d3:d3:b6:e3:a4:ef:
         6a:bb:4f:32:21:f4:c8:56:b9:7b:7d:53:2c:ad:eb:17:8b:0f:
         aa:c2:ce:01:a4:90:65:44:ca:30:7e:c1:87:7d:58:a7:ee:f9:
         ba:f7:00:38:07:f7:38:72:a4:e3:76:a5:45:fc:eb:11:05:8f:
         23:c6:36:45:42:34:aa:72:d1:67:72:78:06:bf:d6:5b:be:40:
         fe:9f:f0:44:5e:44:b4:de:ab:93:9d:06:e8:de:19:c2:32:6e:
         74:45:59:8b:39:dd:e5:69:d6:53:3a:29:ff:9e:6e:d9:20:d4:
         60:7f:4a:11:85:50:f6:64:80:9d:82:b5:48:aa:fc:28:ca:f5:
         27:5a:ff:70:6c:5f:b3:4f:60:c1:55:01:e2:84:02:47:bf:27:
         7a:84:3b:c4:d3:a4:28:f2:2f:fe:0e:fd:cd:cb:83:b0:6f:43:
         80:1e:35:b6:5f:b1:84:24:5e:84:55:de:17:36:34:07:aa:28:
         2c:90:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:55:51 2025 by rpki-client