This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File:                     6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier:          DhpgvQjHozsEZVy4muLabtKUdMH5gUmWy4utaq7vu8Y=
Subject key identifier:   D5:47:06:5E:6B:61:3D:CB:F5:3B:B1:7F:A9:DD:8F:AE:AD:CE:44:60
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer:       /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial:       019AF5407DC4B44353E33C98E3ECF38CF359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number:          0A59
Signing time:             Sat 06 Dec 2025 20:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 20:00:35 +0000
Files and hashes:         1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: a20V6S+s4I9m73fQMR65ylwMAttXphv3uJ7+doMuSqQ=)
                          2: KcWyo6HDH_f-Oalgo-AMzFyAZhU.roa (hash: lf0GIwDADpEwI5JyEJwH/aQKBfcwZ4TLIhoTMR/zw40=)
                          3: th7EIeqoBKrwZJJeDzKMKUXwuxc.roa (hash: ALjgBdMNXEgXhwMxQ4HYp3b8XrLy/GtDIe9aOPg2/3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:7d:c4:b4:43:53:e3:3c:98:e3:ec:f3:8c:f3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
        Validity
            Not Before: Dec  6 20:00:35 2025 GMT
            Not After : Dec  7 20:00:35 2025 GMT
        Subject: CN=d547065e6b613dcbf53bb17fa9dd8faeadce4460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:28:ca:88:05:e6:e8:40:d5:48:fa:ad:1f:
                    87:4c:a0:8c:1c:4b:56:94:4f:ab:7b:bb:36:df:96:
                    20:1c:db:b5:48:35:28:c4:97:a0:5f:48:27:4c:2f:
                    8c:2d:9e:70:a4:3e:8f:50:7a:f8:a9:b1:7d:e9:20:
                    e1:35:5b:d5:76:59:cf:c4:d2:8e:95:3d:34:0c:42:
                    8f:d1:83:2d:85:94:75:e0:58:a7:c2:69:b1:91:5e:
                    94:95:d2:06:35:37:a3:32:cb:05:32:f2:d3:5d:d5:
                    ae:04:2f:60:9d:1e:c0:08:62:62:f4:54:ed:f6:77:
                    ea:11:23:99:72:eb:48:3d:be:a2:ad:63:72:70:02:
                    86:84:72:31:8f:ba:19:9c:9d:88:11:e8:ad:6b:b5:
                    81:1e:7c:a5:7a:a5:92:80:5a:21:a5:35:fe:74:96:
                    b9:0e:20:9e:77:96:8b:4f:c4:96:90:4f:98:0e:25:
                    14:39:04:85:96:e5:9e:d7:1e:b0:94:7a:f6:3d:76:
                    7e:70:19:de:31:b6:76:27:6a:a0:32:6e:8e:c7:5b:
                    4d:bb:fd:d4:fd:56:f3:9f:59:3b:41:a0:15:bd:34:
                    3b:7f:37:d2:44:6b:74:47:f3:d7:c0:a5:0d:6f:dc:
                    3f:0d:55:41:f2:01:b7:69:2f:77:63:41:81:18:bd:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:47:06:5E:6B:61:3D:CB:F5:3B:B1:7F:A9:DD:8F:AE:AD:CE:44:60
            X509v3 Authority Key Identifier:
                keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:d9:90:be:7b:d6:93:48:5d:5e:a7:6a:ed:c8:0b:dc:dd:
         52:ec:da:26:f1:7c:55:f3:38:95:ff:ae:1a:40:54:c1:c2:f9:
         44:28:25:0c:d7:34:88:a5:62:83:d8:98:a7:23:eb:7c:27:d1:
         3f:ae:8c:be:10:5b:a8:69:e7:21:65:72:05:f8:83:46:cd:4b:
         05:df:47:5d:c3:e0:34:df:1a:2d:84:41:02:72:33:ac:de:77:
         6c:c6:3a:09:f4:89:41:18:f9:d0:8b:98:46:d6:e9:0c:ff:d5:
         ae:71:c9:1d:14:00:1f:f7:52:ff:c2:1d:7d:70:0e:80:4d:87:
         5c:3c:d6:34:79:f7:fc:54:10:03:f9:c8:c5:b6:16:b4:e6:c5:
         da:13:59:4c:57:bd:dd:74:37:78:fa:c2:2a:a5:a2:52:be:83:
         44:82:0b:ed:fb:67:84:c4:46:4b:9a:fa:81:f2:97:7a:76:39:
         fa:b1:94:f8:ec:7d:c4:4b:2e:c0:c8:65:fe:63:fb:5c:d2:1e:
         62:58:fa:5e:71:32:aa:0c:2f:1f:37:0e:e7:48:a2:bb:b9:df:
         7f:ec:85:54:a3:2a:7f:76:0f:19:51:30:0f:b7:74:c6:b7:3f:
         47:9c:9a:ae:cf:2d:ee:c5:2e:67:3d:16:b5:c9:35:e8:bd:b0:
         22:4b:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:11:18 2025 by rpki-client