This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          EMJ+F3Ukfo6+zVQl2CAxyObSiiJ9it/dPFu6UjavClk=
Subject key identifier:   BD:09:93:34:0D:B2:DF:2F:35:94:D9:31:52:BC:72:94:0B:0B:F0:6E
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       019AF3C025E98898F25DE2357CA1F879C68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          1324
Signing time:             Sat 06 Dec 2025 13:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:47 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: 3uiqHp4o/ZjlnH3+vUv5+An4gV6geTCQahsFc0KUR3E=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:25:e9:88:98:f2:5d:e2:35:7c:a1:f8:79:c6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Dec  6 13:00:47 2025 GMT
            Not After : Dec  7 13:00:47 2025 GMT
        Subject: CN=bd0993340db2df2f3594d93152bc72940b0bf06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:40:03:ec:2d:06:d9:50:12:96:08:22:8b:
                    49:e9:7c:0c:38:4b:2f:b4:0c:ce:ef:8b:d2:64:21:
                    02:94:7a:4f:29:e5:91:eb:7f:96:1d:26:79:e7:76:
                    87:ae:37:0c:4a:40:b5:a0:d6:f5:09:a8:0c:38:ce:
                    83:fe:e6:bd:2a:6c:2c:6c:2d:07:23:34:0f:c6:a0:
                    a2:41:07:5d:ee:cd:6d:37:46:e6:27:93:cb:51:98:
                    94:40:ba:4d:c9:b2:d6:f8:d5:12:b2:d8:40:ab:8c:
                    36:d0:22:ad:15:3f:9b:d8:9e:14:06:5e:4b:8f:a0:
                    48:6f:da:a3:d1:42:29:db:bf:73:6d:81:00:83:85:
                    58:d2:e1:5b:de:0d:be:e0:57:69:8e:96:df:ef:a3:
                    02:44:4d:36:0a:d0:e2:e8:9f:81:77:78:2b:74:03:
                    5b:f7:ac:c5:7a:e8:08:77:b3:89:19:8c:48:91:18:
                    af:3a:52:2c:92:74:bb:fd:8f:c1:46:29:e5:bc:f4:
                    bc:2d:1f:23:04:c3:c2:3a:e4:24:75:74:0b:54:d3:
                    f1:ab:21:71:c4:38:22:d0:6b:5c:a1:d4:fc:21:5f:
                    67:48:f3:10:fc:37:0c:d1:77:06:2c:b0:38:5e:01:
                    fb:83:9e:06:e0:b2:e1:23:b7:4a:2b:4a:06:6f:d1:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:09:93:34:0D:B2:DF:2F:35:94:D9:31:52:BC:72:94:0B:0B:F0:6E
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:35:35:4f:3c:a3:fa:f9:53:c3:6f:3e:17:33:7a:98:c3:
         58:ea:12:99:8c:a9:4e:1b:5e:b8:9b:ac:c3:09:2d:73:14:40:
         88:39:57:c4:3f:fb:14:91:96:75:8a:f4:f2:9b:33:03:bf:1a:
         63:d3:01:ee:de:63:c7:a2:10:f0:1f:da:d9:d4:77:90:42:6f:
         2c:66:80:b4:5b:71:3e:af:de:96:98:43:43:0f:92:f0:de:06:
         26:0a:24:87:7d:ab:c6:99:1e:3c:25:f3:36:e2:e7:4c:8f:d8:
         85:27:14:12:2f:69:d6:07:d1:1a:21:fb:80:c8:15:9a:12:d5:
         b0:71:76:c7:c8:44:48:17:fb:62:ab:b0:d8:9f:fe:b2:84:1e:
         94:ce:f2:97:0a:44:24:d1:1d:77:c3:95:78:83:32:2c:b1:6f:
         11:60:97:8f:82:76:e9:db:0c:64:ac:4f:29:06:f1:38:6b:4b:
         ec:76:3a:e1:89:f0:4e:4b:85:95:e4:f4:b9:de:2a:21:d3:5b:
         20:da:83:fb:0a:26:12:95:4a:91:18:1e:81:1b:33:91:40:e9:
         c0:d1:a7:83:22:82:6c:15:38:bc:30:bb:c7:73:43:72:6b:0d:
         95:12:c4:72:ca:5e:95:d1:cf:5c:83:f5:34:c9:36:5a:7d:91:
         8e:e3:0f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:44 2025 by rpki-client