This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
File:                     6Ul4d56TDgH7_n4MX8tBYREp1Og.mft (raw, json)
Hash identifier:          q2tNF2IiGmeCbuwO7VyIrh9mtFk7siXF5pwVT53I7Vw=
Subject key identifier:   C7:BE:C2:B4:72:EE:85:D1:94:2D:0D:93:B2:40:EB:AD:BC:BA:D0:61
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Certificate issuer:       /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial:       019AF12DC698ABF047F95222D12147EDFCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
Manifest number:          176F
Signing time:             Sat 06 Dec 2025 01:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:40 +0000
Files and hashes:         1: 6Ul4d56TDgH7_n4MX8tBYREp1Og.crl (hash: eg2kjqjOlQYUNkXfk8dQ9rQyWDOKDAdf/AQLs7D4eY4=)
                          2: DI-iAR6VcaXkclKeNlv8zwfg4I8.roa (hash: 7RbSmDzflIv6kaLB8a13DBMXZQgCnrqtbJpmgK4MYoU=)
                          3: bl1i3ytedni4woUQ1YOE-FDvrS4.roa (hash: tEg8X6wjSf5f3ZqIFv8q7QL5EJsMbBEc+RZjhvnHFrY=)
                          4: fIVfFoI2yXviLFQxAd8iQ3kMY-Q.roa (hash: aA+APseunSxx9RL6N0K8Qc8EpGgMdI7DpMcxgR/kF5k=)
                          5: mhspZK5M3yo4tYJXH2BpRshiA1U.roa (hash: uoM+dT/0n3HR2pfmnKHmZTSzA6cIh2x/8id1jB95qLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:c6:98:ab:f0:47:f9:52:22:d1:21:47:ed:fc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
        Validity
            Not Before: Dec  6 01:01:40 2025 GMT
            Not After : Dec  7 01:01:40 2025 GMT
        Subject: CN=c7bec2b472ee85d1942d0d93b240ebadbcbad061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:25:d9:66:8b:9c:4d:32:f0:8b:2a:56:28:
                    ab:c1:96:09:ec:f5:cb:6b:fb:1a:53:e9:25:b1:50:
                    c1:8a:8d:38:eb:59:8f:a5:fd:e7:1b:33:cc:97:12:
                    ec:60:4c:15:e4:40:36:e1:b5:15:5c:8b:e2:75:d0:
                    e8:38:8f:73:c0:61:b7:97:7f:03:9c:20:61:39:b2:
                    b9:56:be:32:de:70:a2:f5:85:b8:85:67:c5:1c:cc:
                    64:f3:64:91:32:6c:4e:4b:2e:6e:fe:56:99:ab:4b:
                    43:08:d1:41:7e:5a:3f:ec:33:dd:3f:da:5d:7f:ae:
                    1c:63:aa:0f:b3:36:46:d3:59:df:e0:e8:0e:8f:f1:
                    84:13:1b:7b:d5:da:49:b7:ad:42:ff:93:20:b5:5b:
                    8d:dc:79:c6:eb:93:42:c0:e8:2c:3e:6a:e4:f5:85:
                    ee:7f:66:91:7f:e1:e3:98:b5:a3:ff:5f:f6:7c:6f:
                    c0:3c:e0:c8:b3:4c:eb:ec:67:32:0f:c3:a4:f3:30:
                    57:67:a4:4d:c9:a0:80:c6:72:46:95:75:bc:61:e2:
                    bc:14:58:68:c0:ea:bc:47:0a:60:01:38:01:32:4d:
                    9f:3d:c9:91:d1:33:42:eb:32:0b:5c:67:fe:c8:a5:
                    cf:e1:94:be:d3:09:eb:8f:50:d0:cf:b3:93:aa:18:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:C2:B4:72:EE:85:D1:94:2D:0D:93:B2:40:EB:AD:BC:BA:D0:61
            X509v3 Authority Key Identifier:
                keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:41:8b:32:df:c2:b3:fb:89:9b:2a:16:e2:05:1b:29:59:98:
         c0:3f:a4:a7:52:fd:e6:0e:db:8a:37:5b:4a:33:ba:ed:ff:69:
         1c:d8:2b:8d:f1:db:b5:cb:14:0a:f6:f9:d1:45:c8:3b:0a:cd:
         a7:6c:65:76:d3:49:6c:01:d5:23:eb:45:24:6b:24:d9:1a:4f:
         66:3a:49:87:89:5b:20:7e:5b:66:bb:ed:19:c2:a5:da:3b:c3:
         7b:21:50:d5:9e:ec:c6:c8:92:91:b9:ad:c0:75:87:06:98:58:
         47:f3:f0:a4:1e:bf:f0:ff:68:c7:38:f9:5f:b9:69:4d:8d:80:
         4c:68:9f:27:9e:db:6e:b5:56:c3:4b:c1:50:0d:f1:ba:6d:86:
         de:f4:e0:86:8b:06:44:09:b5:4e:10:3c:38:c6:60:c6:02:ee:
         99:4f:6a:cd:e5:81:f4:c5:8d:06:41:d8:9c:72:1d:94:1d:1c:
         db:05:01:e3:0c:e5:de:71:f6:70:f5:5e:60:59:9f:06:bf:0c:
         0d:80:8a:ae:75:43:b0:d5:ef:84:0e:41:86:6c:d4:d3:09:47:
         0f:e9:58:71:a5:2d:00:c0:56:c3:1e:7d:e9:08:1a:e8:b2:b3:
         ce:81:fa:4e:bf:4d:7c:c9:85:b3:e9:1c:23:6a:27:7b:e9:4a:
         d1:b2:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:57 2025 by rpki-client