This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File:                     6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier:          1nwSVcZa55LGbkMF3FmreMpHo0W0KifewGqlCePxZF0=
Subject key identifier:   C7:FA:E3:3F:27:F9:DC:9F:72:25:2B:2B:BC:EB:48:EB:2A:80:39:B9
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer:       /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial:       019AF088984DACAEB5F9098CE6A25FB0184E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number:          115B
Signing time:             Fri 05 Dec 2025 22:01:14 +0000
Manifest this update:     Fri 05 Dec 2025 22:01:14 +0000
Manifest next update:     Sat 06 Dec 2025 22:01:14 +0000
Files and hashes:         1: 49q3DDmrg6cVtppsLABS81MGkqg.roa (hash: Y49UGOvEecC7Z5Ts0nifT62msA+Ws1fglGSRVZSw/Hs=)
                          2: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: vVW/yKL24vgOWV6Q0j4r7s8hiDGYpj0mkV1X+rWjEaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:98:4d:ac:ae:b5:f9:09:8c:e6:a2:5f:b0:18:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
        Validity
            Not Before: Dec  5 22:01:14 2025 GMT
            Not After : Dec  6 22:01:14 2025 GMT
        Subject: CN=c7fae33f27f9dc9f72252b2bbceb48eb2a8039b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:13:9d:39:7b:3a:ab:42:5c:50:41:09:b7:
                    10:83:90:14:e4:b2:ad:09:d8:83:84:cf:9a:8f:aa:
                    74:54:f5:24:33:19:1e:98:3f:c4:ce:e1:86:eb:e7:
                    99:61:f1:77:3b:21:be:a1:c9:c6:c1:51:f9:46:ad:
                    21:cd:97:b8:84:83:93:65:65:6e:15:12:d2:6f:25:
                    cb:51:ae:3f:fb:93:f4:e1:11:fc:12:6b:c8:88:54:
                    e2:77:2e:a7:da:de:9b:2d:b2:7b:d2:bd:50:74:fc:
                    0a:df:54:db:42:93:7e:e5:f8:03:73:dc:55:eb:3e:
                    4a:81:d2:8d:84:ac:24:5a:0e:49:a3:94:cc:f3:31:
                    76:80:fc:ef:01:30:ca:e9:c7:dd:80:52:83:f3:36:
                    bd:53:22:a5:50:5f:83:e2:c7:4e:34:34:74:12:99:
                    e3:52:94:97:d5:77:d8:b9:dd:9a:85:2d:18:c5:86:
                    6b:7d:59:c7:b8:4c:89:77:f7:f3:8f:89:33:18:5f:
                    19:cc:91:05:d5:5b:83:d9:25:74:58:7f:63:d4:77:
                    8a:0f:38:bf:34:42:8a:6f:8b:de:d4:31:16:17:05:
                    9a:4a:85:a9:8a:55:81:9a:e1:de:92:71:46:33:a6:
                    1d:e4:55:0b:ce:ee:e2:bb:07:7c:e8:ad:b0:91:2c:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:E3:3F:27:F9:DC:9F:72:25:2B:2B:BC:EB:48:EB:2A:80:39:B9
            X509v3 Authority Key Identifier:
                keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f8:5f:a7:42:66:d8:5d:f7:34:87:1f:f7:94:2b:ea:43:30:
         7f:80:d7:10:ef:76:c0:03:45:c8:cf:72:75:82:33:72:48:ee:
         0d:82:e9:35:69:62:9b:27:e8:b8:9e:14:71:09:ee:1a:bc:59:
         fd:81:1a:c5:b5:44:fc:3e:a1:ff:1c:fc:9f:88:21:42:b2:d5:
         92:12:5c:49:07:92:87:80:30:4e:c9:45:7c:4f:b7:5d:14:30:
         c8:85:15:c2:fd:aa:1f:4d:43:df:02:59:45:14:e7:22:8d:4d:
         d7:48:93:f0:5f:8d:66:7e:7f:12:ea:ab:f1:0f:96:b8:7f:21:
         e1:4a:14:43:85:51:fa:46:e4:fb:77:5a:97:c1:de:c2:d6:d5:
         1f:73:69:d8:76:a1:ba:cb:19:4e:0b:a5:1c:28:e9:04:d3:1d:
         00:04:1a:b1:69:c5:25:08:52:bb:2a:43:86:c2:b9:47:7e:54:
         65:2f:f0:95:4b:58:55:2f:22:88:87:1f:24:33:65:80:83:3f:
         db:7f:bc:66:1e:c4:1d:6a:f9:fe:33:84:0c:b4:19:41:57:8a:
         4e:8e:e1:1d:79:e3:ef:fb:00:6b:3c:18:c8:eb:5d:b9:4e:b7:
         02:25:0b:35:83:96:77:0c:a8:2d:8b:2d:ad:96:df:6d:f2:67:
         fb:bd:81:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:21:11 2025 by rpki-client