This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
File:                     _6vCNZX9gER9mPXsNRMWG9JHP8Y.mft (raw, json)
Hash identifier:          1w6i+WOxE2zdIr8w5W02dqoFuxx2BkNS2aHITH7wRMA=
Subject key identifier:   ED:EA:10:0D:71:8A:90:3F:B4:D3:EC:A0:7C:0F:D0:C4:0D:23:2B:75
Authority key identifier: FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6
Certificate issuer:       /CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
Certificate serial:       019AF19B54AE13F32FEE55293005999BE0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 03:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:20 +0000
Files and hashes:         1: _6vCNZX9gER9mPXsNRMWG9JHP8Y.crl (hash: zBpl6MLzrjNAskHzeA8lDeg/dgciXReFTgl/1Ov2h/s=)
                          2: n0WE9rwocCHCYcBXCKZfpxQ3G2M.roa (hash: BVGoc++GdN0W0NrCtzzymI9R4sw/BZhgTYZXjkBBFbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:54:ae:13:f3:2f:ee:55:29:30:05:99:9b:e0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffabc23595fd80447d98f5ec3513161bd2473fc6
        Validity
            Not Before: Dec  6 03:01:20 2025 GMT
            Not After : Dec  7 03:01:20 2025 GMT
        Subject: CN=edea100d718a903fb4d3eca07c0fd0c40d232b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:d7:e4:fb:f7:78:bc:00:38:9f:cf:df:f6:
                    ae:ac:75:a2:69:05:3a:47:a9:9b:08:08:6c:df:34:
                    7d:a4:50:3a:78:92:23:64:bf:3a:6c:e6:ad:79:ae:
                    d9:11:99:55:a7:53:bf:5f:75:3c:2f:09:ac:e0:9b:
                    ae:1a:30:48:20:50:1e:d2:79:73:1f:ed:38:01:8e:
                    99:13:5d:e7:c0:e3:a7:b8:20:69:00:a3:c5:5c:e8:
                    da:cb:3e:60:83:93:9d:23:56:3d:ad:88:56:dc:b8:
                    6e:93:30:4c:88:bf:ce:59:b1:b4:25:08:9d:e2:43:
                    5e:d3:84:e1:a9:27:e5:77:d4:f8:b0:a0:f7:8e:fb:
                    6d:ab:88:9d:08:49:b8:1d:a8:2a:a5:4a:95:c6:fd:
                    9b:6f:20:d3:27:01:5c:31:e9:a3:fc:9b:32:73:e7:
                    76:3f:9a:51:d9:fa:93:69:7a:64:e5:45:23:9f:f2:
                    a6:f5:ce:1d:9d:21:bf:7c:ae:8d:7c:67:b4:10:cb:
                    1e:31:04:41:5d:1c:46:0c:20:cc:e5:21:78:0a:cc:
                    6a:00:c9:db:d4:f4:6f:3b:89:17:89:72:e8:7a:df:
                    2f:1f:84:1b:4a:6b:76:7f:83:69:b6:f6:dc:13:29:
                    d2:21:b2:67:c3:47:b7:b7:ae:c9:89:d2:1d:71:32:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:10:0D:71:8A:90:3F:B4:D3:EC:A0:7C:0F:D0:C4:0D:23:2B:75
            X509v3 Authority Key Identifier:
                keyid:FF:AB:C2:35:95:FD:80:44:7D:98:F5:EC:35:13:16:1B:D2:47:3F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6vCNZX9gER9mPXsNRMWG9JHP8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/191219-47c9-4b1b-8e46-dd8a68dbd3b6/1/_6vCNZX9gER9mPXsNRMWG9JHP8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:17:35:09:f0:75:9e:8b:d4:68:a7:15:3f:14:8c:76:7e:5a:
         99:e7:47:29:6a:61:f1:74:1b:bf:ad:84:1b:95:b6:50:f8:e8:
         38:6e:8e:bf:5e:62:12:cb:45:a5:06:2e:b0:61:28:38:36:4b:
         7a:42:39:24:66:49:c9:8c:a3:3d:61:74:68:11:7e:31:f2:69:
         32:97:10:72:d4:57:0b:fa:3d:87:21:99:f5:0e:e1:57:b5:07:
         6b:cf:0e:09:d1:33:c2:c6:26:c3:5f:25:1c:4d:2f:bb:27:55:
         15:90:29:32:f9:c0:f6:9b:c7:9a:af:c5:08:6b:83:20:e0:e5:
         a9:25:1f:b0:54:62:48:da:57:41:0d:59:44:7c:b7:8c:80:02:
         70:66:8a:f5:53:d1:33:a5:a7:df:9b:24:71:9a:89:a8:0f:4a:
         9b:2a:61:a0:de:82:96:93:ba:0e:34:89:a2:49:71:81:68:38:
         c1:58:4d:f0:44:c8:be:b5:a5:e2:b0:cc:61:34:77:4c:4d:1c:
         b7:07:ed:2b:dc:a9:08:1a:37:b8:c0:2a:2a:e3:ed:eb:55:b6:
         99:30:24:8c:5b:10:fc:82:dc:20:3f:d6:0d:ba:2f:b7:a8:b0:
         04:bc:d4:79:10:f1:25:41:29:49:ef:b6:a3:99:96:51:c8:5d:
         76:9d:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:51:07 2025 by rpki-client