This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          XKhp6+v4q9KPQsYoJO8XIfkEJSJonX89vpeufr2IqlQ=
Subject key identifier:   97:37:64:4B:E4:25:C8:F0:E0:24:DF:63:05:23:62:80:45:1F:B4:0C
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019AF0F5ED862172B9B41826DBAD66E1F6B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0DC7
Signing time:             Sat 06 Dec 2025 00:00:40 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:40 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:40 +0000
Files and hashes:         1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: sE6UuQR3tvcEmnoWqLZuYX6hheJFPhSfdODJ3vhxin4=)
                          2: U9_szKR8srbhSHiXME0hISvB9zk.roa (hash: Zqb60PKOf5F6hXcN+4+/4uUqXILXd/JHdWXXHL4XlcM=)
                          3: UHt5Ue5EHvA2-W-Xmt-sxStGQG0.roa (hash: 2fRtxNUH3Aca8LFhSmKgwKn175stfHslO6K/ewoks+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:ed:86:21:72:b9:b4:18:26:db:ad:66:e1:f6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Dec  6 00:00:40 2025 GMT
            Not After : Dec  7 00:00:40 2025 GMT
        Subject: CN=9737644be425c8f0e024df6305236280451fb40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:14:c6:8b:2b:8b:48:48:5e:f6:5d:dc:31:
                    d7:d0:d9:02:48:8d:0b:80:37:de:9e:67:33:b4:4e:
                    68:25:eb:2c:6b:a2:6d:0a:2e:e6:42:de:f9:7f:b5:
                    7b:6b:de:8e:65:a7:9c:03:c4:20:a5:93:5d:ee:e9:
                    82:6d:c1:95:c8:2a:ba:a1:00:24:78:16:a2:cf:c3:
                    c4:7b:b9:44:df:44:ce:9b:51:f1:19:7c:ad:f9:52:
                    f6:74:f6:a2:22:01:46:34:58:01:21:9e:91:80:f2:
                    32:14:0e:c3:81:b7:0c:de:41:8b:7e:18:d0:fe:4d:
                    fe:92:02:18:0a:f7:94:46:77:2e:75:df:5c:0a:c3:
                    ad:72:3b:02:da:1c:92:9d:f4:76:31:d0:35:34:da:
                    e7:55:c3:7c:6e:31:5b:41:39:ad:8d:fa:a8:0c:a2:
                    ff:b3:1b:91:01:69:9b:2f:6f:4c:d3:30:98:a8:47:
                    6a:0b:13:76:b0:b4:87:71:4c:69:9c:61:ea:04:f2:
                    83:aa:73:40:46:6b:09:bc:65:72:85:a3:25:be:d0:
                    dd:f6:ed:0a:25:9b:08:63:d4:be:17:28:7a:18:67:
                    bc:8d:c5:cf:fe:f8:ce:71:d3:6a:94:ff:b2:81:6d:
                    9e:9b:1f:a4:24:43:d9:b6:51:f5:3c:f7:cf:25:f2:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:37:64:4B:E4:25:C8:F0:E0:24:DF:63:05:23:62:80:45:1F:B4:0C
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:af:2b:08:c1:8d:e0:aa:9f:f5:38:91:62:5d:37:e7:47:
         ef:d4:ab:ad:1b:8e:4a:4a:c5:cb:db:08:6d:76:11:03:82:cb:
         db:f4:0b:4e:4f:c7:54:fe:14:81:7f:9c:13:1b:91:3d:d4:e8:
         70:a6:d5:a5:ba:c0:c4:c3:ee:64:d3:de:cd:ca:3c:85:fd:a0:
         2b:f9:9a:da:b0:0f:4d:ed:fa:f1:f6:6e:bb:45:df:fb:a5:af:
         8c:30:d1:ce:c6:33:e5:5a:95:2f:4b:b9:6a:b5:05:38:0f:d7:
         70:5c:c8:e3:ab:d7:c3:11:0d:23:e0:ad:31:00:43:7c:12:2e:
         e3:a5:53:dc:c6:84:df:cf:27:ef:6d:94:91:10:e8:93:fe:14:
         33:7b:4d:cb:e1:b4:3c:b9:dc:b3:58:a2:6f:36:fc:b5:1b:5e:
         8e:87:75:af:f7:f2:5d:76:10:67:32:a0:7b:81:1e:af:a5:59:
         fa:34:bd:96:60:c4:fc:bd:f3:c3:3e:d9:14:e2:53:cd:0e:00:
         44:1e:94:be:7c:ed:3a:d6:ca:85:6b:d5:ea:a2:e7:02:3b:88:
         66:61:32:f9:de:08:bf:e3:94:8f:0a:56:53:4b:8d:ec:be:52:
         ce:d1:a3:c2:8c:ab:55:53:40:be:fc:78:e7:8e:cf:c5:27:31:
         53:aa:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:28:21 2025 by rpki-client