This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          OBHW4xxA0QkekKRm9lBVqu6iZyZabyXv0oLgZawelhA=
Subject key identifier:   60:83:07:73:18:C9:53:85:DE:CA:0A:B8:DD:1E:A8:BC:40:DF:EA:E4
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019AF12D8EC27B754A275F4C085EEE14F101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0AE4
Signing time:             Sat 06 Dec 2025 01:01:25 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:25 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:25 +0000
Files and hashes:         1: CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa (hash: 1+cCs2zFwxJkW1OoUx7Jz3Uxj06h6MGbFiXw6q5dy7M=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: N8aU9e/JKSzQtwybY0DSUXQsCOMOI+DLSfQ4CJqC9dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:8e:c2:7b:75:4a:27:5f:4c:08:5e:ee:14:f1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Dec  6 01:01:25 2025 GMT
            Not After : Dec  7 01:01:25 2025 GMT
        Subject: CN=6083077318c95385deca0ab8dd1ea8bc40dfeae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:d0:e3:85:8d:00:a3:fc:0a:ff:8f:94:4f:
                    57:f6:f6:c5:fb:87:9e:bb:f2:8d:6e:6b:b5:fd:9c:
                    86:7c:dd:e7:98:54:3b:c1:f9:6a:ac:36:be:02:95:
                    da:c9:cc:53:f5:66:aa:a7:ed:39:c5:6d:7c:ef:ac:
                    c9:cc:37:6f:82:68:82:0d:57:3b:fd:ea:bd:7e:62:
                    72:4a:d5:75:50:d0:da:c9:30:33:9a:35:8a:71:e4:
                    78:9c:83:12:91:05:7c:58:d0:50:dc:97:5a:cf:94:
                    22:1c:14:c2:33:dd:e9:00:77:10:ab:a5:c9:10:a3:
                    75:26:23:66:81:89:18:de:ae:b5:0f:8e:79:32:8c:
                    24:a7:52:5e:e9:08:c5:45:e7:86:da:06:f0:70:26:
                    2b:2c:58:7f:23:72:19:69:7c:92:47:cb:b7:8d:73:
                    9d:2b:23:6e:58:aa:6e:fc:d8:8f:00:3c:ee:7d:12:
                    fa:51:82:9f:c8:99:ed:b6:c9:6f:59:03:27:af:2e:
                    12:4d:66:cd:8e:fb:99:ad:5a:65:0e:ff:12:b8:98:
                    4b:6b:d3:ac:f7:ef:dc:cb:6d:20:ab:30:3c:60:fb:
                    c1:b4:f5:b6:30:2b:25:2a:68:f7:21:d2:63:7d:5e:
                    02:88:df:c2:e3:07:61:87:9c:45:31:b6:2a:a0:41:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:83:07:73:18:C9:53:85:DE:CA:0A:B8:DD:1E:A8:BC:40:DF:EA:E4
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:93:02:1b:fe:39:fc:5b:a1:05:72:88:66:63:55:13:c6:55:
         19:da:8e:84:27:78:bc:38:85:3a:79:a4:3a:7b:a9:b7:01:eb:
         eb:48:4d:f8:df:5c:39:0a:c1:d1:09:d2:f3:f9:d9:e2:ee:1f:
         65:2a:3b:e6:87:e8:34:25:87:33:75:8d:c2:2f:14:d8:0b:30:
         27:bf:06:c9:32:10:f4:af:4b:63:56:9d:01:f1:89:84:a3:b0:
         5a:e6:f3:40:8a:7d:d1:32:ae:53:63:7b:7e:71:b1:58:58:6c:
         12:d9:df:f7:73:5b:27:38:a4:92:0b:32:57:d0:1a:1e:e6:15:
         7a:6e:e8:70:5a:f6:d7:17:7c:af:20:05:b0:fc:f5:25:cb:27:
         78:b3:68:ce:29:4b:16:c4:cc:59:71:9e:73:73:f4:f0:6e:12:
         54:d8:46:9e:9c:a4:d6:38:12:5c:c0:d3:1d:36:52:87:73:ab:
         6d:fc:2b:9a:71:12:38:fd:a6:a1:40:6f:f8:32:7a:c9:5e:fa:
         20:59:d4:b5:e3:16:4d:82:6e:28:17:28:fa:e3:04:1b:1d:3a:
         5c:38:7a:cb:e3:80:19:1f:33:5c:bb:37:80:b9:c8:fd:51:39:
         32:e8:c1:79:2a:d3:37:d0:ba:e9:22:4b:d0:20:ac:52:0e:e9:
         96:d3:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:06:34 2025 by rpki-client