This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          Zz+aga0Ag/TtA1ey45IEAkWWeufJVqqmnTG7qbwuxBE=
Subject key identifier:   CE:25:1E:D4:7A:C6:56:AE:1B:6D:9A:7D:F0:DF:C8:C1:50:8D:31:8C
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       019AF35271F942128B626830CFC4D842B798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          1725
Signing time:             Sat 06 Dec 2025 11:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:57 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: 2mtb41QBr7FtAUFA5qKJCOcSrCS29+chtR96m6jShpo=)
                          2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:71:f9:42:12:8b:62:68:30:cf:c4:d8:42:b7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Dec  6 11:00:57 2025 GMT
            Not After : Dec  7 11:00:57 2025 GMT
        Subject: CN=ce251ed47ac656ae1b6d9a7df0dfc8c1508d318c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:f7:00:5e:df:2c:1c:90:22:a5:c0:5e:9e:
                    dc:c0:41:7e:b8:7d:89:58:06:52:71:63:a3:4a:97:
                    ce:04:82:41:50:0f:78:93:37:a1:48:e6:e6:1b:97:
                    b3:b9:79:fe:34:02:98:ff:5c:c7:b5:a7:65:11:f8:
                    40:da:80:91:a8:ab:19:d4:91:6a:92:22:73:5a:cd:
                    72:46:b9:ae:5c:57:13:96:ee:67:8d:38:13:ef:22:
                    4a:dd:c1:e9:ba:0c:69:b5:28:21:48:2c:7b:0a:14:
                    ca:83:50:84:e4:86:87:b2:42:70:fa:4c:57:89:9b:
                    fd:5f:d2:85:74:51:30:e9:12:fe:b7:9c:40:bd:78:
                    27:55:a7:c7:86:79:24:da:df:9f:d2:b9:87:e7:3b:
                    3e:5b:15:3d:44:e9:8e:d5:94:96:73:1b:9c:ce:80:
                    a7:cd:4a:7c:b7:74:6d:9a:33:5e:2a:fb:d9:0b:d2:
                    9c:3b:80:fb:f1:7a:b3:5d:da:69:ae:43:e8:85:13:
                    81:4a:33:2d:e4:78:7b:fc:b8:22:7e:54:0c:55:e4:
                    1c:8d:36:52:13:e6:0f:11:ef:7e:cc:c2:d5:4f:79:
                    09:87:8b:68:14:04:6d:f7:ab:03:b4:b1:58:06:38:
                    37:b6:9c:81:fd:b1:de:b6:00:83:b8:a6:ee:eb:87:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:1E:D4:7A:C6:56:AE:1B:6D:9A:7D:F0:DF:C8:C1:50:8D:31:8C
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:c0:0e:b0:29:3f:ee:fd:3a:16:20:b8:60:2b:30:e0:f9:
         46:40:24:c9:13:36:da:69:95:a8:d8:1b:99:f9:d7:24:6d:d0:
         a9:d8:f0:fa:30:13:74:74:b4:81:33:d7:5f:56:56:cd:1e:50:
         30:d8:cb:5a:21:be:3b:6e:e0:eb:52:c5:34:35:00:ee:d5:1f:
         3a:01:2b:fe:14:0f:4a:ab:f6:a6:62:f7:69:ba:de:71:4f:f8:
         74:98:bd:41:4a:f7:7a:7d:41:94:fe:96:e3:ed:42:45:4c:65:
         0b:20:b3:94:55:b2:c1:91:5d:24:62:9d:a9:fa:47:54:58:ee:
         d5:00:d5:9f:90:82:67:fa:01:b2:f6:15:6d:07:9a:3f:ed:0b:
         90:b1:85:ce:03:df:67:ab:b6:b1:94:a3:c3:a9:6a:aa:f9:c3:
         d7:f7:4f:a2:3c:a2:c0:c1:75:0c:2a:8d:f6:86:52:10:d8:d0:
         65:3e:4f:9d:3e:09:db:3d:6f:41:52:47:7c:26:ca:b4:45:7d:
         33:83:1f:44:8e:a7:76:51:2f:dc:23:57:77:fc:f9:75:ff:31:
         03:13:60:ec:b4:a0:1e:f3:e5:ef:a9:51:41:f5:bd:7d:15:e7:
         a3:85:fa:e9:a1:ac:45:b6:ee:a3:b3:87:9c:cb:51:4e:1f:18:
         09:c0:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:17 2025 by rpki-client