This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File:                     3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier:          +/zWT3Yxh+oYVuU9IiH0b6MVbpsnHoJLRYsPiU5bpg0=
Subject key identifier:   EE:56:6C:A4:47:D6:BD:EF:56:CD:E6:B0:6D:96:D9:12:E6:A6:27:9C
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer:       /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial:       019AF50B3B7ECAAABD5EF60E6DC67D3CA1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number:          1774
Signing time:             Sat 06 Dec 2025 19:02:25 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:25 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:25 +0000
Files and hashes:         1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: hg6wf7Y1bePa361OmlLVn3VAWev7hf81ZJFAOaRbSBY=)
                          2: 6aThY8uvIN1XwAgY6N5w4VlQU8g.roa (hash: 75zQwEncUuBW4DVfhnIiHwP51JmTTN+DyyniesvlQVg=)
                          3: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=)
                          4: P4Cb5oaFevIjC5s1wM4Yzi97PJE.roa (hash: 3Ogb5mf4rx+IYcLkaQHDj7kY0bKNooxxAV2yrkt6glM=)
                          5: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:3b:7e:ca:aa:bd:5e:f6:0e:6d:c6:7d:3c:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
        Validity
            Not Before: Dec  6 19:02:25 2025 GMT
            Not After : Dec  7 19:02:25 2025 GMT
        Subject: CN=ee566ca447d6bdef56cde6b06d96d912e6a6279c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:7e:1f:b9:d3:8c:8e:06:51:69:02:17:f3:
                    b2:6d:fa:67:52:cf:6a:ec:46:cd:78:b5:ab:0a:92:
                    90:61:9e:22:21:b3:2e:d9:cb:84:60:4a:ba:f0:ee:
                    ac:e5:66:61:4c:dc:88:13:cd:bb:ac:bb:8e:93:26:
                    60:a1:a8:23:ea:ef:2f:cf:2f:c0:5e:98:af:d9:d8:
                    d8:b8:e1:9c:25:8d:5d:f3:4e:30:87:9a:78:c6:e2:
                    8b:58:2c:60:b9:2a:7e:41:f5:77:7a:f3:e5:da:51:
                    89:78:ea:a2:eb:df:66:bc:b6:fa:41:0c:dc:1f:01:
                    eb:0b:d0:c8:d7:e2:86:ff:4e:47:6b:1c:d9:ce:11:
                    9a:db:c7:b0:29:b0:bf:fd:68:c5:63:f4:9a:aa:28:
                    37:0d:10:01:0c:db:74:e5:3a:49:f3:d0:7c:fe:27:
                    51:84:16:ee:f5:53:16:ad:9a:85:95:83:93:2d:aa:
                    38:2d:7b:fd:c8:4f:8e:d1:cb:98:5d:27:35:ea:79:
                    d3:6a:88:92:04:89:01:55:35:4a:99:cc:27:b0:57:
                    33:ef:d0:48:35:94:3b:2b:48:9e:8c:a4:2a:50:ed:
                    69:97:59:88:5f:74:36:c2:c7:19:49:11:29:db:c6:
                    7f:7f:49:d7:8d:26:f3:d6:c7:a9:46:ee:66:62:56:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:56:6C:A4:47:D6:BD:EF:56:CD:E6:B0:6D:96:D9:12:E6:A6:27:9C
            X509v3 Authority Key Identifier:
                keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:38:9e:df:5a:37:4c:1e:56:22:85:31:10:7c:79:8a:3f:60:
         d3:c1:17:d8:35:e8:c8:d7:39:f2:a7:1b:66:5e:af:2f:ec:3e:
         ac:ba:6a:5b:0d:f2:32:6a:e2:1b:cd:8d:97:4c:4d:96:95:31:
         88:ad:c7:d1:af:06:5a:4d:3c:2a:27:12:d6:69:37:60:58:ad:
         09:87:48:fe:2f:41:9e:34:9b:cf:9c:7b:9d:08:ab:ce:21:8d:
         0c:8f:5b:27:fe:b6:76:61:b4:cd:5d:f5:c7:94:72:d6:09:a7:
         57:77:c3:4a:0b:12:af:3b:03:e0:df:39:d7:b3:4b:43:d2:be:
         81:b9:1c:cc:f1:bc:19:9a:da:3e:04:6d:e3:ef:6f:bf:af:c6:
         9e:df:47:fa:09:7e:4b:2c:85:58:c5:54:35:aa:9f:85:fa:2d:
         ec:33:a5:b8:39:4e:f5:b3:56:9a:92:80:bb:fd:6f:c6:c9:4d:
         ca:1a:89:3b:ae:e3:7a:a0:34:67:f5:a6:c5:ea:fd:f7:2f:24:
         66:3e:35:38:6e:41:a0:e0:ea:89:e0:5f:1b:35:64:e4:3c:fb:
         3b:6f:fb:1e:25:28:eb:5b:50:0e:00:ab:25:26:cc:c4:7b:ef:
         6f:98:ac:42:aa:1f:d9:6c:fb:8b:cf:21:98:aa:57:a7:a5:34:
         d1:b5:9c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:16:41 2025 by rpki-client