This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File:                     6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier:          5z1mL91su0hrx1hYjDPJknnnZrul3KO5UQRzkwfSlEc=
Subject key identifier:   24:BA:22:2B:E7:80:5B:17:3D:21:CA:C5:09:EF:8A:1E:B4:F8:15:0D
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer:       /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial:       019AF24029D7331EB9D988B46AA88A1EE530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number:          030A
Signing time:             Sat 06 Dec 2025 06:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:22 +0000
Files and hashes:         1: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: u+QavF1JbTKNe/dgPpSRcR58lpeN/Jt48jon1vhQo8s=)
                          2: nwRwy-984bbHflwKusiJIVmAkq4.roa (hash: tOQkT5BXAu3wfc5aKZscWA4O4C5nLe2NnLsQNNV6duI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:29:d7:33:1e:b9:d9:88:b4:6a:a8:8a:1e:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
        Validity
            Not Before: Dec  6 06:01:22 2025 GMT
            Not After : Dec  7 06:01:22 2025 GMT
        Subject: CN=24ba222be7805b173d21cac509ef8a1eb4f8150d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:33:80:f4:01:2c:66:f7:0b:04:05:d9:13:
                    d5:2d:a9:22:47:6a:61:58:bf:b9:f5:1b:2b:7f:4d:
                    19:e3:be:5f:11:de:66:ce:bc:22:e9:7b:bf:32:d3:
                    a3:6e:9e:fb:b1:c9:a8:f8:72:dc:35:cf:a9:46:b4:
                    2c:46:a2:5b:11:c8:b4:c0:2d:89:a8:2a:9e:df:e7:
                    d4:4d:96:91:cb:51:a7:bf:cf:35:ac:f2:f1:e1:7e:
                    3e:af:ec:cd:d8:ad:bd:03:05:a9:5f:5e:f1:b5:b4:
                    a9:99:a0:e9:e2:ad:9b:78:35:d1:c5:f5:46:68:d0:
                    8b:25:e6:55:a2:d6:ac:0e:f2:6a:b3:f7:e5:49:4b:
                    0b:56:7e:5d:03:7d:32:90:4a:4b:60:48:ce:c9:79:
                    88:b7:2d:8f:7d:cd:a1:5d:a8:4d:07:9b:38:f2:ae:
                    8c:ed:ba:32:75:55:1c:7b:e9:e3:24:8e:35:85:34:
                    fc:d7:08:11:3e:28:39:c3:cf:8a:dd:4e:0a:52:4f:
                    f3:f0:f3:d2:6d:65:85:61:d5:f2:6e:1e:23:6f:1f:
                    da:4f:f2:d1:9a:30:d8:7e:aa:d5:92:24:c9:b0:53:
                    ef:22:ca:0f:1d:88:1f:39:3b:51:43:0c:7d:c9:7b:
                    b5:ad:27:ff:c8:55:68:e9:5b:ff:63:9a:5c:74:3b:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BA:22:2B:E7:80:5B:17:3D:21:CA:C5:09:EF:8A:1E:B4:F8:15:0D
            X509v3 Authority Key Identifier:
                keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:4d:15:30:13:da:d3:b0:8b:d8:bf:f8:5a:56:e7:38:1f:
         a3:0f:3b:8f:25:c9:92:31:b7:8e:cc:7e:0b:3e:08:6b:e2:1b:
         c5:3e:91:5b:9a:9b:62:b2:fb:10:69:53:06:53:a6:85:9b:d7:
         fd:5a:a7:1f:b5:26:de:5a:4d:92:8c:ab:8a:29:ab:0f:d6:52:
         bf:ef:3b:b4:59:17:5e:a8:07:e6:d7:b4:ae:29:4e:79:51:65:
         43:c2:36:fc:85:86:b6:57:2d:04:0c:4f:45:13:8b:d1:7f:04:
         11:a5:b1:cf:f3:49:13:77:1a:99:35:6c:61:8b:e3:77:90:b0:
         11:e8:ef:1e:33:27:9b:54:12:1e:b3:9c:1a:2e:3d:83:1d:d5:
         37:c0:79:de:da:79:e8:d3:bc:73:d9:82:8f:47:85:d4:8b:42:
         67:dc:74:54:c3:01:fe:3a:f1:9e:2d:9e:b1:4e:e5:98:30:ed:
         ed:fa:1e:b2:a5:1d:5e:61:38:72:e5:22:a6:01:85:7d:e8:52:
         63:66:d3:0f:53:87:29:5d:5f:f4:65:ac:cb:71:d1:e3:59:60:
         76:22:c3:f7:64:d5:17:7e:6e:10:dd:7f:3d:45:33:c6:49:ce:
         39:51:09:1a:7d:e6:74:7b:18:b0:73:d9:bd:6b:db:c6:08:1a:
         5c:11:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:38:53 2025 by rpki-client