This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          QEdarIEF3mhBiPAK+Lu9c4y+2qbO1iNIw+BbLZayx70=
Subject key identifier:   9A:8B:95:9F:93:16:FA:C8:3A:2D:C3:B3:38:C1:18:46:A6:9D:FB:BD
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       019AF08831C5B3498035F780CC772D418703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          1763
Signing time:             Fri 05 Dec 2025 22:00:48 +0000
Manifest this update:     Fri 05 Dec 2025 22:00:48 +0000
Manifest next update:     Sat 06 Dec 2025 22:00:48 +0000
Files and hashes:         1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: 3y0ya2inz0lZvdeAkJmw/aJEcGgdkcpzfknqo3pBq2Q=)
                          2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:88:31:c5:b3:49:80:35:f7:80:cc:77:2d:41:87:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Dec  5 22:00:48 2025 GMT
            Not After : Dec  6 22:00:48 2025 GMT
        Subject: CN=9a8b959f9316fac83a2dc3b338c11846a69dfbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:67:ee:62:d1:bf:63:c9:08:d7:cb:df:ab:
                    a9:72:14:96:8b:0c:03:a0:f6:b0:f9:9d:65:fe:a0:
                    69:d7:43:33:fc:67:8c:7f:e6:20:2e:79:62:4f:c5:
                    be:d1:11:79:c5:27:6d:09:56:7a:32:4b:a5:58:8e:
                    ac:1d:1b:25:ae:15:96:82:e5:76:01:7d:bb:e8:c4:
                    f7:78:e7:09:ba:0e:7c:cd:03:8b:b6:8c:ec:54:14:
                    2a:9b:bd:44:1b:87:59:17:7a:2a:0a:15:6f:e6:50:
                    8f:e1:82:2a:d8:0f:07:76:be:7e:44:27:1d:f6:48:
                    a3:0c:48:0a:63:29:4f:47:8e:d8:9b:54:f7:1b:8f:
                    3b:e1:3f:7c:48:da:11:77:ce:da:93:0b:9e:ce:d9:
                    d0:45:05:d0:45:da:42:20:a5:6d:44:6c:ba:94:d4:
                    83:c7:37:f2:fa:14:bc:f7:ed:5f:81:64:70:f7:a6:
                    13:ba:ad:71:bf:f3:9c:a0:bb:a6:0c:f8:45:f1:9d:
                    ec:88:bf:a2:23:e5:92:2c:8b:85:b3:f5:3e:37:66:
                    c7:8c:8a:f9:c1:c6:6e:ae:87:77:b5:18:76:d2:74:
                    47:fd:7f:a4:04:3a:14:33:65:ef:b3:2b:67:4e:25:
                    53:2b:34:1b:05:5b:78:7e:d5:9d:40:31:ed:f2:db:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:95:9F:93:16:FA:C8:3A:2D:C3:B3:38:C1:18:46:A6:9D:FB:BD
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:9e:12:89:93:87:59:92:71:d2:73:6a:b6:57:77:4a:b2:
         00:12:e4:8c:ae:2f:78:d0:a7:17:0e:d2:68:29:a0:b8:10:e2:
         fc:2b:a2:dc:c3:a6:a4:b1:67:37:4f:76:21:6f:6d:33:de:b9:
         c5:b6:7c:0a:0f:18:cc:39:65:54:56:86:52:63:17:f2:8e:67:
         4e:f4:b3:73:d6:93:0f:b6:83:79:82:d8:d0:b7:64:8d:1c:b5:
         81:4b:b3:65:0b:46:cd:c0:96:b0:2e:d6:63:6e:a6:d7:ed:c5:
         d2:8f:c7:7e:c1:9c:b8:0f:30:6f:87:e5:95:99:95:18:eb:8e:
         cc:be:71:e4:c4:50:4f:69:55:03:54:8d:67:7b:0a:3a:0a:2f:
         fa:2a:a2:32:85:35:ab:4f:0e:8f:99:20:cb:e0:7b:eb:9e:6f:
         61:69:7e:0b:fd:10:b2:7a:d2:8e:c2:94:fa:59:93:cd:a7:91:
         10:21:6a:0d:26:5d:a2:89:28:00:29:53:2c:08:91:01:3a:a0:
         00:ae:6d:9d:e1:b3:82:fc:ea:08:25:18:66:4c:65:12:34:36:
         7c:a7:e1:3f:73:4b:2e:2a:7e:b7:6d:92:f2:ab:9f:8c:d6:06:
         7b:13:f8:7b:9c:fc:20:38:71:53:a6:bc:85:3d:dd:3d:a8:5b:
         19:5e:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:12 2025 by rpki-client