This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          M53mh9pZZjddVQnv4X9AEDUtQzaYPnjvS2pBWb+1R50=
Subject key identifier:   48:11:67:89:F5:E2:92:C6:F4:1F:D5:28:F4:E1:F4:75:69:04:9D:60
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019AF19B2C3A80B01FDC9C26A03F8E8CA498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          176D
Signing time:             Sat 06 Dec 2025 03:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:09 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          4: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          5: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          6: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: cc00PEmo1y4HFkqLMrWckVB7RTuKV9DVkGkwpMEjDew=)
                          7: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:2c:3a:80:b0:1f:dc:9c:26:a0:3f:8e:8c:a4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Dec  6 03:01:09 2025 GMT
            Not After : Dec  7 03:01:09 2025 GMT
        Subject: CN=48116789f5e292c6f41fd528f4e1f47569049d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0c:af:e8:c3:56:10:a9:c6:4d:d7:3b:82:30:
                    d8:db:6f:02:01:f0:a1:58:21:07:18:3d:11:cc:c0:
                    38:f9:8a:b6:04:e3:32:46:a6:6c:c2:e1:1c:c5:1c:
                    d0:2a:c1:a6:ca:4a:a4:cb:a8:d6:12:53:06:2f:1f:
                    43:99:a4:dc:0d:22:64:9f:78:40:ab:11:75:fd:89:
                    71:fc:de:c2:36:36:ad:5b:61:83:41:df:43:8e:10:
                    bc:35:99:f0:9d:cc:8e:fe:fe:cd:ed:4c:5d:fc:03:
                    45:5c:a3:1a:d2:7f:e7:42:d1:92:01:c9:fd:88:16:
                    cc:0b:1e:98:a5:9d:54:ef:08:60:bd:63:9f:73:89:
                    f0:89:73:ec:cc:99:55:c0:90:6e:7f:39:b9:cd:a7:
                    f6:38:f3:0c:fc:4e:a5:98:c8:ca:35:77:b2:bd:52:
                    90:26:59:13:84:6f:3d:bf:83:e7:4f:5f:8a:e8:4d:
                    66:a0:c1:14:12:eb:c2:cf:f7:38:05:ac:cb:48:fa:
                    29:8e:07:39:83:08:f3:fa:a1:c7:55:81:56:3e:71:
                    b2:c4:cf:ab:42:09:24:e3:a5:bd:a3:17:55:01:ba:
                    a0:a7:c1:98:26:c9:09:a3:df:dc:e6:2b:6f:7b:53:
                    c5:31:05:e3:55:d5:fb:11:17:43:7e:e0:ba:44:f1:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:67:89:F5:E2:92:C6:F4:1F:D5:28:F4:E1:F4:75:69:04:9D:60
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:30:ad:47:e2:21:42:67:41:1d:08:0c:91:6b:d1:6e:5b:db:
         31:04:1d:88:ec:9d:f7:a9:98:2b:5d:ea:c1:eb:d4:d6:56:b2:
         8d:5b:14:ef:dc:95:8d:6a:c7:e4:89:20:38:6a:9f:4d:d2:41:
         b5:1b:13:6f:38:ef:94:f4:37:bd:f5:e9:43:cf:a3:47:a5:8a:
         ab:e6:f4:a4:8f:a9:b2:fa:0d:5d:38:bc:b8:18:e3:bd:f0:97:
         5c:05:6f:8d:85:59:14:fb:d5:1d:f6:27:10:87:ce:f5:54:79:
         ce:80:67:d3:43:16:c9:df:52:cc:b8:1a:1b:74:7e:10:0b:f6:
         ca:47:7c:1f:eb:12:9a:62:50:01:53:2f:61:a9:fd:00:8e:70:
         c0:5a:c5:8d:37:09:0c:7c:8c:54:48:3b:88:5e:b9:f7:e8:47:
         73:1c:01:ae:25:f5:0e:fc:cf:cf:b1:e4:da:67:11:ef:be:3d:
         37:14:be:8c:8a:08:c9:38:9e:b9:09:f4:37:1d:d7:92:b4:86:
         ad:c3:15:fc:b1:0c:62:49:55:0b:b2:3f:b8:2d:60:87:4b:cb:
         a6:a8:9d:58:31:f3:c1:9c:3f:51:f1:bf:35:2f:ab:90:46:57:
         41:2f:b2:40:47:35:63:59:45:e3:40:f3:0f:de:83:16:3b:ac:
         dd:d3:c7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:39 2025 by rpki-client