This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          37IE3+cihn9mWiupsDTwFZaU3cU3OwEKFxgqJCi7HQ4=
Subject key identifier:   5C:79:D7:40:F2:31:21:6F:36:C8:C2:7D:E8:9F:B9:BE:A7:90:AD:91
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       019AF2092BDEE651D9B1AB56DA4F463136F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          175F
Signing time:             Sat 06 Dec 2025 05:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:18 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: wbN7UPr/G9GNdS3BOUtD4zcOwEM0HUEcGGpxm54XyC0=)
                          2: bnk0ln2aj6MfWOT6o9kQMXhL3ow.roa (hash: nUC34YHIv92VX7i6tmE4A0fGDBK2kzWYfNC+d/UuSnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:2b:de:e6:51:d9:b1:ab:56:da:4f:46:31:36:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: Dec  6 05:01:18 2025 GMT
            Not After : Dec  7 05:01:18 2025 GMT
        Subject: CN=5c79d740f231216f36c8c27de89fb9bea790ad91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:3d:ce:ca:a8:47:a8:46:1b:56:a6:4f:b4:
                    f7:bd:38:ba:1b:d7:31:a4:ff:24:01:88:f0:5e:7a:
                    29:26:02:56:60:d9:ea:79:b9:6b:8b:26:0c:5b:70:
                    64:b1:72:90:eb:98:c6:fb:c1:97:82:5e:5c:88:87:
                    62:df:bb:16:21:f0:82:4d:e4:c6:c2:3e:a2:f6:79:
                    87:61:d7:30:e4:5a:f1:63:59:e7:fe:4b:01:be:37:
                    2f:19:92:d5:97:bf:b9:b7:27:ae:2f:ab:38:f4:67:
                    f6:dd:f3:fd:fd:25:48:b8:59:08:42:3e:67:f9:88:
                    bf:4b:af:ad:cc:23:06:cf:22:b3:fe:f0:de:10:4e:
                    d5:b4:6d:4f:6c:18:ac:b2:e4:5e:f1:a6:b2:9e:e4:
                    9a:b7:fa:99:7c:8c:77:cc:a4:63:35:5f:bb:4b:86:
                    d6:7c:3a:c4:a5:3f:d7:37:7d:f6:06:2a:f2:88:a8:
                    73:b2:5f:72:5b:e3:7c:27:d0:4a:04:97:0c:b6:73:
                    ea:d0:e9:f1:8a:f2:d7:9f:99:90:54:75:53:13:42:
                    bd:52:93:a1:cc:c3:43:45:d9:89:a2:dd:7c:e4:7a:
                    ce:ab:8b:62:13:d5:e1:0c:e0:94:4f:19:e8:96:02:
                    a9:91:ce:e4:a6:5c:4f:cd:b2:e5:5e:8d:cf:e2:da:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:79:D7:40:F2:31:21:6F:36:C8:C2:7D:E8:9F:B9:BE:A7:90:AD:91
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b1:ea:76:fc:8e:ab:ec:f7:3a:cb:41:b5:22:8d:3e:5e:83:
         8d:45:0e:ef:ae:16:ff:ed:a4:f6:9d:14:83:d5:cb:5a:1a:a0:
         6a:9e:54:00:a2:37:67:88:66:b0:6d:99:45:ca:8c:fe:7a:7e:
         1d:0f:95:43:97:2b:78:78:f5:2a:d6:65:76:06:96:10:68:84:
         4d:de:e1:0b:83:45:d8:80:a2:38:0d:45:cd:79:45:dc:fc:cf:
         77:be:5d:37:88:d5:78:8e:18:c9:87:4d:07:28:e7:9d:68:91:
         79:41:61:cc:ec:7f:30:ad:58:8b:e2:c7:b1:6a:22:5b:f0:00:
         21:56:df:30:4b:9c:aa:81:6f:fa:7c:cc:f4:6f:b1:50:6c:80:
         71:91:61:91:ed:b8:76:5e:ca:84:d6:7c:8a:c2:f9:a2:31:76:
         f6:3d:ce:1e:c1:63:d1:19:7b:59:6f:7d:fb:31:0e:d1:71:a1:
         3e:68:73:a3:ef:87:de:3c:0f:45:7c:47:fe:f8:dc:3e:82:dc:
         d8:05:18:ee:84:e8:57:28:4a:1f:5f:24:58:9a:cd:c1:8a:6a:
         56:19:16:89:45:80:79:26:ea:b0:be:39:04:56:d2:51:c0:51:
         09:e0:dd:91:72:1a:e1:92:be:f5:10:d9:56:a3:49:04:d7:d7:
         79:69:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:30 2025 by rpki-client