This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          tFoelrMt7nvJuoUXBx91+nsPT0Tez4ZiqYdi9oArnHI=
Subject key identifier:   78:A8:D5:EB:84:0A:80:32:F5:3A:0C:34:68:8B:67:E1:9E:20:56:18
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019AF2E430915CF11EB78D18D9825112B69E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          1377
Signing time:             Sat 06 Dec 2025 09:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:32 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: 1o+KfaE0KFqXQcrizneY2S7f2TLbiQazjSy+oBOU76Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:30:91:5c:f1:1e:b7:8d:18:d9:82:51:12:b6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Dec  6 09:00:32 2025 GMT
            Not After : Dec  7 09:00:32 2025 GMT
        Subject: CN=78a8d5eb840a8032f53a0c34688b67e19e205618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:ff:b0:48:fc:a0:74:78:6c:36:5d:98:6a:
                    6d:e5:a8:fb:71:78:02:38:38:65:7c:dd:df:55:6a:
                    40:ab:cc:1a:ef:30:72:e9:35:e3:53:f8:30:35:c5:
                    1e:28:51:45:2c:e0:2e:52:69:4c:f2:c0:43:43:a3:
                    93:7e:b2:92:39:25:7e:50:0f:f4:a5:b8:dd:8c:3c:
                    45:c0:74:0f:1f:33:82:f0:57:d3:fc:a1:c9:31:42:
                    5d:c4:49:67:46:4e:d9:ea:8d:1e:6a:8f:ea:df:51:
                    63:08:4a:c4:19:52:e7:e3:80:7c:89:59:db:81:34:
                    70:65:b3:ab:f1:c3:8d:91:f7:ed:2e:3f:87:28:d7:
                    39:29:2d:38:ff:7a:66:b8:30:51:97:d9:aa:b7:ca:
                    5a:5a:39:a8:18:36:b3:9f:3c:8c:7e:89:64:21:99:
                    f8:d4:01:f9:f0:29:18:94:34:11:71:e3:54:47:87:
                    51:95:b1:d6:a8:df:38:94:fe:a2:c3:b3:5e:0e:4e:
                    da:59:b5:a6:84:16:e5:3e:d1:31:c9:06:27:47:71:
                    59:c9:05:d4:c4:fd:64:5b:14:4c:5a:2d:de:1d:0e:
                    8a:27:15:a1:43:78:ec:0f:b9:69:3a:df:c7:6c:0a:
                    7e:19:56:74:55:41:d3:1e:2d:b1:db:b5:93:f5:a4:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A8:D5:EB:84:0A:80:32:F5:3A:0C:34:68:8B:67:E1:9E:20:56:18
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:ec:6e:bc:97:59:08:7d:58:72:66:5e:16:53:2a:ab:1c:
         e3:5e:17:e5:96:ff:a0:34:8c:9f:61:bb:8a:0b:d7:6d:f4:44:
         9f:84:1b:47:d2:28:71:1e:0d:94:55:05:41:f2:46:9e:56:aa:
         ae:77:0a:05:3c:0f:73:e1:44:90:28:96:4f:dc:d1:6b:ad:90:
         e8:20:51:bf:cd:a6:45:f9:5e:51:5a:ed:51:57:b9:a4:94:dc:
         37:99:09:52:db:63:93:fa:8a:0c:a5:3c:b7:b3:bd:31:d3:41:
         57:75:4b:83:6c:58:6e:8a:42:04:9c:ff:c1:70:fa:a5:ee:9c:
         f1:f2:27:54:0c:a9:c3:cb:68:d6:9d:8b:6a:5d:90:4d:ce:c1:
         9b:56:4d:1b:39:af:f4:94:46:5c:c3:5b:b1:eb:6e:ed:c5:54:
         b5:c0:a9:21:6c:50:58:d2:a0:ea:4e:49:81:70:b3:04:63:d3:
         fc:94:e1:e7:66:ef:90:2a:ca:d8:b8:81:ab:35:0b:a1:37:8e:
         b7:a7:25:18:ef:1f:aa:95:b1:3c:fc:9b:5c:7c:a2:ed:21:60:
         56:74:d2:dc:fe:74:bf:a2:42:de:1a:b1:50:d8:2f:d7:e9:65:
         95:8b:da:de:f2:b7:46:66:91:92:28:98:00:34:b3:41:c6:cc:
         8c:7c:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:57:30 2025 by rpki-client