This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          NviD66X7MiI4JFZ4m+4hEUZckNevLbKiyXuTtjy1Cn8=
Subject key identifier:   C6:F2:33:89:EF:5A:7C:3B:D9:47:8B:92:05:06:AD:66:0B:84:3D:94
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       019AF12D66ED0F76E4A77D47F1A67B973AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          061B
Signing time:             Sat 06 Dec 2025 01:01:15 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:15 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:15 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: tqvj8EInccRDQ5SWndW1Pldf1UQgSE0Wx0nfXPRE5ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:66:ed:0f:76:e4:a7:7d:47:f1:a6:7b:97:3a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: Dec  6 01:01:15 2025 GMT
            Not After : Dec  7 01:01:15 2025 GMT
        Subject: CN=c6f23389ef5a7c3bd9478b920506ad660b843d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:53:90:aa:2c:f1:ee:2a:a3:e5:ec:b8:22:
                    3e:db:dd:1a:11:04:c5:11:ef:a5:3b:6b:69:8b:0f:
                    af:4a:b3:18:af:4a:57:8a:e0:78:df:d8:73:ae:f4:
                    0c:1d:b8:db:eb:30:5e:87:ed:61:b2:10:10:00:69:
                    a0:4b:44:df:44:0b:22:6f:3d:dd:fb:8e:56:26:97:
                    8c:cf:ac:23:2a:32:fc:c7:56:52:8a:97:fd:4d:bc:
                    9b:70:40:67:d7:42:75:ce:9c:ad:4d:76:ac:cd:56:
                    ee:6a:92:7d:49:e7:93:e6:bd:bf:7a:24:24:be:a0:
                    3f:6a:3d:7c:2d:b2:dd:fe:2e:16:e3:39:e7:e4:d6:
                    ed:5e:30:a2:e0:e2:74:c4:43:1f:dd:0d:8e:5e:08:
                    ec:f7:cb:67:b5:4c:e3:6d:e7:8c:de:99:a8:94:8a:
                    6b:ed:26:fa:07:6f:7f:62:17:5c:cf:38:59:c7:88:
                    d1:d6:84:a7:33:e3:a2:4c:07:47:74:6d:29:a1:70:
                    a7:b7:5a:6f:ff:c1:3c:6c:31:aa:9e:89:c5:52:66:
                    a1:0c:42:5d:15:e3:25:f1:d5:a0:e3:b7:4f:b8:13:
                    df:2a:d4:46:dd:f8:e5:7b:c7:50:18:dd:aa:14:b5:
                    55:a9:e5:f9:1f:a6:a8:d4:54:a1:c0:be:a0:af:fe:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:33:89:EF:5A:7C:3B:D9:47:8B:92:05:06:AD:66:0B:84:3D:94
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:4f:cd:9e:72:07:d4:a4:48:4d:96:2f:3f:dd:67:43:c1:
         93:f1:d4:c8:53:d1:e1:46:40:48:be:0f:0b:28:e3:a3:58:f1:
         4a:10:c7:6e:b5:33:73:f0:4f:f1:5a:b9:33:6a:f0:20:7e:e0:
         cb:e2:f2:bc:34:aa:46:74:92:33:bd:88:4b:41:91:d8:d7:4d:
         7e:4d:35:9d:6c:4a:73:b8:fe:94:75:5f:13:5c:d1:72:ba:b2:
         8b:06:c4:ed:f4:08:3f:5d:3c:36:fb:8b:0f:99:99:7a:29:04:
         85:d6:56:91:c2:42:4a:76:fb:06:2d:d2:8a:32:70:ce:2a:ab:
         b5:7f:5f:ad:df:34:1b:4b:2f:86:c5:c7:c5:ae:60:2e:d3:0d:
         f8:c4:1e:6b:c1:ee:05:a1:28:12:8a:25:69:1d:29:d0:dd:21:
         75:b5:10:de:66:36:53:97:ad:de:a6:54:c5:0e:aa:fb:3b:a7:
         60:a8:57:5d:53:2b:15:d0:e1:a6:bf:23:b3:68:85:f6:61:f1:
         c8:73:51:73:0e:a6:46:fd:69:74:0a:a6:79:93:6a:d0:a4:8a:
         81:12:7c:61:a1:ad:02:27:01:6d:d2:95:67:59:64:fd:fe:33:
         6e:ce:55:22:2d:84:10:fb:ff:41:19:c9:75:05:35:f5:6b:59:
         fe:ac:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:13:43 2025 by rpki-client