This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
File:                     6diA6IcHf62Ct0yZgBD6myU-Dqg.mft (raw, json)
Hash identifier:          DY+d4gcYcKl1lsWAbC8ds5PpkCQX+unAhcZSb8H8bmU=
Subject key identifier:   E0:92:4A:40:25:3F:3A:43:36:5B:FD:C0:89:5C:9F:C1:80:75:FB:29
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Certificate issuer:       /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial:       019AF209A670470D0EE1742AE53AF6E02205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 05:01:49 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:49 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:49 +0000
Files and hashes:         1: 6diA6IcHf62Ct0yZgBD6myU-Dqg.crl (hash: 5EVWnJC63sbLF97ENRCYr/+GiP8kOOOiMCDvUTDMtf0=)
                          2: MAF_Elgy9u87cVsZVUNNm5Bb_UE.roa (hash: OX4gvHHnab+S9t+kA6ofZcqN5QU8A+hvwcM1NQu21jI=)
                          3: hbhPN4GRWF1Kh2C_ZGs02wMD7Rw.roa (hash: zbvVnLL4EUKhuAlyrvHCZpnuafPuDIGGmDdwOuvfDX8=)
                          4: zuxfhazkw5A2wUx6_S2GEVHOFH0.roa (hash: 2S2LWvnGAr/ZohzIcOjiYOYePYl9ZaqVuuPNKMqicns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:a6:70:47:0d:0e:e1:74:2a:e5:3a:f6:e0:22:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
        Validity
            Not Before: Dec  6 05:01:49 2025 GMT
            Not After : Dec  7 05:01:49 2025 GMT
        Subject: CN=e0924a40253f3a43365bfdc0895c9fc18075fb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:a5:f7:ad:18:7d:5c:03:7d:1e:fa:66:f2:
                    94:74:d7:c7:fc:1d:ee:4b:0a:8d:7d:61:49:02:64:
                    37:d0:b8:bd:e2:06:24:3d:57:36:71:75:6e:24:b0:
                    1a:eb:49:79:d8:7c:b0:14:0f:b6:69:a4:0a:3b:4c:
                    21:e2:3a:88:92:02:11:fc:e5:c0:89:c1:26:59:a5:
                    41:8a:c7:2a:eb:bc:17:c2:02:c4:db:54:06:f7:49:
                    7b:6d:31:e5:b1:d4:a9:80:01:6d:c3:84:3e:71:e3:
                    aa:40:34:40:1c:9a:dd:6e:02:d6:eb:e5:ff:9b:08:
                    3c:b1:41:d6:94:1a:99:dd:b7:ab:85:41:31:bc:9f:
                    b5:46:4f:9c:8f:b6:f5:89:30:1f:49:92:ba:92:39:
                    1a:14:03:8c:3b:0a:b9:6b:ea:45:62:58:83:07:c4:
                    ba:f3:39:35:ec:02:30:bd:6f:c5:b6:9e:dc:26:6f:
                    97:1a:1f:8a:3c:42:c0:89:07:57:fb:25:6e:47:e3:
                    3f:cb:2a:c0:3a:84:7d:fb:7a:2e:59:51:71:41:20:
                    d8:f1:aa:6d:84:2b:a5:af:2e:d8:40:90:8e:e5:06:
                    51:d1:5b:48:69:2b:be:03:d2:df:33:a9:09:02:25:
                    71:24:b0:f1:57:fe:17:a6:b9:22:d4:fc:82:7b:a0:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:4A:40:25:3F:3A:43:36:5B:FD:C0:89:5C:9F:C1:80:75:FB:29
            X509v3 Authority Key Identifier:
                keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:4e:77:fa:ff:2f:c1:55:36:2c:f2:a7:fc:0a:1f:13:ef:
         2d:71:2b:da:0d:6a:ff:bf:c5:99:09:9b:4a:d7:ea:fa:9d:d6:
         5f:81:1c:bc:3b:e6:e8:90:84:81:0b:cb:2a:15:83:0f:a7:bd:
         cc:94:b9:5d:ca:23:9c:97:ce:db:d3:b6:b7:77:27:cb:2e:d8:
         13:07:f2:ac:fb:6a:b5:74:f0:2c:d0:b7:87:32:58:a3:f7:1e:
         75:d6:cd:b3:a6:77:ac:26:e1:09:e6:2f:17:d5:1e:52:d5:03:
         f8:a0:a7:15:80:35:c6:58:b9:a3:8c:e3:a2:42:88:90:bc:90:
         3a:26:e4:6d:44:20:17:9d:f9:5f:7b:3c:65:09:f9:9d:5e:67:
         22:64:c4:95:c7:29:c9:f3:59:11:30:46:e1:70:82:3b:83:ba:
         6f:7c:14:93:92:21:47:7e:a5:5a:eb:9c:e8:14:63:4f:92:23:
         5b:e1:4e:54:65:bb:dd:35:03:60:20:4a:26:fc:7e:be:38:03:
         1a:22:98:bb:e7:ce:a2:f6:fa:7c:f9:00:64:ef:77:f0:35:d3:
         21:97:a9:da:c2:34:44:6d:29:64:a2:9d:a8:95:9d:7b:aa:d8:
         79:2c:8a:a0:00:d0:e8:5b:a7:a4:26:b8:1d:01:63:87:cd:98:
         d5:d0:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:55 2025 by rpki-client