This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
File:                     6eWwFOVpGG-4SiAklUzMyckbHj8.mft (raw, json)
Hash identifier:          u7fzmYVfFgQeJfw46T9ToTGALi81mFvguMFnIqgRais=
Subject key identifier:   DC:37:65:69:95:29:4D:72:F5:1A:6A:BA:E8:17:0F:09:D8:95:25:19
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Certificate issuer:       /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial:       019B4F29201D6B0938CBF57CB6817A4FD567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
Manifest number:          17AC
Signing time:             Wed 24 Dec 2025 07:00:53 +0000
Manifest this update:     Wed 24 Dec 2025 07:00:53 +0000
Manifest next update:     Thu 25 Dec 2025 07:00:53 +0000
Files and hashes:         1: 6eWwFOVpGG-4SiAklUzMyckbHj8.crl (hash: R5KZPJ41VVV5uToQYmarJ6vghNimdX8lwar+DykkVsY=)
                          2: IljESqcp7TKATE6l4ji1F86mvCw.roa (hash: laXPoIjJO3FRK8WP6Gx6U9UQM88anXeR9CUYfdnLKCM=)
                          3: OAvO94RPxpfjbpElzF3WC3cYyd8.roa (hash: qNMDfnWjPw8LtLYzmMD++L6T1Klk5i6kY22iXg/Gb4c=)
                          4: tDQpfMPQ62TUhzzN7eQO6cYHshw.roa (hash: J3cKO6Wf/6hxB4gMHmpPso+VbrUvrPBulC0sm0JJPXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:29:20:1d:6b:09:38:cb:f5:7c:b6:81:7a:4f:d5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
        Validity
            Not Before: Dec 24 07:00:53 2025 GMT
            Not After : Dec 25 07:00:53 2025 GMT
        Subject: CN=dc37656995294d72f51a6abae8170f09d8952519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:5e:fc:77:f8:3b:80:ac:88:3f:af:9f:89:
                    24:8a:1b:31:4e:e9:85:f8:be:91:ef:76:e7:3d:41:
                    9d:e9:bf:fd:b3:1e:97:9a:99:fc:8b:bd:e1:ba:70:
                    b9:a8:cd:14:6f:3a:3b:34:97:14:67:00:13:84:3e:
                    78:d6:22:a8:ca:4e:3b:24:56:ef:2a:dd:fc:10:a3:
                    18:0b:76:3c:83:29:61:01:a4:c1:7b:5f:36:6c:be:
                    5f:ab:b6:3a:52:62:40:a8:67:f4:da:b8:c0:57:4f:
                    3a:61:a8:37:c1:38:93:ec:76:53:34:ee:74:f1:fb:
                    f8:11:08:d3:3b:dc:33:02:a8:dc:a4:55:39:93:f0:
                    2e:ca:3e:7d:27:06:b7:34:6a:81:a8:a2:4b:fb:10:
                    9a:2e:e9:0e:c1:77:62:b1:c1:e6:4e:fa:c6:03:c5:
                    3e:b3:35:b7:01:c3:57:8c:7b:75:e4:49:a6:a6:ff:
                    68:c9:3a:30:ee:88:58:00:28:b5:46:76:9b:84:f3:
                    7d:89:70:60:f6:37:bf:bb:22:d0:4d:62:8a:90:dd:
                    b8:ea:6f:5d:1d:21:32:60:00:48:0b:b0:77:7f:55:
                    28:a5:60:70:ad:cd:56:02:d4:c6:b4:58:f4:cb:aa:
                    2f:39:bb:a5:63:c9:a3:a9:65:ad:29:25:0c:c1:4e:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:65:69:95:29:4D:72:F5:1A:6A:BA:E8:17:0F:09:D8:95:25:19
            X509v3 Authority Key Identifier:
                keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:e6:89:88:01:65:fc:01:05:7a:b4:6a:c2:ba:e4:6a:ad:
         1b:5b:77:82:b2:5e:20:a3:d2:0d:ad:a9:3f:93:0c:f3:f4:17:
         f9:bd:a4:e2:6b:c6:88:14:59:ca:ad:bf:e6:fc:dd:14:c3:da:
         bf:a0:b4:e1:1e:47:07:ef:f4:a0:06:12:68:06:d3:56:bb:32:
         fb:f7:43:e3:32:e5:9d:4b:f5:8a:92:1a:cc:56:a6:3c:a2:b7:
         53:a9:63:b5:da:9f:cf:30:19:0e:f9:10:4a:c7:bb:d7:60:22:
         3e:25:06:25:b4:f5:91:75:85:09:37:b9:4e:ec:3e:57:89:9e:
         2e:a0:30:e4:ba:08:23:97:11:f0:85:2d:c3:f2:0b:28:a8:8b:
         60:77:c0:de:d1:71:25:0e:50:45:70:29:20:80:e5:7c:7e:2e:
         e2:69:12:77:02:e2:e0:a6:c3:9c:12:33:59:4f:bc:c3:92:74:
         2e:6a:87:35:14:ad:6e:7f:d7:ed:78:7f:0f:1f:cf:41:6d:33:
         be:a9:fd:a4:d4:d4:19:6b:29:35:a8:87:3e:10:de:4b:c4:95:
         00:11:ae:c1:ba:bb:72:1b:70:70:85:6f:75:96:e1:0d:25:0c:
         03:12:8b:00:19:b8:48:21:ab:77:46:39:06:1c:7b:76:f4:5e:
         e0:03:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:46:19 2025 by rpki-client