This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File:                     6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier:          jkQGrNLCX2kpbB6Ks0Z3eyuD9QhiEICs8/Jv3xZo2ZA=
Subject key identifier:   9F:16:8E:DE:78:0A:17:F0:B1:81:64:3D:51:D7:0A:80:18:CC:3B:8C
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer:       /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial:       019B533D380A2159B9FF830E3EB2D331E3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number:          0F0E
Signing time:             Thu 25 Dec 2025 02:01:19 +0000
Manifest this update:     Thu 25 Dec 2025 02:01:19 +0000
Manifest next update:     Fri 26 Dec 2025 02:01:19 +0000
Files and hashes:         1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: TIX/B26OZzUelmmvFQ7yJkZtCODL7KCirheapGgVr2U=)
                          2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:3d:38:0a:21:59:b9:ff:83:0e:3e:b2:d3:31:e3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
        Validity
            Not Before: Dec 25 02:01:19 2025 GMT
            Not After : Dec 26 02:01:19 2025 GMT
        Subject: CN=9f168ede780a17f0b181643d51d70a8018cc3b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:3f:cc:21:1a:69:e8:37:ee:87:22:85:2a:
                    d9:60:73:63:a1:c7:d5:50:fd:d0:98:cd:b8:51:c8:
                    37:80:ad:0d:a6:85:94:d5:ed:63:67:eb:0f:10:2c:
                    06:46:34:38:b0:14:eb:d1:0d:ce:2e:a8:6f:d6:24:
                    72:ef:f7:95:26:12:5d:1f:8f:b5:85:d2:f2:bd:da:
                    5a:23:c6:89:72:19:9c:90:0d:e7:9a:d3:eb:78:4e:
                    ce:5e:59:0f:ee:d7:30:91:b5:eb:72:a4:3c:5b:7e:
                    ff:d2:95:22:9d:1e:e9:78:b9:c1:6d:ee:92:93:4e:
                    43:45:3c:bb:92:3c:a2:6e:15:8e:8b:05:a4:cb:90:
                    0e:27:fa:8d:33:38:67:eb:54:ed:08:18:9b:e2:56:
                    db:86:97:6f:38:5a:84:bf:59:94:38:a2:d5:d7:94:
                    a0:ce:2d:b1:40:de:ee:22:8c:c2:53:71:b3:6a:a7:
                    c8:a4:20:18:84:db:47:56:c1:9f:a1:f7:a2:91:33:
                    c8:4a:19:08:66:c1:61:76:90:b5:0a:bb:c4:d1:6c:
                    e4:ca:87:97:39:9d:b8:ca:b4:57:cb:05:b0:23:50:
                    6e:1b:75:ac:c8:6d:99:35:16:94:11:84:c2:3e:50:
                    35:f2:6e:7e:99:33:1a:e4:53:b0:01:b2:21:bb:55:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:8E:DE:78:0A:17:F0:B1:81:64:3D:51:D7:0A:80:18:CC:3B:8C
            X509v3 Authority Key Identifier:
                keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:56:fe:ef:0b:ef:ce:a3:d1:32:1c:28:9e:3f:f6:91:89:7f:
         1c:0f:24:d6:fa:fa:e6:00:96:19:e1:cd:af:ee:4d:7b:f2:4c:
         c8:75:ad:44:99:31:79:3d:04:7c:4e:21:ac:e4:e8:2b:bd:c4:
         e8:14:2f:b8:ee:64:11:96:3a:83:4f:a8:65:37:f1:0d:f4:52:
         0a:f8:67:af:bd:d1:b5:cc:a4:e3:04:b6:96:c0:44:1d:7c:dc:
         db:d9:3f:31:d1:ac:53:aa:01:f8:33:0f:0a:ab:1f:79:1b:e1:
         ec:36:fb:dd:d1:b5:c9:14:76:b5:50:d3:30:73:ce:d3:be:8c:
         80:bb:0c:a6:59:6e:12:42:6b:f3:e0:32:33:79:a6:c1:bd:b1:
         3e:76:20:40:d9:e3:29:9b:10:7b:2f:40:1f:0b:f2:06:48:cf:
         28:22:50:52:b6:be:dd:6a:72:a0:1f:11:c0:21:0d:10:ba:c0:
         87:4b:db:a8:59:66:1e:4d:7b:60:12:71:29:ad:e0:ee:80:48:
         cb:82:57:e4:5f:11:02:88:f2:e1:4d:c5:98:99:43:37:46:ba:
         77:c7:63:7e:31:49:92:f2:86:db:39:45:e1:7c:35:53:de:20:
         16:72:70:1d:44:c5:b6:8d:17:58:d2:e1:c8:93:3e:b8:64:66:
         b0:5f:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:27:19 2025 by rpki-client