This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
File:                     6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft (raw, json)
Hash identifier:          vwCV3+UPC4sdvNd836m5+XpDqjnwgJTXSVrDscbpuZ0=
Subject key identifier:   ED:D3:47:01:44:AB:C6:43:D4:98:28:85:83:C2:EE:DE:80:62:91:C2
Authority key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
Certificate issuer:       /CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Certificate serial:       019B3FB6440A0471051FADEDBD646FB7BC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
Manifest number:          1789
Signing time:             Sun 21 Dec 2025 07:01:07 +0000
Manifest this update:     Sun 21 Dec 2025 07:01:07 +0000
Manifest next update:     Mon 22 Dec 2025 07:01:07 +0000
Files and hashes:         1: 6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl (hash: m3JLeKb1a/3zreoSKuuli2GmO1js9Sh0tTH1c/ZffR4=)
                          2: hOUxeyZ4GUGm-ViSGta_EVCSneY.roa (hash: qqJoiI/uI9+nuUNJ0WHcG5fxVsdVi3S2HfiMZR4B1Xg=)
                          3: vhuqt87dQlwpLm6mImrsEtoMnS0.roa (hash: OYcjE2mSIdir4/5GLlaTPE0qszgr/jJDU6iPw1A8rm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:b6:44:0a:04:71:05:1f:ad:ed:bd:64:6f:b7:bc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
        Validity
            Not Before: Dec 21 07:01:07 2025 GMT
            Not After : Dec 22 07:01:07 2025 GMT
        Subject: CN=edd3470144abc643d498288583c2eede806291c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:7e:d4:ff:01:da:39:5c:08:d4:8b:1a:96:
                    32:ac:bb:51:db:72:5c:51:3f:8f:9a:5e:82:a6:72:
                    a0:07:60:2e:c7:fa:58:92:7b:0b:35:87:bf:15:7e:
                    5b:da:f8:ef:cf:a9:58:31:eb:66:4c:75:34:39:b7:
                    f7:64:37:41:01:45:ac:e4:25:20:04:5f:c8:46:ff:
                    92:90:6d:e9:3f:24:9a:ed:0a:e6:a4:2e:be:8e:17:
                    99:c3:5b:63:a8:93:73:e3:0d:23:39:8a:26:43:20:
                    72:3f:d5:e1:c0:31:55:79:84:8d:8c:76:6a:a5:b7:
                    4b:bb:cb:48:d7:b2:b6:4d:5a:74:38:d3:07:b3:75:
                    23:81:47:f9:c1:f0:db:74:ba:c4:47:37:7d:e7:39:
                    b3:0d:83:14:e4:72:51:51:e2:03:24:86:16:d1:07:
                    1f:3d:3a:71:35:85:91:da:17:5d:56:30:1c:15:d5:
                    2b:6d:67:da:67:f0:ac:6a:9f:32:15:dc:23:29:f3:
                    2c:35:46:e3:15:8f:66:0f:15:a9:3b:e0:81:02:bc:
                    bc:d3:55:fe:c5:41:f5:98:3a:3a:a9:fa:f6:32:5a:
                    63:0f:c8:b2:8a:04:2d:b8:9f:4c:c9:0c:3f:36:de:
                    21:04:f9:a8:c0:72:e8:62:2d:8d:89:5f:a5:7b:dd:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D3:47:01:44:AB:C6:43:D4:98:28:85:83:C2:EE:DE:80:62:91:C2
            X509v3 Authority Key Identifier:
                keyid:E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:34:b5:b7:90:e8:3e:df:d1:f3:1a:fe:c7:15:fd:c4:61:0c:
         99:8e:8d:ba:30:9e:40:eb:21:a5:00:3e:98:d0:82:1a:e5:4e:
         c5:2b:81:9d:a7:f7:eb:78:73:a4:04:9e:83:5a:a3:76:93:f1:
         cd:fa:d0:8f:db:9f:dc:e8:11:34:ba:e7:40:21:22:22:20:44:
         62:9f:83:68:91:55:5f:ee:bc:8e:45:3a:eb:2a:cc:bc:50:f1:
         3e:56:7e:b8:d1:d9:ac:93:d4:21:25:9e:21:b4:06:07:26:ef:
         ae:3d:90:eb:73:86:ec:7d:74:40:b4:a4:88:63:29:56:0a:22:
         6e:ea:6f:5b:b7:2a:28:4d:ee:1a:0b:04:76:55:2b:43:4f:40:
         99:6a:1b:bb:16:1d:ca:9c:90:bb:70:c3:4e:2c:d4:62:58:a7:
         f0:78:88:41:05:a4:ad:6c:90:24:c2:2a:83:03:b8:c4:de:6e:
         c4:71:1d:3c:25:24:4d:5c:40:73:e7:23:8e:73:a1:b1:c7:5c:
         71:dd:51:01:e7:f5:68:b2:0a:1f:3c:b3:42:26:4f:0e:fe:fd:
         2a:45:55:83:ab:5c:01:da:16:61:dd:9f:6b:6b:06:98:e5:f7:
         be:29:10:af:a7:f7:22:3a:49:f6:fe:5b:36:68:b6:b6:c5:63:
         e3:61:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:42:01 2025 by rpki-client