This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          7lEPuoCyckdOUmM3r5KtB/WQ0sGOPycxtt2fkx3q61U=
Subject key identifier:   51:B3:F7:A5:67:E6:AF:49:49:B3:A8:F7:E6:6C:69:91:72:70:94:BB
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       019B33441E8821ED362BB11EFADE72F21F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          11F9
Signing time:             Thu 18 Dec 2025 21:01:00 +0000
Manifest this update:     Thu 18 Dec 2025 21:01:00 +0000
Manifest next update:     Fri 19 Dec 2025 21:01:00 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: n+JA41vH6hUh29CfRHUWGzLp+jp25G1anzlw2OXNmGM=)
                          2: syj71zZ8MwWTuavJrSv9ey-GiNY.roa (hash: OwP0pURWBASyJxlo+FTFHbY+Smo6gzpAgQ+Dz8xZ608=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:44:1e:88:21:ed:36:2b:b1:1e:fa:de:72:f2:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Dec 18 21:01:00 2025 GMT
            Not After : Dec 19 21:01:00 2025 GMT
        Subject: CN=51b3f7a567e6af4949b3a8f7e66c6991727094bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:82:7e:cb:b4:71:7f:3a:2a:f1:57:d5:96:
                    17:b7:f5:92:5b:0a:e8:45:d0:b3:e0:ad:5a:b7:73:
                    31:de:3f:61:66:6e:d0:9c:00:2d:56:34:85:df:52:
                    dd:d4:5b:67:ad:27:cf:47:d4:69:d9:ff:cc:4a:7c:
                    90:4d:1b:78:ec:13:74:75:c9:bf:9d:2e:8f:e3:68:
                    b8:21:a1:ef:d2:3c:04:18:13:2c:50:13:1c:43:19:
                    4e:47:21:2c:48:f6:1b:bb:55:65:ac:6b:c5:8f:a0:
                    dd:92:7b:6c:38:b6:ca:04:63:64:5a:b4:15:a1:e5:
                    4e:2a:03:6e:13:ed:85:d7:63:b8:7e:91:81:42:d5:
                    ff:01:e9:35:0e:26:3b:0f:f5:38:4f:e1:61:0e:fe:
                    fc:83:1c:92:bf:7c:ef:39:93:ef:d4:ba:51:6c:4c:
                    72:bf:9e:8b:3e:10:a7:fc:cc:2e:33:cd:22:e1:1d:
                    63:1c:33:30:f9:7d:2c:4c:45:48:e8:62:cc:70:c7:
                    7c:b8:94:7f:6a:1d:e6:35:4b:0f:2d:57:d1:0c:8f:
                    3f:40:14:d5:65:07:0d:e9:3e:17:7e:0a:e3:38:a2:
                    b0:23:6b:56:fa:e2:5c:81:8d:07:a1:63:d8:38:04:
                    fb:40:13:cf:f0:b9:7d:6d:66:03:6d:b0:b3:d9:0a:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:F7:A5:67:E6:AF:49:49:B3:A8:F7:E6:6C:69:91:72:70:94:BB
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:96:35:6d:4b:7d:cf:ed:a5:3d:91:6a:13:b3:5a:8b:35:
         60:e9:2b:ed:2d:8a:4d:e0:3e:23:2c:76:f4:73:c7:47:5b:1b:
         34:7a:77:45:4d:df:33:5f:8d:d2:e3:3f:16:27:52:a4:4b:dc:
         a5:db:50:23:00:e3:9c:04:94:1e:87:8e:94:91:a9:7e:e7:ef:
         d2:ed:53:e6:6d:ca:4d:81:74:68:c9:4b:c4:5d:7d:07:5a:7b:
         78:ca:b1:ba:1c:d1:b0:0b:1b:de:16:f9:e9:c3:e0:2a:b7:00:
         66:b3:e7:0f:f6:5c:36:51:04:5a:2c:e8:49:34:bf:e0:2a:83:
         01:17:ed:06:20:a0:db:b8:c6:97:27:ea:a5:8b:cf:38:88:73:
         90:1d:78:cf:06:fb:dc:d3:0d:6b:74:19:b9:d0:44:81:c4:c5:
         99:14:4e:b6:27:e2:45:43:f6:c5:6c:2f:4c:79:4d:05:21:55:
         e6:2c:ee:f2:17:0c:62:ae:f6:b8:26:7a:d6:3c:6f:60:ea:f5:
         32:7d:2e:c6:22:b3:ff:cf:19:34:f2:7b:7f:c7:0a:c4:0f:ab:
         b4:c1:fc:01:7e:35:81:5d:7b:2f:c2:43:a9:74:3c:2e:54:0f:
         c5:9e:c5:3b:c1:8d:95:a0:98:d6:8d:24:71:9e:25:1b:ff:12:
         e3:86:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:24:26 2025 by rpki-client