This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          wG4rIDxcj0uffwloOp55anNJIZoUu5s0TfZLGow89aU=
Subject key identifier:   67:D6:77:81:EB:A7:E8:8A:07:B6:05:24:A0:EA:7C:92:8E:AE:76:E7
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019B5D89ED1814C52E6C8427DFC26450574F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          1798
Signing time:             Sat 27 Dec 2025 02:01:18 +0000
Manifest this update:     Sat 27 Dec 2025 02:01:18 +0000
Manifest next update:     Sun 28 Dec 2025 02:01:18 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: TbQRAUwdZGnwXlOKQ7StUeGxuH+hXPU8Xwt/ZsZWWVI=)
                          2: EmhpSnj7iLgC2d70P5qJqnThSpI.roa (hash: CX+fHnUOAwNmcRoAT7+5woe0kC9yhVErQMUO/t7HIGw=)
                          3: G5KEY8PdolTgfVn5492nGIzQ_a0.roa (hash: 76KL/k0StmhsymXof8zQcgzmSlTCz8pQoee6lM9qOu4=)
                          4: VtgYimUcjc2XeGilZ2hUu6vRmiU.roa (hash: +YSUo5c/6CRbW0eW7UeYX8AGd5VxClS9jGWd6D5ZdZY=)
                          5: go_3y1bgA8-3JogrkPCJfivjGfI.roa (hash: sD0zwjqxa6jKAzdmYzjIQYsG/miMaGsajOJ2iWvOUZg=)
                          6: xD2UD_5NoLtd0VK4LndF2pETSBk.roa (hash: VjvfcStj2ykMEo8Ecd88j1JXnEvqtzpee6oBEje6v9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:89:ed:18:14:c5:2e:6c:84:27:df:c2:64:50:57:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Dec 27 02:01:18 2025 GMT
            Not After : Dec 28 02:01:18 2025 GMT
        Subject: CN=67d67781eba7e88a07b60524a0ea7c928eae76e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:a3:0e:2b:32:ad:8d:1b:e5:e5:8a:0a:98:
                    75:0e:d3:68:c4:9c:f1:e1:24:6f:79:b9:73:da:38:
                    06:43:65:5d:e6:a6:60:ba:55:7d:48:03:98:26:4b:
                    8f:9f:fa:ca:6e:8c:9f:e7:d1:47:2e:60:7d:63:8e:
                    56:e5:38:5e:00:0f:e7:c2:3c:95:16:7c:17:05:28:
                    c0:d9:03:53:b5:65:75:a8:54:64:ac:10:e7:6b:5c:
                    ed:02:53:6f:59:cc:13:b7:f3:e8:39:79:c8:b5:1a:
                    a4:ca:86:02:9c:d4:50:a2:e0:22:d5:13:f5:16:ce:
                    cf:be:0b:57:d9:97:3f:08:32:d7:3d:ff:91:87:d1:
                    a8:e6:ea:15:1c:26:52:81:e0:e2:c5:38:5c:bc:0f:
                    42:20:c8:ef:b4:b2:1e:7a:41:c4:bb:84:cc:c8:77:
                    08:a4:b7:ac:94:b8:45:82:dd:d2:16:6b:dc:56:bd:
                    2b:f7:91:2f:fa:08:6d:27:2e:8b:c9:58:a3:63:d8:
                    8c:a2:35:4a:ac:ac:aa:c9:a9:8d:16:9a:6c:91:14:
                    a9:56:3a:cc:e0:c8:6a:3a:0a:f2:94:1c:ee:61:6b:
                    d3:7a:72:c3:7b:74:a8:50:cf:f8:10:de:a4:51:bf:
                    58:23:25:db:e1:4f:05:31:46:a9:8b:ab:1a:e3:69:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D6:77:81:EB:A7:E8:8A:07:B6:05:24:A0:EA:7C:92:8E:AE:76:E7
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5a:cd:33:68:7b:4d:b1:3f:77:7e:a1:39:74:a9:b0:c0:d5:
         3c:3d:dc:7f:a0:7c:16:45:6f:81:ef:12:c1:a6:dd:86:41:05:
         15:4c:f4:57:6a:65:27:9d:08:36:cd:b5:73:fb:b3:21:28:08:
         8b:bb:ef:ba:5a:24:14:94:dd:47:28:5c:85:13:dd:ac:72:76:
         c3:99:3c:91:19:e1:27:58:41:be:f0:ec:c8:a3:51:5f:8b:e5:
         71:72:74:64:ff:00:b5:ff:fc:20:29:58:20:65:9c:93:77:9c:
         08:28:8d:3a:99:b8:32:9d:86:89:b9:38:d4:ff:72:b4:48:d1:
         8d:5c:c7:4a:96:16:30:b8:3c:98:27:f0:24:26:71:05:c9:00:
         be:3c:94:1e:28:13:58:93:28:ff:06:8b:ff:ec:00:50:62:67:
         21:15:3f:5e:34:84:1c:b5:dd:55:9f:a9:55:d7:6a:47:4c:c3:
         6a:ba:22:8b:17:ea:43:6b:6e:c4:87:77:3d:4e:db:dc:f9:0b:
         9f:06:59:a4:54:26:e9:f8:7c:b7:39:e3:38:8b:22:fb:a4:f6:
         74:85:c8:9e:34:7e:b6:c9:79:83:f1:cf:52:aa:78:e2:b1:63:
         f5:9b:20:0f:d5:95:81:e3:bc:aa:7e:50:f7:c5:fe:8b:ef:dc:
         5a:00:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:03:33 2025 by rpki-client