This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          ecJXqY4MXovCyuRxXTtTS1CaO3Ev5OxHyucpfxZDHYA=
Subject key identifier:   F0:DA:A1:1B:63:3E:0F:89:C7:39:67:C3:21:3C:BC:33:51:3A:65:A5
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       019B4926CCE8F0FF668063679F71CFD97E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          1792
Signing time:             Tue 23 Dec 2025 03:00:38 +0000
Manifest this update:     Tue 23 Dec 2025 03:00:38 +0000
Manifest next update:     Wed 24 Dec 2025 03:00:38 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: n05Xap3XVjq5Q4r4+JD4R2tBBYiu1nh3ORmmr24P+MI=)
                          2: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
                          3: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:49:26:cc:e8:f0:ff:66:80:63:67:9f:71:cf:d9:7e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Dec 23 03:00:38 2025 GMT
            Not After : Dec 24 03:00:38 2025 GMT
        Subject: CN=f0daa11b633e0f89c73967c3213cbc33513a65a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:55:3a:bf:a0:69:fa:f9:ea:33:69:6d:7c:
                    f7:22:1e:51:bf:d5:e3:63:cb:92:f6:c7:1a:f0:ae:
                    02:af:60:b7:96:50:84:d8:f8:a6:20:90:f2:ad:38:
                    5c:b6:a1:be:99:d8:4a:29:04:07:e9:b4:84:ea:60:
                    2c:0d:bb:be:80:17:85:52:3b:92:ac:10:f3:4a:11:
                    65:80:ae:cc:4d:ab:62:5d:96:56:0d:05:34:f0:c8:
                    6f:48:4a:bb:92:00:06:c6:2b:a7:62:67:a2:9c:c8:
                    df:f7:77:63:e2:82:0c:13:e8:97:f5:6b:6d:b7:0e:
                    70:c4:6f:e7:73:4f:c4:14:a1:5c:10:9b:dc:11:9e:
                    92:a6:b7:ec:1a:bc:bf:49:d2:a3:85:16:24:76:69:
                    66:c3:35:88:32:20:a2:dd:e4:a8:bf:21:76:a1:36:
                    22:49:fd:12:84:30:ac:68:f4:6d:91:15:fc:a3:8d:
                    70:8e:90:30:5e:f2:43:3f:37:d2:f4:1d:fa:1a:e2:
                    e1:9d:17:4c:da:52:5e:8c:3c:ac:eb:fa:9f:0a:6f:
                    41:d6:81:f5:55:bc:4f:da:cc:ee:dd:a1:31:29:b4:
                    be:56:b5:22:1b:e7:d0:14:69:04:7a:d7:5e:ca:95:
                    49:b0:50:cd:ae:9e:37:5d:27:f7:f5:67:4e:5d:9a:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:A1:1B:63:3E:0F:89:C7:39:67:C3:21:3C:BC:33:51:3A:65:A5
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:8f:36:70:dd:7b:bc:25:2e:bc:44:16:b2:26:30:a8:ae:
         20:c6:e7:72:50:37:1c:0f:44:2b:25:70:25:67:7d:9a:31:27:
         48:1a:52:94:4a:c3:c2:ea:80:86:1d:fd:57:f8:cb:fe:9f:84:
         a8:79:11:6d:5e:17:9c:7f:b8:5f:d6:7b:40:5a:a1:94:cc:5d:
         e6:6b:c2:d8:c2:fb:ca:a8:4e:2c:8f:91:38:51:f9:93:a2:b9:
         71:e1:64:52:ab:af:33:e8:f0:62:6c:4b:32:27:db:43:70:46:
         0d:dc:ba:89:29:eb:99:57:01:b3:81:a7:6c:b7:ae:14:3a:bd:
         ea:3f:a0:15:eb:cd:f3:9f:64:19:df:9e:9c:d9:a3:bf:a1:8c:
         23:71:33:7f:7d:47:cc:2d:4a:ca:44:4a:93:02:7a:ac:f0:94:
         39:41:e6:ad:35:32:68:a4:66:a4:6c:36:f3:e5:92:fb:a0:7a:
         c4:46:b9:cf:78:1b:86:84:b7:33:bd:72:df:19:13:d9:52:15:
         07:29:5c:18:43:91:dd:a2:86:cd:8c:a1:d1:20:22:6e:ba:9e:
         cf:8f:5c:76:78:0c:d1:e1:e4:e3:ee:1c:92:ba:ca:a9:8d:a4:
         b7:bd:67:72:64:02:3a:a9:6f:d4:7c:83:1e:d9:6b:98:2e:32:
         94:bb:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:38:56 2025 by rpki-client