This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File:                     6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier:          js5AorpLVkmT4XD4OB5BE08NOZaVEoAgWtmjf5sc2gc=
Subject key identifier:   E8:9C:72:19:B4:CD:7D:DB:1F:BC:A6:90:C1:4C:E2:27:3A:A1:C3:A6
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer:       /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial:       019B409178D6A265DC47879A5E223B6402AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number:          0A80
Signing time:             Sun 21 Dec 2025 11:00:33 +0000
Manifest this update:     Sun 21 Dec 2025 11:00:33 +0000
Manifest next update:     Mon 22 Dec 2025 11:00:33 +0000
Files and hashes:         1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: Z8Svmp2jT9AN0ZzU7NmeIncgGi9vqOd045MiNmbIvr8=)
                          2: KcWyo6HDH_f-Oalgo-AMzFyAZhU.roa (hash: lf0GIwDADpEwI5JyEJwH/aQKBfcwZ4TLIhoTMR/zw40=)
                          3: th7EIeqoBKrwZJJeDzKMKUXwuxc.roa (hash: ALjgBdMNXEgXhwMxQ4HYp3b8XrLy/GtDIe9aOPg2/3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:91:78:d6:a2:65:dc:47:87:9a:5e:22:3b:64:02:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
        Validity
            Not Before: Dec 21 11:00:33 2025 GMT
            Not After : Dec 22 11:00:33 2025 GMT
        Subject: CN=e89c7219b4cd7ddb1fbca690c14ce2273aa1c3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:e2:ea:0d:e8:96:51:d8:cd:1e:6f:bd:06:
                    f9:b8:5c:e3:d4:cb:cc:01:9a:4e:f4:14:f4:b2:83:
                    7d:b1:0e:32:a4:6c:1e:a7:d7:a1:b2:8f:57:c4:e4:
                    00:69:6e:69:ff:c2:f1:0a:7d:7c:93:3d:16:f2:72:
                    45:18:76:26:8d:ab:2c:05:16:1f:73:ee:55:9f:41:
                    29:67:6e:30:97:8d:ed:b2:ae:d8:75:01:1a:c6:8f:
                    80:b4:9d:9d:0f:fd:ea:80:c8:43:f3:96:93:c7:99:
                    52:77:f6:a7:ed:cd:06:76:68:4d:7e:bb:c4:a2:5b:
                    23:93:a0:f6:39:16:60:27:21:5c:fc:84:a8:e5:83:
                    fe:e3:75:44:d1:57:c6:1d:7f:f5:ff:8e:7c:1d:68:
                    f9:d0:19:a4:26:34:47:51:0a:1d:86:fd:cb:d4:60:
                    c9:a5:7b:2d:a9:a3:47:dc:59:5a:96:95:39:a6:53:
                    06:98:19:48:ef:ac:59:46:b9:03:b7:27:64:23:8d:
                    f5:e3:2c:18:94:d0:aa:40:0d:5e:49:2d:b6:d1:6c:
                    59:e9:02:e5:85:96:f2:b1:be:38:52:ce:b5:1b:f9:
                    d8:7b:30:75:66:e4:38:0c:f5:4f:da:0f:14:a5:a8:
                    4b:76:fe:34:1f:c4:68:05:de:e2:2c:02:ed:3a:77:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9C:72:19:B4:CD:7D:DB:1F:BC:A6:90:C1:4C:E2:27:3A:A1:C3:A6
            X509v3 Authority Key Identifier:
                keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:58:4f:83:75:7d:cd:c8:71:78:e6:44:0f:73:98:c8:9d:
         c5:41:c4:79:95:6e:42:9d:f3:e7:d0:b1:ee:92:59:49:ff:1d:
         c6:6c:5e:9d:31:df:5f:72:db:f2:d6:40:4e:8e:6b:e4:f2:27:
         28:94:b4:fa:20:be:9c:e3:15:39:0a:a1:07:3a:65:bc:61:96:
         78:67:37:9d:ce:32:1f:f2:fb:d9:75:bf:91:e5:a3:fc:31:c2:
         59:81:6d:83:81:21:1b:bd:73:fc:14:a5:05:77:a7:1e:5e:dc:
         f7:e8:db:96:51:6d:d0:fb:1b:7f:46:8e:84:00:93:94:94:3c:
         ce:1f:d4:ef:66:99:b3:dc:00:1f:36:89:51:ec:08:0a:ca:4d:
         3b:ad:55:e3:9c:64:49:90:79:d0:8c:d5:48:b2:9c:0e:e5:33:
         ba:09:a4:9f:7e:34:a3:29:60:1a:c7:2a:96:d4:ea:1a:b9:25:
         da:6f:0a:66:f4:30:eb:0f:7c:a6:f2:75:79:44:0c:c4:08:7c:
         82:e4:02:ac:05:19:6d:3c:75:51:16:04:5a:38:8f:ac:a8:5f:
         68:10:13:28:6c:6a:1d:85:f6:29:cf:40:71:1b:41:58:f9:33:
         19:82:94:d6:42:cd:36:9c:6d:0c:c6:42:fb:c8:fc:ba:7c:99:
         12:55:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:14:27 2025 by rpki-client