This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          Crfih8pUxyR+NQ7+5sK1TJXZs3AEU/xtGNYWiKtUWjg=
Subject key identifier:   CF:AB:ED:3E:FA:CB:93:6C:B5:C1:D0:D6:39:70:C6:AD:87:50:FC:51
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019B386A0D820DD1A9B8C5EBACE6A9CDCE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0DEC
Signing time:             Fri 19 Dec 2025 21:00:32 +0000
Manifest this update:     Fri 19 Dec 2025 21:00:32 +0000
Manifest next update:     Sat 20 Dec 2025 21:00:32 +0000
Files and hashes:         1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: 8qCdIuwW0mPdp21aOrQunRu9c71YJjghJ/sbwoK5tgA=)
                          2: U9_szKR8srbhSHiXME0hISvB9zk.roa (hash: Zqb60PKOf5F6hXcN+4+/4uUqXILXd/JHdWXXHL4XlcM=)
                          3: UHt5Ue5EHvA2-W-Xmt-sxStGQG0.roa (hash: 2fRtxNUH3Aca8LFhSmKgwKn175stfHslO6K/ewoks+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:6a:0d:82:0d:d1:a9:b8:c5:eb:ac:e6:a9:cd:ce:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Dec 19 21:00:32 2025 GMT
            Not After : Dec 20 21:00:32 2025 GMT
        Subject: CN=cfabed3efacb936cb5c1d0d63970c6ad8750fc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:1c:d2:0c:2e:43:4d:4f:07:68:3f:02:d7:
                    91:c0:30:54:1f:29:eb:8d:21:31:b4:b5:fd:ec:3b:
                    36:4b:2e:ed:15:02:d6:f1:62:eb:3d:4b:0d:4a:f4:
                    fd:97:24:1b:49:4d:dc:d0:f3:ee:e2:5c:fb:6e:49:
                    d9:33:5a:6f:53:34:04:63:38:05:bf:72:54:aa:33:
                    78:5b:c7:04:0a:57:c2:c1:05:a0:aa:8e:be:eb:73:
                    bf:3b:df:fa:31:79:6c:a1:e0:68:2c:43:9b:25:fb:
                    cc:9b:76:4e:e8:d1:9e:d8:b8:7c:43:7b:5b:c4:7d:
                    d1:25:53:3d:f2:9d:8e:31:bd:e5:92:14:c2:f5:95:
                    29:e3:62:d9:18:65:ff:6b:b1:ea:83:0a:51:af:71:
                    65:af:ed:88:6f:f3:e0:6c:a0:e9:32:a2:63:0e:35:
                    40:2c:81:81:bb:b1:41:26:06:c1:91:21:38:8c:e1:
                    8a:68:75:51:b9:cb:d2:ba:cd:14:fa:3a:49:26:2a:
                    fb:c2:e9:b2:ae:63:20:a2:0f:d2:4f:4e:ec:8d:ff:
                    9d:74:88:ff:c6:24:d4:65:d6:2d:2c:bd:b1:c5:37:
                    6f:f0:41:60:d2:06:86:76:8d:f2:2c:94:b0:9b:0f:
                    d8:df:54:eb:50:2e:1a:d0:58:ea:e0:00:f0:d9:97:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AB:ED:3E:FA:CB:93:6C:B5:C1:D0:D6:39:70:C6:AD:87:50:FC:51
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3e:7a:ab:44:23:bc:68:5c:41:50:e4:37:72:1c:1b:50:c2:
         37:84:95:01:ce:76:d9:c2:72:90:45:4b:85:42:71:20:fb:34:
         8b:4e:79:11:94:ca:a7:d1:49:1f:bb:7f:11:a0:3c:64:db:e9:
         f7:70:37:44:a2:c7:90:05:b1:b8:85:2c:26:d2:76:0f:3e:1f:
         d6:04:1c:97:58:ac:18:b5:3c:b9:c2:8c:bf:32:51:a2:1d:e6:
         8c:c5:05:91:34:bd:8f:f0:06:67:5d:2e:db:b0:dc:b8:01:91:
         29:df:bc:99:12:b8:24:69:be:fa:14:52:b1:62:4b:dd:44:88:
         b3:b0:2e:eb:13:29:dd:4f:9e:be:dc:97:a9:20:73:d4:dd:05:
         d7:8c:c0:e3:40:e9:a2:9c:ce:44:12:db:2a:31:63:a0:71:af:
         1f:cb:ff:81:f2:ea:3e:64:48:30:b1:81:4d:90:fe:8a:6c:4d:
         dc:3e:c4:05:0a:91:ce:e8:ff:19:2a:8d:e3:65:5f:d1:2b:9e:
         2d:e5:ed:10:cc:3a:c3:9c:6b:f6:5c:95:8c:a9:74:6c:d0:92:
         2f:31:85:50:75:71:7c:29:03:59:dc:d7:c0:fc:92:db:c1:11:
         8d:13:5e:52:f4:42:d2:34:57:66:76:c5:9f:c0:e1:18:57:47:
         fe:43:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:25:12 2025 by rpki-client