This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File:                     6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier:          BQXFNjQuG7NgAdPNXRBJECJ1/djsJHc02x4iqbBADeI=
Subject key identifier:   33:3B:78:11:9E:FA:85:EC:67:79:88:0B:3D:40:F0:03:FE:F9:D4:05
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer:       /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial:       019B3C107F6F78BBF401EBF1691F1C65DB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number:          01EB
Signing time:             Sat 20 Dec 2025 14:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 14:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 14:01:12 +0000
Files and hashes:         1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: CGNYUv0go8vrXveN+ccZ9YUhg7w9ry2CO+ChIdwGqvE=)
                          2: ZSFecb5m7-Uo29szadbrmtN6IgA.roa (hash: JpRnQHYlzNbpcuUtllWhr9SiuI0ih37zok5GOb1RqnA=)
                          3: kOhJZb5pvQekEUNKN2h9wR5e3bA.roa (hash: kPeZ6Lfy+ZAHngmgLvhb/1Y+IEKr+56sKk3ka6G/FWE=)
                          4: lO6Gh57x0BL059Rcsi5yzcWHcyM.roa (hash: 5S6aqT527KZmFwMUtpVotn8mFgen4R3SzqwJaCK8FCs=)
                          5: s04AY0c7al_er-KtxkZG_la8-ms.roa (hash: Xy1PgvCl533iuiU4yUJ4k1QIMmXrhbExDpf93B/WjgE=)
                          6: xC95aRjyTDhgBiOlUCeMozANfsg.roa (hash: g3im20hJizIQ/3Z10K8z6H2sCBC/EP8Gok5T7cZ5jAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:7f:6f:78:bb:f4:01:eb:f1:69:1f:1c:65:db:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
        Validity
            Not Before: Dec 20 14:01:12 2025 GMT
            Not After : Dec 21 14:01:12 2025 GMT
        Subject: CN=333b78119efa85ec6779880b3d40f003fef9d405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:e1:7b:da:76:24:44:2a:21:96:5b:a3:2a:
                    80:51:3d:da:ca:eb:d8:e5:60:a9:4c:fd:2c:73:1e:
                    a9:9e:ce:3b:3d:9e:05:63:6b:f1:0f:10:23:96:0d:
                    54:1b:41:97:f2:30:42:a8:8b:40:e1:e9:a8:13:10:
                    77:fc:50:11:f0:ae:4c:9a:d0:fa:31:fc:ff:c4:68:
                    80:3c:6d:d0:5c:a9:6a:76:b5:76:9e:62:1d:05:62:
                    73:1f:f5:0a:68:9c:a4:f2:e7:8c:2e:26:89:a0:20:
                    83:76:cf:ab:53:df:89:47:e0:0f:e3:36:11:e0:11:
                    09:98:1b:9f:59:c9:85:31:3d:71:9c:7d:11:4b:f7:
                    bb:4d:e4:ee:6b:d8:e2:8a:b0:67:37:ab:43:17:87:
                    1f:3a:fa:63:25:b2:b6:46:c8:85:0a:51:dd:4f:34:
                    0d:e4:0c:4f:f5:6f:a2:4d:47:56:35:9c:e6:bc:3c:
                    a6:e2:db:d6:fc:56:fa:d4:37:27:d8:71:fe:56:75:
                    dd:01:fc:f3:ce:19:8f:c4:d5:d9:a2:52:86:4e:50:
                    4f:ea:2e:ab:16:8f:9c:e6:c2:41:ae:ab:04:a3:b2:
                    0a:7b:08:d7:45:3b:66:5d:00:b8:c7:93:5d:b1:3d:
                    21:34:93:84:9c:73:e4:33:00:1a:6b:19:c6:da:42:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3B:78:11:9E:FA:85:EC:67:79:88:0B:3D:40:F0:03:FE:F9:D4:05
            X509v3 Authority Key Identifier:
                keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:3b:2a:78:15:52:86:68:a0:cc:91:76:d9:cc:8c:89:81:
         a3:fd:59:72:76:1d:cb:db:53:43:c6:00:06:38:0b:07:1f:f7:
         36:6b:c5:86:73:0c:5e:03:17:bc:c4:6a:51:c1:57:19:78:5c:
         d4:25:52:ad:89:c0:01:cb:34:aa:b7:7f:55:ae:3f:29:ee:a7:
         f3:6f:ee:5b:bf:06:ba:fa:aa:47:14:40:92:55:29:f0:43:ea:
         c1:88:56:38:47:0f:3a:e5:e3:8d:48:5b:c0:ed:38:11:4e:36:
         50:73:60:d4:07:ed:b0:25:8a:6a:ad:cc:e2:5b:dd:cd:1d:6c:
         da:cf:0a:dd:43:df:c9:13:d0:93:71:8f:79:3e:1a:e6:81:41:
         dc:aa:26:4d:60:b4:e7:0c:f6:d3:bf:1d:37:0c:15:0d:77:7c:
         80:88:4f:1f:91:d2:26:5b:9d:bd:8e:10:20:d8:f4:9a:10:77:
         f0:ea:9e:d6:ff:80:c4:d4:53:65:17:fa:18:8a:b3:a8:c4:25:
         fa:51:35:3b:cf:bc:9b:89:b3:4b:87:95:ed:bf:bc:98:36:17:
         0a:bf:ad:03:95:b3:98:65:7b:74:04:1d:dc:94:3c:79:72:7d:
         40:4e:29:1b:e4:49:aa:3f:3c:94:ab:5b:1c:77:ef:dc:39:27:
         fd:9b:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:16:28 2025 by rpki-client