This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
File:                     6eTclo7VKTWgTe47Ipwhypv9vX4.mft (raw, json)
Hash identifier:          JoeJTr417VP4yaEdxPmFMSUqm2/s50VhkXSxfzQc8QA=
Subject key identifier:   37:02:35:D4:A4:34:33:51:99:25:44:A0:2F:D7:D6:B0:32:EC:2C:6D
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Certificate issuer:       /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial:       019B37C5D97E811CDA3846C174E34EEEB7D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
Manifest number:          1790
Signing time:             Fri 19 Dec 2025 18:01:11 +0000
Manifest this update:     Fri 19 Dec 2025 18:01:11 +0000
Manifest next update:     Sat 20 Dec 2025 18:01:11 +0000
Files and hashes:         1: 6eTclo7VKTWgTe47Ipwhypv9vX4.crl (hash: uXO5UfrMS1prBlCPvSwH8sQLGwriGelCy3IRHAS9qIc=)
                          2: ALsU0GmL8xBEdnC3KhGcFcVEzLI.roa (hash: kjJSdr3ASA1w2olBsUagT4Dg4lrINRn84aknrRD9LYQ=)
                          3: dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa (hash: RRTb9hjGX5e3eDXQaXOf0UYAPlQTcjlQylghvEN9gn4=)
                          4: lc03wXBALXEPocpcfjm6P-yAsN0.roa (hash: hU68bUabKrfbjp5BXZ3aDNdEQaqOiciUFeryRAbO9Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:c5:d9:7e:81:1c:da:38:46:c1:74:e3:4e:ee:b7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
        Validity
            Not Before: Dec 19 18:01:11 2025 GMT
            Not After : Dec 20 18:01:11 2025 GMT
        Subject: CN=370235d4a4343351992544a02fd7d6b032ec2c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:8e:e8:4c:52:c8:09:d8:5e:24:32:a8:79:
                    25:87:12:b5:8e:29:d4:e9:2f:7a:63:df:3f:5b:2f:
                    91:34:45:2f:ff:49:a8:6f:25:21:6c:4b:20:38:1c:
                    52:8c:93:d0:01:96:95:4a:6d:62:de:f1:c3:6d:29:
                    53:0c:7b:64:7c:ac:d2:52:37:2b:66:1a:74:e7:56:
                    14:ee:b5:3d:96:02:cf:15:44:e1:52:f2:1a:a5:ad:
                    62:92:22:20:50:ea:da:5c:2f:57:43:b6:e5:bd:49:
                    e8:35:42:27:d8:39:f0:e2:ac:83:a8:14:fb:b9:cc:
                    01:37:00:84:7a:26:db:8e:09:cc:49:12:41:df:cb:
                    cc:63:ad:dd:1c:c2:f4:5f:d4:c8:96:dd:a9:be:2c:
                    b7:f0:82:1c:f9:94:e3:d3:06:10:86:c0:13:5b:f7:
                    bf:41:a3:cb:75:e3:01:e1:5b:68:02:ff:8b:bb:8d:
                    11:19:17:b3:e4:f5:65:ab:b1:91:98:ba:0f:b6:9a:
                    01:03:47:f3:b5:c7:e6:6d:d6:c0:23:73:75:1a:b1:
                    23:07:d1:4e:13:46:6b:e6:51:ec:08:b5:ce:1c:23:
                    c5:c5:47:ee:48:07:8b:06:ed:22:07:dd:83:69:99:
                    d3:a3:7b:5f:c2:3f:e5:9c:94:90:91:2f:53:39:cb:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:02:35:D4:A4:34:33:51:99:25:44:A0:2F:D7:D6:B0:32:EC:2C:6D
            X509v3 Authority Key Identifier:
                keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d8:fe:de:19:89:f8:cf:8b:01:a7:18:0f:c9:3a:d4:93:4b:
         e9:f4:6d:15:f6:7a:0d:41:fc:fc:12:c9:2f:41:72:5b:67:6f:
         e8:db:08:34:e8:ce:e8:4a:93:32:bc:ed:64:27:a1:8e:b2:8f:
         a0:79:4f:c6:67:a0:1a:c1:b7:e5:37:8b:2d:a7:b9:2a:7c:8f:
         f3:74:29:8c:81:8d:35:8b:40:c3:3b:0c:df:aa:03:88:33:89:
         0b:5e:93:4f:04:de:e7:d0:95:c0:28:c3:70:b6:98:8e:d8:d9:
         eb:97:0c:f3:0f:b2:9b:4d:76:dc:05:ab:f0:fd:c0:28:33:e1:
         ce:67:d4:07:bf:ab:86:58:a0:4e:ae:01:d0:0f:d7:13:6e:fc:
         ad:29:76:c0:31:25:52:1b:da:40:b2:f3:01:f1:2e:08:9b:ab:
         23:b2:4f:61:e0:57:7a:f3:ec:60:aa:66:08:ef:a7:1c:98:00:
         18:c5:b3:6a:3b:c0:38:33:a4:11:e2:50:ac:3b:3e:d9:da:48:
         a6:8c:57:ed:f9:f3:50:ad:5b:d7:84:58:4e:2d:03:82:98:9c:
         b6:04:e7:34:0b:ff:86:2e:2e:b1:c5:57:66:64:69:d9:6c:ee:
         f7:0b:c7:8c:bd:f9:32:ff:12:dd:2b:e7:04:08:aa:8c:05:98:
         70:a0:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:53:51 2025 by rpki-client