This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
File:                     6E2Uguxo01d9kwSMmPoFUXOAoqg.mft (raw, json)
Hash identifier:          wLF8rysPEf1UYjSzIvzzNtwrdWsXAvdAVRoeTkONmcA=
Subject key identifier:   96:50:2E:CD:62:01:53:2E:BF:B9:3A:31:F4:93:F9:5A:FA:C4:98:1F
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Certificate issuer:       /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial:       019B3F7F65C69B2F0DD8BDACD0B1F29ED335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
Manifest number:          0332
Signing time:             Sun 21 Dec 2025 06:01:12 +0000
Manifest this update:     Sun 21 Dec 2025 06:01:12 +0000
Manifest next update:     Mon 22 Dec 2025 06:01:12 +0000
Files and hashes:         1: 6E2Uguxo01d9kwSMmPoFUXOAoqg.crl (hash: vOYAmvAHea8MWR0wEWCjz3aQvMXeySn2NI2XVno7wQ8=)
                          2: nwRwy-984bbHflwKusiJIVmAkq4.roa (hash: tOQkT5BXAu3wfc5aKZscWA4O4C5nLe2NnLsQNNV6duI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:7f:65:c6:9b:2f:0d:d8:bd:ac:d0:b1:f2:9e:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
        Validity
            Not Before: Dec 21 06:01:12 2025 GMT
            Not After : Dec 22 06:01:12 2025 GMT
        Subject: CN=96502ecd6201532ebfb93a31f493f95afac4981f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:0a:24:f2:0d:16:09:cf:28:49:fa:a6:2a:
                    b8:6c:4e:41:45:64:57:44:d2:49:fe:8f:b0:37:98:
                    a3:4b:6a:03:d6:7e:c5:57:a3:33:f0:ef:4d:87:d8:
                    77:26:29:ae:15:60:89:61:66:13:6f:46:62:52:b3:
                    10:61:34:0e:09:0d:4b:7f:0f:18:d8:d3:f8:35:c7:
                    71:eb:10:ee:1e:72:01:6c:a8:ed:89:cf:7e:78:fd:
                    2b:10:96:a5:15:c3:93:84:5e:72:5c:f7:53:0d:32:
                    2d:a3:75:9f:da:87:98:e5:a9:c1:87:b4:93:bd:4e:
                    6b:d1:eb:63:c3:76:0f:60:f9:f9:dc:19:c6:7d:2b:
                    a6:22:68:91:ec:76:8a:38:1a:ac:85:1f:50:ab:7a:
                    89:9a:b2:ce:9c:c5:dd:cb:64:b4:e4:e5:6a:8d:af:
                    6a:79:1b:62:63:5c:29:be:12:92:09:77:c4:d4:41:
                    e6:b0:90:f5:94:44:55:0c:d8:85:63:e7:15:52:66:
                    d8:71:93:81:7b:c5:8f:ea:a8:c0:9a:89:31:44:37:
                    ed:ac:15:4a:bb:bb:64:f9:2c:cc:27:77:dc:e3:2b:
                    46:84:e2:c9:2c:73:ac:07:19:6d:9a:17:53:d6:fb:
                    64:4b:55:37:24:e9:08:e5:34:b8:15:d3:be:37:06:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:50:2E:CD:62:01:53:2E:BF:B9:3A:31:F4:93:F9:5A:FA:C4:98:1F
            X509v3 Authority Key Identifier:
                keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:24:ca:86:89:67:69:5e:c2:5a:ba:68:72:dc:52:c7:bd:
         57:ad:bd:ee:09:76:b4:e9:2e:c9:30:ad:ca:e6:9b:48:5e:88:
         ea:23:5f:e7:93:4a:db:63:e0:ff:63:38:11:da:2f:b7:52:45:
         6c:b4:cb:b6:6b:e6:93:6b:f9:e2:2c:5d:a4:23:d4:76:ab:64:
         f8:31:1a:ee:ab:a0:25:37:4e:9d:7e:c8:3c:67:29:4e:53:cb:
         70:46:6a:4e:c6:39:6f:b3:24:a2:2d:f8:32:d9:f9:ba:26:24:
         b7:fc:ca:88:f0:76:2a:b1:91:07:3e:d1:67:4c:32:0b:0c:13:
         ab:7a:47:1e:2a:1e:0d:7b:fa:fe:66:9d:9b:d0:57:5f:0e:af:
         5e:a8:bc:6a:c9:53:66:31:b1:44:52:91:3e:31:4c:29:62:e2:
         37:51:0c:2a:93:2f:5d:b9:2d:87:11:79:53:cb:c6:0e:5d:8e:
         e6:7f:69:b6:e4:ef:10:5c:ec:6a:16:ab:b8:a7:2a:ca:8a:be:
         37:00:96:7e:69:99:03:27:5c:0d:14:64:fe:cb:c4:1d:58:e3:
         cb:ab:83:51:f9:c7:2a:53:f4:05:aa:f7:7d:9b:c0:b7:86:ec:
         58:58:81:0b:53:89:14:a2:82:cd:13:49:69:b8:db:6a:38:c1:
         85:48:eb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/f2XGmy8N2L2s0LHyntM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQ5NDgyZWM2OGQzNTc3ZDkzMDQ4Yzk4ZmEwNTUxNzM4
MGEyYTgwHhcNMjUxMjIxMDYwMTEyWhcNMjUxMjIyMDYwMTEyWjAzMTEwLwYDVQQD
Eyg5NjUwMmVjZDYyMDE1MzJlYmZiOTNhMzFmNDkzZjk1YWZhYzQ5ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUwKJPINFgnPKEn6piq4bE5BRWRX
RNJJ/o+wN5ijS2oD1n7FV6Mz8O9Nh9h3JimuFWCJYWYTb0ZiUrMQYTQOCQ1Lfw8Y
2NP4Ncdx6xDuHnIBbKjtic9+eP0rEJalFcOThF5yXPdTDTIto3Wf2oeY5anBh7ST
vU5r0etjw3YPYPn53BnGfSumImiR7HaKOBqshR9Qq3qJmrLOnMXdy2S05OVqja9q
eRtiY1wpvhKSCXfE1EHmsJD1lERVDNiFY+cVUmbYcZOBe8WP6qjAmokxRDftrBVK
u7tk+SzMJ3fc4ytGhOLJLHOsBxltmhdT1vtkS1U3JOkI5TS4FdO+NwYTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZQLs1iAVMuv7k6MfST+Vr6xJgfMB8GA1UdIwQY
MBaAFOhNlILsaNNXfZMEjJj6BVFzgKKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUt
MDgzNWU2YjFlMzlhLzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NGJkZWYtNWI1ZC00ZDEzLWFlOGUtMDgzNWU2YjFlMzlh
LzEvNkUyVWd1eG8wMWQ5a3dTTW1Qb0ZVWE9Bb3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ0kyoaJ
Z2lewlq6aHLcUse9V6297gl2tOkuyTCtyuabSF6I6iNf55NK22Pg/2M4Edovt1JF
bLTLtmvmk2v54ixdpCPUdqtk+DEa7qugJTdOnX7IPGcpTlPLcEZqTsY5b7Mkoi34
Mtn5uiYkt/zKiPB2KrGRBz7RZ0wyCwwTq3pHHioeDXv6/madm9BXXw6vXqi8aslT
ZjGxRFKRPjFMKWLiN1EMKpMvXbkthxF5U8vGDl2O5n9ptuTvEFzsaharuKcqyoq+
NwCWfmmZAydcDRRk/svEHVjjy6uDUfnHKlP0Bar3fZvAt4bsWFiBC1OJFKKCzRNJ
abjbajjBhUjr8Q==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:54:26 2025 by rpki-client