This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          ZaErenjR1exFLPKkkqqfARWWW8WcHCMonUUU9aat8AE=
Subject key identifier:   6E:7C:F8:F9:DA:75:47:0C:4F:38:2E:D3:99:39:3A:2E:26:62:DC:78
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       019B39EB3C4968BEBD2E7C29558808F23913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          05AA
Signing time:             Sat 20 Dec 2025 04:01:16 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:16 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:16 +0000
Files and hashes:         1: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
                          2: S9SaeWk9nkdoWP64FkIPH12BcyE.roa (hash: ehRbGk3byxJ3AiGY7eFZrHPEbDrx0o4nt9iPQOiTJ6M=)
                          3: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
                          4: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: 9vHHRBfhIgySuuqvAp8t5FA6YB0hWw2DECtHtZyLt1c=)
                          5: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:eb:3c:49:68:be:bd:2e:7c:29:55:88:08:f2:39:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Dec 20 04:01:16 2025 GMT
            Not After : Dec 21 04:01:16 2025 GMT
        Subject: CN=6e7cf8f9da75470c4f382ed399393a2e2662dc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:7a:7c:9a:0e:ce:bf:d7:f8:8d:51:55:d7:
                    77:0a:f2:71:9d:7c:7f:d1:77:d9:81:90:e4:8f:ec:
                    ec:73:5f:43:b7:4b:c6:05:2b:0e:3f:ba:03:56:67:
                    2e:4c:01:85:1b:d1:79:0c:37:6e:be:8d:a7:ff:ae:
                    a3:52:dc:b4:01:2a:bc:95:ea:6f:d4:10:d8:26:30:
                    6d:73:46:f7:09:e9:ab:f5:5c:88:ad:2a:1e:62:e8:
                    f7:26:7d:52:31:95:98:78:ad:93:21:0d:f4:13:0a:
                    54:04:20:df:f7:af:43:4c:92:0f:8b:a3:19:4c:c8:
                    3f:a6:6e:bf:ad:fc:4d:ac:3d:5a:79:0c:8e:9d:59:
                    59:e3:34:8e:08:8b:91:fc:82:54:4a:8f:27:40:5e:
                    b4:3a:f2:69:aa:45:f1:c0:60:49:20:3c:97:76:16:
                    98:1c:b8:25:f7:81:53:45:9a:4e:c6:46:91:6f:20:
                    dd:ed:60:ec:67:ce:7e:a1:62:f0:28:71:9f:fb:5b:
                    41:38:9f:27:25:d1:86:8c:cc:17:f2:8d:a3:fc:09:
                    7d:f5:0a:53:e1:da:a6:e9:2f:21:c3:0b:9c:49:7f:
                    8e:36:ce:c3:6e:30:5a:ac:dd:d0:d9:e3:d2:32:55:
                    c4:36:9a:b3:63:c0:93:bc:e0:55:23:28:d1:5c:88:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7C:F8:F9:DA:75:47:0C:4F:38:2E:D3:99:39:3A:2E:26:62:DC:78
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6a:00:be:82:ff:c5:9f:66:00:79:d8:2b:9e:86:0f:0e:05:
         04:ba:8a:31:97:ba:b5:1f:11:c0:b4:af:1a:2a:a1:3a:39:d7:
         70:25:39:59:09:0f:ce:32:2c:54:55:ab:a9:58:43:f1:14:35:
         86:cb:d7:ca:4e:7d:21:34:aa:9d:46:dc:5f:43:1d:60:aa:33:
         39:55:04:00:3a:27:87:94:07:0e:1f:c7:46:8e:e3:ae:48:dd:
         1d:16:b1:e0:31:cf:03:3c:3a:15:f8:49:47:2c:a1:70:4e:f0:
         6a:6a:6e:86:ea:14:13:32:28:5b:fe:c4:85:2b:ec:a6:09:f7:
         49:d2:f4:96:98:5e:27:42:52:a0:82:8d:4f:9f:1f:58:19:cd:
         58:45:6c:d7:01:5a:39:c4:d8:c3:0b:f8:37:17:8e:00:26:e3:
         22:95:ae:84:77:4f:3a:75:de:88:96:a3:95:2e:89:5a:6f:f3:
         36:69:c8:47:ff:83:60:b4:71:f1:4c:82:bf:46:40:86:48:a5:
         15:34:9b:a1:52:b8:b1:fe:22:ca:f6:17:a5:84:c9:43:bd:53:
         a1:df:49:20:b0:87:ad:6f:42:fa:53:fa:0d:56:ad:31:d8:6b:
         81:57:ac:b1:e8:14:ea:a7:d3:d0:06:1c:9a:20:4a:1d:d9:71:
         fd:c9:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:02:08 2025 by rpki-client