This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
File:                     6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json)
Hash identifier:          QN5ckMq4yzxDPsKS5ne/202aKSsejb179dg0BLYp9d4=
Subject key identifier:   26:76:14:76:76:D2:32:90:7C:43:D2:27:EE:36:CD:5A:11:2E:0F:D8
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Certificate issuer:       /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial:       019B3E6CD26577A001C888AF961CDC0FC841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
Manifest number:          12B5
Signing time:             Sun 21 Dec 2025 01:01:17 +0000
Manifest this update:     Sun 21 Dec 2025 01:01:17 +0000
Manifest next update:     Mon 22 Dec 2025 01:01:17 +0000
Files and hashes:         1: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: /bIK8ihXmpAFQso+xAX6Tu1qQ/o+2DT1x9h4hTBTWZY=)
                          2: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=)
                          3: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=)
                          4: lxoRTf-wo4YOlgiYkmNsq_STsOo.roa (hash: TqDSPnCDTrr4iXHUBYL0fqJjIVOuIkCFrz5kt7VpmEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6c:d2:65:77:a0:01:c8:88:af:96:1c:dc:0f:c8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
        Validity
            Not Before: Dec 21 01:01:17 2025 GMT
            Not After : Dec 22 01:01:17 2025 GMT
        Subject: CN=2676147676d232907c43d227ee36cd5a112e0fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:e3:1a:62:77:34:c6:c6:9c:c1:0a:1e:e3:
                    f0:4b:6a:90:2f:54:aa:99:35:3c:4a:f9:61:46:ab:
                    37:08:a3:c2:fb:8f:c2:8f:e0:b9:07:16:73:04:d3:
                    90:fa:b5:03:fa:3a:83:83:f0:eb:8c:8d:3b:65:e2:
                    7d:d8:2b:83:c3:80:c5:d5:98:68:4c:f1:2e:c9:d7:
                    13:07:46:4e:db:15:0d:d8:8b:33:56:6f:f0:b4:31:
                    d7:34:a7:fd:9e:78:cb:97:f5:e1:54:7f:4a:ab:c7:
                    71:7f:8a:0e:a0:ef:c4:d0:cd:ff:97:a3:96:85:69:
                    76:ca:11:4d:fa:1f:15:4e:c0:ea:9e:e1:62:a9:9c:
                    c0:c7:6a:d1:ee:40:88:f4:85:09:22:51:04:c1:a3:
                    90:f8:3c:45:25:22:5a:9e:bb:13:26:a8:d1:0d:bb:
                    c2:b6:a8:67:05:23:c5:6e:75:65:8a:af:dd:f0:e0:
                    65:a0:1a:c4:c2:31:bf:01:bf:68:ea:f0:ba:b0:ec:
                    f9:bb:0b:91:15:08:8b:3e:ca:59:95:dd:8f:8b:ee:
                    5a:59:0e:eb:af:87:cc:b0:f4:11:43:65:6f:d0:c1:
                    32:4c:5f:13:69:53:3d:fe:b9:ab:c0:d6:c1:3e:8e:
                    68:e3:cc:60:2b:45:b1:03:74:87:a4:66:e3:7c:c7:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:14:76:76:D2:32:90:7C:43:D2:27:EE:36:CD:5A:11:2E:0F:D8
            X509v3 Authority Key Identifier:
                keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:78:e3:59:15:f0:08:bf:16:6d:82:1e:5c:9d:91:eb:a9:df:
         78:14:ef:e2:5d:f3:a6:db:16:c8:66:1c:eb:91:4e:b2:90:94:
         e4:2c:2f:17:eb:d6:94:22:c0:be:92:b3:ee:f7:4e:23:69:8a:
         94:86:21:9f:f0:88:6c:3b:2a:6b:36:0e:97:92:3b:eb:b8:16:
         68:e4:f1:a6:6a:fd:2c:8d:25:4f:06:9c:ac:1b:e2:45:a0:ef:
         52:65:29:68:ef:fa:f2:be:69:a0:bc:0d:5f:0a:ee:7c:2e:93:
         53:47:61:1c:ee:6c:c9:bc:8a:a5:95:63:48:81:11:ac:97:d3:
         23:b4:7f:6d:25:ad:08:40:23:fe:fc:7a:a3:bb:e6:6c:46:a9:
         b8:6d:c9:19:c3:b1:71:ab:fe:eb:79:ee:25:69:11:63:01:37:
         39:80:f3:97:ed:25:f2:52:37:4d:4d:0d:69:88:e0:2d:4c:9d:
         7c:3a:fe:a8:2a:48:0b:d8:e9:05:fb:22:6d:86:61:b1:95:40:
         99:dd:ea:01:fb:3b:02:f3:f8:d3:11:fb:36:29:fc:31:b7:54:
         c6:1a:f1:f5:c5:84:f0:79:42:cc:3c:17:25:55:d3:6e:60:d1:
         bc:a0:79:58:6c:de:b9:ce:7d:6f:1b:55:a9:50:45:30:b2:00:
         64:81:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:12 2025 by rpki-client