This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          YA4rEb6HS0DwHDijMZnbmUqDbsQkSJ29lujUXKTNiu4=
Subject key identifier:   9B:F8:A1:CC:5C:B2:BF:9C:D3:E3:4C:1D:D9:8C:3A:9D:59:31:96:34
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019B3A9042F80EF84BDD89A5B1CCF7CA7014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          179C
Signing time:             Sat 20 Dec 2025 07:01:31 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:31 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:31 +0000
Files and hashes:         1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 41W90qLmhnqFt4TTaKWkyG/zHIa7xb6nmpIbIqAnUrQ=)
                          2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
                          3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
                          4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
                          5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
                          6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
                          7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
                          8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
                          9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:42:f8:0e:f8:4b:dd:89:a5:b1:cc:f7:ca:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Dec 20 07:01:31 2025 GMT
            Not After : Dec 21 07:01:31 2025 GMT
        Subject: CN=9bf8a1cc5cb2bf9cd3e34c1dd98c3a9d59319634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:ef:b7:d5:9b:64:9e:f4:b3:6b:20:c6:3d:
                    d0:a8:dc:6c:b0:9c:60:69:7f:a5:5e:ce:5e:16:14:
                    03:e7:32:4e:32:eb:82:b1:1d:40:cc:98:31:84:b3:
                    cb:54:18:54:4c:ba:a2:a1:55:fc:42:2c:94:06:c4:
                    51:3f:9d:87:e4:52:69:c7:b0:ec:24:1f:0e:2c:26:
                    56:3a:80:0d:e2:9c:84:c8:06:e1:7d:ed:55:3c:9b:
                    41:7a:aa:da:a5:5d:2c:1b:d3:28:fb:14:e1:03:ca:
                    df:35:34:4f:72:38:a5:74:dc:5b:eb:d3:d2:bf:60:
                    ca:2f:aa:ac:c8:3f:7e:1b:8a:44:e7:dc:76:44:ba:
                    e4:a9:8f:25:0b:c4:61:23:c7:2c:00:0d:66:cc:4e:
                    52:53:d5:bf:3f:ef:c8:3a:81:d9:fd:77:6f:fa:14:
                    36:6a:04:69:f7:fe:9c:27:48:46:ff:d1:ee:83:44:
                    20:28:fc:e7:91:56:7d:bc:00:17:97:88:2c:bc:76:
                    fc:40:01:96:5c:eb:fb:3b:1e:cc:4d:9d:fe:c9:15:
                    22:7c:9d:7e:34:be:fc:93:7f:03:3b:50:7a:c7:d8:
                    1a:e3:02:c6:f7:19:7b:6c:fd:08:8b:ec:b7:44:56:
                    7e:cd:46:e6:67:c7:76:c8:3b:c2:ad:7b:ba:2f:f2:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:A1:CC:5C:B2:BF:9C:D3:E3:4C:1D:D9:8C:3A:9D:59:31:96:34
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f0:8c:57:13:fd:f5:f4:0d:6a:e3:17:26:84:34:00:55:e9:
         84:e5:83:44:62:8c:2d:65:83:31:c1:d0:19:6e:a2:c1:da:ad:
         aa:f8:7f:e1:e4:82:fc:fa:05:07:9e:ac:ca:26:b5:0f:bb:a8:
         ff:8a:e9:04:ea:04:60:5e:19:39:1a:60:d3:ad:18:47:0f:3a:
         6d:43:ea:d2:5d:ca:12:cb:f2:08:93:79:01:0d:05:4a:73:4d:
         75:5b:15:79:65:5a:ee:f8:ea:48:18:36:53:33:37:a3:68:f4:
         97:a1:c2:bf:2d:25:31:42:86:b3:d7:8d:80:05:5a:d2:c9:50:
         62:49:bd:c2:b5:fc:8d:4e:e8:b4:18:f3:0f:ff:18:ab:c9:f0:
         36:03:6c:d1:6d:a2:a7:76:78:e1:f6:c9:00:f7:b0:ba:f9:ce:
         09:7e:4b:08:b3:85:07:d3:8b:8f:31:86:61:f3:ee:ac:f6:cb:
         d1:ae:f6:f3:2a:61:d6:71:42:ea:22:17:bb:7f:8c:21:f2:96:
         54:c2:04:b5:5e:f0:e2:8a:20:9a:46:ea:44:fe:c1:aa:42:02:
         9b:50:e2:9f:a9:96:5d:df:0a:49:33:38:fe:23:ec:25:df:58:
         0f:d9:61:60:05:5d:2d:4d:fe:cf:e6:d3:02:d2:dd:3c:66:a8:
         6c:f7:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:18:52 2025 by rpki-client