This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          /fYiifiOQiHiJ7xqD4KfvMEM0ScGb+pgP5NEnPxlZa4=
Subject key identifier:   E3:ED:E2:C4:3B:6D:63:12:CC:7C:96:65:BD:DF:A2:E3:54:69:34:F4
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       019B183A7F1651006E62A219527C8178C7AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          0288
Signing time:             Sat 13 Dec 2025 15:00:45 +0000
Manifest this update:     Sat 13 Dec 2025 15:00:45 +0000
Manifest next update:     Sun 14 Dec 2025 15:00:45 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: cNzjghA4CtbHREqXsMjysT8CfXka8OSKnToIAr00CFk=)
                          2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:3a:7f:16:51:00:6e:62:a2:19:52:7c:81:78:c7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Dec 13 15:00:45 2025 GMT
            Not After : Dec 14 15:00:45 2025 GMT
        Subject: CN=e3ede2c43b6d6312cc7c9665bddfa2e3546934f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:b4:e0:6e:2b:90:09:47:8b:ad:54:d4:94:
                    be:f4:ff:38:87:86:28:2c:65:75:cf:ac:47:72:8a:
                    e6:bd:17:4a:20:ce:e8:4e:ee:d3:95:e6:64:1f:36:
                    9f:3a:ff:fa:6f:05:63:ef:55:b6:e9:ae:52:4b:b0:
                    d7:d0:a4:79:c7:4f:1d:52:56:67:60:21:a0:fe:b2:
                    0b:87:37:e7:a6:80:7f:4c:b8:4f:d2:f6:d5:e0:78:
                    6d:59:5f:5c:3b:fe:b0:a2:c5:39:d0:b7:90:2f:67:
                    74:c3:e9:0d:5e:7c:ce:b6:c4:36:7c:eb:bd:dd:05:
                    b2:32:f5:8a:fd:00:a9:58:db:dc:19:f1:21:f3:bf:
                    be:a3:a6:4e:ed:dd:26:29:9d:86:93:2d:62:48:e7:
                    8c:b2:8b:a9:e5:ad:ee:15:8e:86:0f:bf:bd:9d:e6:
                    76:a0:88:77:b5:06:ff:ed:0a:0a:5f:bc:e2:e7:1a:
                    49:f5:5e:3c:f3:8d:f5:26:62:35:e4:0b:af:c9:18:
                    18:85:21:d8:2b:82:4d:2c:5a:b1:33:16:08:e4:cd:
                    13:7b:83:ab:89:d1:bf:5a:cc:e6:df:d9:7b:3d:63:
                    5e:56:bc:27:ab:61:4e:ba:92:40:94:87:14:dd:57:
                    c7:31:b7:7d:b0:f1:7c:ff:19:01:e1:c0:55:e2:2c:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:ED:E2:C4:3B:6D:63:12:CC:7C:96:65:BD:DF:A2:E3:54:69:34:F4
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:40:4f:91:d2:0f:2c:8e:60:77:b0:44:56:1f:5d:af:31:
         f0:2a:64:d5:21:94:5f:88:b4:bf:2e:56:8f:d0:39:47:02:9d:
         5d:7f:bf:16:39:dd:1d:17:5b:c2:b7:61:5c:b2:b1:5d:67:ed:
         d4:14:67:b6:ab:14:2f:e4:e0:61:5b:aa:2a:d4:53:7d:97:c2:
         aa:86:a3:34:c2:af:74:18:b3:d1:32:a8:47:1c:be:8a:b5:65:
         54:c5:00:90:b9:a8:01:c3:ec:f6:f9:72:17:5c:a0:1c:07:f2:
         f7:a8:9f:84:24:b3:3a:49:11:11:19:6d:1b:1b:5e:49:b6:27:
         b4:40:be:44:c8:25:67:fc:9d:e3:f6:58:d9:4e:97:0e:f2:54:
         58:4a:f5:c7:e6:d8:db:80:b2:9f:18:5d:be:7d:e1:aa:08:5b:
         07:c1:3c:5a:18:0d:63:01:3a:09:02:a6:21:2b:4e:f4:7b:ad:
         27:22:5a:35:95:0b:96:50:56:db:aa:b6:9e:8b:29:b1:a3:a3:
         89:bc:7d:f5:a7:1b:9c:f0:2f:ba:04:29:8f:e4:5c:b1:65:55:
         76:b3:86:60:a7:34:f4:e4:01:f1:3a:65:a1:49:cf:3d:5c:4f:
         e0:7a:63:e6:5c:8f:20:e6:fe:09:3e:ce:7a:dd:7c:0e:af:21:
         dd:32:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:04:41 2025 by rpki-client