This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          LRif7IlEpIVvkSNf/WGXJjrv1XpUfvBI8nbGIlSAnyw=
Subject key identifier:   6B:0B:95:43:EC:F1:9E:20:7B:91:31:2E:2B:77:83:1C:13:81:8E:56
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       019B5976C5E6E67C9020C8D8F1F46DB49859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          1799
Signing time:             Fri 26 Dec 2025 07:01:54 +0000
Manifest this update:     Fri 26 Dec 2025 07:01:54 +0000
Manifest next update:     Sat 27 Dec 2025 07:01:54 +0000
Files and hashes:         1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: OTzpc/WxZEdP3UE8clwGGW0OSlX5utXDUHxf1uN34VY=)
                          2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:76:c5:e6:e6:7c:90:20:c8:d8:f1:f4:6d:b4:98:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Dec 26 07:01:54 2025 GMT
            Not After : Dec 27 07:01:54 2025 GMT
        Subject: CN=6b0b9543ecf19e207b91312e2b77831c13818e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:a5:e1:7e:40:5c:cc:e8:ff:12:5a:1f:5c:
                    dd:f1:38:bb:ec:4f:0e:a2:1e:25:86:9d:27:74:f6:
                    33:08:33:4c:a9:93:b4:a8:8e:02:26:68:e3:14:ab:
                    84:73:f6:f2:49:2a:3a:7f:d2:35:90:8d:4f:3b:d2:
                    a0:ce:b8:01:b4:1a:ae:27:b3:c4:fa:af:b4:27:9d:
                    da:6a:26:b9:05:d9:b4:97:aa:7e:f0:75:04:47:e4:
                    c2:6a:c8:dc:22:05:81:e0:77:da:65:d5:1a:37:89:
                    5e:9f:44:20:a5:17:80:34:5a:1b:78:54:35:2f:8f:
                    ec:d8:54:84:b7:af:47:a6:a9:b4:33:96:b5:e0:08:
                    9b:4d:54:31:25:ee:16:a8:2b:84:b5:c5:f2:91:eb:
                    f0:07:3c:c8:26:23:29:8a:0f:26:73:3d:28:d2:19:
                    ff:0c:5a:f4:e4:04:80:ae:be:76:5a:08:dd:8c:7f:
                    48:2f:18:75:c1:0f:ae:c6:11:f7:30:f0:38:78:86:
                    94:5d:54:18:48:9c:e8:44:6b:5f:b7:7b:91:df:80:
                    52:76:cc:06:9a:91:93:34:16:57:3f:fc:11:48:35:
                    42:b6:4a:7d:29:d0:56:73:d7:0c:2d:5b:87:c4:85:
                    a5:55:a4:46:b9:90:66:a8:90:33:f1:ba:4b:45:a5:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0B:95:43:EC:F1:9E:20:7B:91:31:2E:2B:77:83:1C:13:81:8E:56
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:f2:dd:70:0d:ec:39:6c:79:6e:ca:ca:13:8b:f0:15:19:
         ed:3e:93:4d:7c:40:1b:6e:24:32:e2:0c:80:bf:37:83:bc:b6:
         75:76:d9:7a:a1:da:18:fe:06:30:de:6d:00:38:54:64:1b:8d:
         5b:ee:dd:f8:aa:96:39:db:ff:d9:a6:bb:23:f8:f4:6d:27:f5:
         52:a2:32:1b:db:e0:bc:1f:4a:07:32:84:59:a2:fd:86:c7:c8:
         77:f3:4f:9f:18:8b:13:d3:02:42:b6:0c:df:5b:99:3e:54:c4:
         fe:50:4f:d8:19:66:2c:b1:f7:4f:15:6c:40:8c:5b:96:5b:eb:
         f5:8c:41:8f:0c:58:31:d9:48:5b:14:29:df:72:e1:63:ee:de:
         b3:d4:f5:1f:9b:2e:49:c2:54:42:1a:19:db:e9:54:70:78:bb:
         0c:72:a5:91:1e:d7:8a:47:10:9e:fd:dc:a5:14:4b:bc:1a:24:
         4e:ee:02:57:33:a0:57:4f:b9:db:89:36:cd:42:e2:87:9b:8d:
         00:55:a1:5e:e3:54:7a:fc:a1:3f:15:7a:42:2c:26:41:cb:03:
         70:c8:39:4e:f3:14:4a:fa:e0:31:da:77:c2:43:89:4c:d1:6b:
         9e:e9:9f:55:e0:92:77:d8:4f:fd:67:75:64:d8:c0:ca:3d:e4:
         3a:f0:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:03:47 2025 by rpki-client