This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File:                     6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier:          fB1aH8Hj1EZiXfXSsan22xJyt1wcYTyDwp+RgjeF/Wo=
Subject key identifier:   F2:2D:DF:07:F0:46:93:9E:4D:9C:7C:47:BA:86:FA:2E:BF:E7:FC:F2
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer:       /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial:       019B5A51EBFCA03CD58035F7B1163670AF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number:          17A6
Signing time:             Fri 26 Dec 2025 11:01:16 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:16 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:16 +0000
Files and hashes:         1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: jXhZCTd/h9AGS3A4iFX09Xe+MAO+skO5u+3U4TmdW5I=)
                          2: NhCn1a0Le8G6D2sVi_l-BvVs8Q0.roa (hash: r1ZHnBqkDB4ZKDNF3hfVKil60HJx5YWEfmJ30XUmtD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:eb:fc:a0:3c:d5:80:35:f7:b1:16:36:70:af:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
        Validity
            Not Before: Dec 26 11:01:16 2025 GMT
            Not After : Dec 27 11:01:16 2025 GMT
        Subject: CN=f22ddf07f046939e4d9c7c47ba86fa2ebfe7fcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:8f:b8:8c:e0:07:38:c4:28:8c:5b:d4:0e:
                    81:a4:c4:28:b5:93:73:f6:93:93:bc:4b:85:ab:ef:
                    df:b8:1c:b5:a5:bc:1f:3d:13:a0:f5:ff:c3:ac:70:
                    78:9c:f7:17:c1:28:82:b8:c3:5c:0d:10:90:89:e5:
                    9c:78:d1:cc:a4:b8:66:c8:08:17:1c:0f:5c:41:98:
                    39:f1:aa:f2:47:54:ad:5c:1c:a0:b2:84:bf:df:13:
                    19:fd:80:71:b3:b0:3d:2b:41:6d:df:64:a9:2d:91:
                    48:7f:19:4a:de:1e:32:e3:c8:49:6a:80:34:6b:d6:
                    fc:15:64:ae:12:aa:70:69:80:b7:20:4f:97:6b:da:
                    33:43:b2:44:64:a1:f9:d9:f2:61:38:a3:c0:dc:c5:
                    e3:c2:09:c6:e8:02:49:94:a2:b5:86:89:31:cb:19:
                    df:9c:46:38:a4:c4:a9:79:68:ce:65:74:2b:d2:6f:
                    09:e2:ac:9c:27:10:74:46:50:74:8b:46:fe:9d:27:
                    a8:f1:9a:3d:f7:ca:20:7c:6c:ba:6b:1e:79:19:e2:
                    9b:e3:64:6e:97:6b:54:9b:65:5b:65:cb:4a:91:e7:
                    54:46:68:0c:94:5f:4c:ea:b0:12:82:7a:72:bb:5e:
                    df:cc:da:a7:87:9d:cc:06:2a:45:1f:5a:83:ea:c3:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:DF:07:F0:46:93:9E:4D:9C:7C:47:BA:86:FA:2E:BF:E7:FC:F2
            X509v3 Authority Key Identifier:
                keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6e:24:68:bd:37:09:f6:4a:51:23:68:67:31:82:0a:b7:70:
         85:2a:88:83:7e:4d:63:77:df:c3:57:35:59:e9:7a:e9:75:7b:
         c9:1e:49:53:56:e9:9a:b6:88:6c:64:ed:c0:3b:8a:16:da:ec:
         a7:06:9a:80:9f:d1:bb:36:33:97:db:7a:31:cc:e9:69:ed:57:
         5b:08:2a:b2:38:ed:d2:fe:bd:4f:5c:55:2d:47:f2:cd:64:c3:
         b8:b8:42:83:11:36:47:51:c6:fd:f6:39:e5:be:33:fc:3f:b9:
         93:2b:ad:9a:40:3f:4d:47:f1:33:75:90:76:5e:5d:75:5f:82:
         65:52:99:7b:77:31:6f:74:ed:d0:05:9e:97:b0:04:fe:79:d2:
         4f:15:c1:7f:14:bb:51:79:7c:b0:52:cd:c2:4f:38:65:27:d2:
         51:bb:a4:f2:c8:18:11:d6:19:9c:47:0c:74:29:a1:1e:01:da:
         ca:39:a9:1d:2d:40:00:c1:9c:d6:68:2f:97:59:5a:05:07:63:
         09:98:56:af:78:f6:2b:1b:27:b1:9e:ca:16:28:cd:07:42:84:
         c9:07:bc:4c:91:73:60:cb:18:7b:af:ba:39:f4:9d:dd:65:ea:
         f6:59:7e:24:10:9d:cc:d3:13:e1:60:76:da:3b:22:fd:10:87:
         83:81:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:00:30 2025 by rpki-client