This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
File:                     6quXbuOZaLcCcSdvbSLluRyOFuM.mft (raw, json)
Hash identifier:          LSXPmiKqJVlJAlu+6wQBbERtdS3V8tIP2129wdazLoQ=
Subject key identifier:   1D:9D:86:99:A5:62:0B:62:D5:51:E4:CD:40:F0:3B:7E:7C:B4:24:CD
Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3
Certificate issuer:       /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
Certificate serial:       019B18DF1B0005EC5269FCC1DD34E1412756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
Manifest number:          06AB
Signing time:             Sat 13 Dec 2025 18:00:33 +0000
Manifest this update:     Sat 13 Dec 2025 18:00:33 +0000
Manifest next update:     Sun 14 Dec 2025 18:00:33 +0000
Files and hashes:         1: 6quXbuOZaLcCcSdvbSLluRyOFuM.crl (hash: lnxi3hI3RsSsXtRyomW77zgW5i08278gkBR6VtnKCbg=)
                          2: i0q0WkljmRyWQBIX1k1gWh9MzA8.roa (hash: trVbr6O3e+ojVgxfkyiAOzBDkcebOcDQG0rTpSEVsGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:df:1b:00:05:ec:52:69:fc:c1:dd:34:e1:41:27:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3
        Validity
            Not Before: Dec 13 18:00:33 2025 GMT
            Not After : Dec 14 18:00:33 2025 GMT
        Subject: CN=1d9d8699a5620b62d551e4cd40f03b7e7cb424cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:ed:68:f9:f0:67:ee:82:b3:a5:d1:ce:0e:
                    9f:a7:af:0c:03:64:7f:72:6b:41:6a:bd:b7:6e:00:
                    f6:85:5f:c0:47:0b:68:c1:4b:4e:7e:51:19:11:43:
                    23:85:fa:2f:7d:55:e5:a6:60:91:86:ce:39:91:a8:
                    26:19:2f:a3:44:2b:98:62:55:df:55:b5:1e:e6:16:
                    50:00:c0:fa:ba:d0:10:e1:a9:08:e1:85:cb:26:d9:
                    d4:2a:db:81:5f:0b:21:1c:9d:47:c4:c8:e2:36:73:
                    ee:aa:3e:23:82:49:a9:f3:7a:24:3c:e9:a1:d1:4a:
                    f8:55:9e:78:5d:b2:25:df:32:61:85:7f:f0:a0:e6:
                    c5:c8:b5:0c:e4:4a:72:6b:5f:73:cc:b3:78:1e:4f:
                    c4:e1:f7:79:50:ca:db:c0:2f:47:fa:4c:e8:3c:46:
                    bf:87:57:80:8f:3c:dc:7f:5a:b2:34:3a:57:85:b9:
                    d1:18:fb:22:1d:c0:ea:24:5c:62:ea:e1:f5:97:e4:
                    a2:f1:c9:06:57:73:ac:c3:84:bd:d2:0b:15:4d:6d:
                    1d:b5:95:30:b7:df:d7:73:a8:85:bd:73:7d:e0:3d:
                    62:75:c9:2f:bf:78:0a:08:bd:75:eb:0b:e6:69:61:
                    4d:e9:d2:ed:41:63:ea:90:ee:f0:36:13:55:5e:47:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:86:99:A5:62:0B:62:D5:51:E4:CD:40:F0:3B:7E:7C:B4:24:CD
            X509v3 Authority Key Identifier:
                keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:f1:bb:28:e9:00:7c:f9:ac:3b:6e:97:6d:99:1b:56:5d:
         39:0e:72:6f:e1:dc:14:46:91:62:14:79:ca:44:3e:32:1b:88:
         82:6d:d4:2d:74:e0:a1:5f:02:52:76:9b:cd:50:14:12:2b:2d:
         ed:f6:87:d6:c3:fd:12:10:ae:47:b0:76:68:41:ed:ad:d7:e5:
         8c:82:51:16:52:48:91:0d:03:71:51:b0:c1:ad:96:ee:15:23:
         9e:1e:77:d3:04:48:38:b4:ba:dd:96:74:3f:83:46:77:02:c4:
         36:dc:d4:6e:ed:4d:21:87:62:bd:f0:21:74:d4:ee:f2:50:34:
         43:ff:85:63:96:f1:c1:fe:d7:10:45:e7:b5:27:13:d3:b4:75:
         1d:04:52:cc:f6:28:be:0e:14:2c:2b:3f:57:ee:fc:c7:81:45:
         c5:2f:31:35:3c:90:13:57:2f:07:77:de:b6:b5:59:02:fb:2c:
         65:dd:b8:a5:f4:73:e3:a0:68:49:3a:ea:65:a8:df:3a:67:2d:
         a7:95:fb:6e:69:08:dc:14:39:85:08:ff:45:12:bc:01:e1:99:
         66:8f:e9:3b:d8:51:da:fc:6a:df:94:68:f5:42:d2:3a:12:a2:
         8b:88:58:06:86:4f:4c:a4:21:d5:99:a4:64:3d:ee:c4:eb:55:
         bb:90:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:03:14 2025 by rpki-client