This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File:                     ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier:          yf4L+o+EODWIMqzEI10+R/NF+KNXO2x13rPpR/wj9jM=
Subject key identifier:   91:02:19:4A:A8:0B:0D:14:21:E1:F1:FF:81:DE:D0:EE:81:7E:41:D6
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer:       /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial:       019B5A5212E81C5867E26DD738C79DA725F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number:          0111
Signing time:             Fri 26 Dec 2025 11:01:26 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:26 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:26 +0000
Files and hashes:         1: F1_fRjsO4dTqumxtDsL76pdCtg4.roa (hash: 0XgVQRPzj0PEWIzWBzMdSrLlPSlfOiNqMdtsfXPisjk=)
                          2: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: egZqgn2EmTfRuaDlfxHff9Km+8bFUM8umXtlQPwX5Dw=)
                          3: mNWhV9Hvaf2yXpnhOSbY3EKbOiU.roa (hash: xbTjMWQPzIJQuFzWCStCIwa5zKEG4q5JVM9fdDMAgcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:52:12:e8:1c:58:67:e2:6d:d7:38:c7:9d:a7:25:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
        Validity
            Not Before: Dec 26 11:01:26 2025 GMT
            Not After : Dec 27 11:01:26 2025 GMT
        Subject: CN=9102194aa80b0d1421e1f1ff81ded0ee817e41d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:79:c8:57:33:a7:48:a7:92:6e:d2:30:87:
                    20:5d:17:a5:80:d1:1f:d4:05:4c:53:10:73:b4:86:
                    6b:b2:a4:57:e9:a6:a0:b1:0b:07:cb:b9:7a:fb:29:
                    b9:53:4c:e9:7d:8e:20:0a:ea:c5:d2:62:8f:9a:e8:
                    08:08:c7:a3:fa:bd:ec:99:1c:17:ea:97:ee:a9:96:
                    e9:1b:2d:82:86:91:02:4a:97:f4:a0:f1:c3:af:f9:
                    fb:99:05:ae:71:7b:0f:13:4c:18:4d:2a:ae:24:08:
                    0d:6d:29:1a:20:7f:3a:0a:68:bb:f8:be:b9:e0:9f:
                    3d:b9:7f:35:cd:bb:66:f5:7a:d0:77:a1:66:1c:4e:
                    a4:ed:d1:19:81:df:30:4d:1d:99:dc:ab:c6:87:85:
                    1b:9e:e1:07:5c:85:d0:08:0c:5c:54:10:07:0f:28:
                    2d:1b:f1:8d:2c:e3:cd:c3:88:ce:95:54:2e:1a:4c:
                    9b:1b:b3:f7:18:c0:64:36:d1:ae:5d:da:a9:5c:94:
                    d6:ad:d5:87:1f:ff:86:1a:b0:eb:a0:84:d1:9b:2f:
                    59:5e:d9:df:e0:3c:49:cd:f9:39:7b:2e:22:e1:08:
                    c0:10:3c:fc:b5:1d:51:6c:6f:f6:43:8a:f1:7a:01:
                    50:eb:ac:90:d8:1c:4e:b2:17:41:a9:f1:33:56:bc:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:19:4A:A8:0B:0D:14:21:E1:F1:FF:81:DE:D0:EE:81:7E:41:D6
            X509v3 Authority Key Identifier:
                keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:d4:7a:c8:95:44:9f:12:5a:2c:9e:03:87:da:c6:50:a1:
         a9:71:9b:f9:73:15:56:1c:a7:cd:2c:82:13:4a:b8:83:5f:4a:
         d7:d3:7e:37:1c:7b:bc:73:8f:ba:21:4d:3a:bf:a5:07:2e:46:
         92:a3:77:e8:47:1a:02:f9:57:2f:07:07:b2:89:bf:6c:ad:03:
         72:08:e3:33:a0:45:57:3c:6d:ba:5f:04:a5:e3:67:cf:99:bc:
         57:b4:ba:8a:9c:0e:2f:95:ce:9b:11:7f:89:a3:a9:29:58:9f:
         0b:b4:a0:d9:2e:e8:cb:4f:51:63:e6:1d:d8:5b:fd:45:0d:33:
         37:f3:1d:38:20:05:c7:e7:53:16:de:9c:7d:1f:ce:fa:ae:f6:
         66:17:06:23:74:75:7c:53:ad:ff:aa:ae:d8:a9:e0:4d:e8:d3:
         57:c8:88:90:95:e8:24:42:56:2e:6f:f1:27:9f:19:be:42:0f:
         f4:0a:bb:51:0e:a2:35:57:6c:10:57:e8:b2:92:cc:d7:af:3c:
         48:12:bb:c0:28:2a:e2:50:85:7d:90:68:47:25:92:0b:14:fe:
         31:7c:31:a8:8f:45:2b:75:4a:26:eb:b6:9c:53:d6:3b:41:f6:
         83:c4:cd:e7:4b:5f:30:68:5e:62:c3:23:d4:ba:0e:fb:b8:d6:
         ba:fc:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:19:49 2025 by rpki-client