This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          R58XMqvUCa/siIfScSDzcUz9ztv+GgO8Gb+1Y3tyb2I=
Subject key identifier:   C6:F7:66:62:E4:1D:88:32:1E:C9:63:56:74:0E:08:21:56:D1:FF:98
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       019B300BB3009AC8A94884BA07124771E270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          1784
Signing time:             Thu 18 Dec 2025 06:00:31 +0000
Manifest this update:     Thu 18 Dec 2025 06:00:31 +0000
Manifest next update:     Fri 19 Dec 2025 06:00:31 +0000
Files and hashes:         1: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: XLsHVnNy6sCg+lLHS0KEZGnd3lUAABvuzT1hqt5La1k=)
                          2: wFiWhGfsPPPiHPKgaPOOOuMQ59k.roa (hash: kPUheiP/1RIkZMjes3RF7D1Dk6VSyteFka8OLwBciXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:0b:b3:00:9a:c8:a9:48:84:ba:07:12:47:71:e2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Dec 18 06:00:31 2025 GMT
            Not After : Dec 19 06:00:31 2025 GMT
        Subject: CN=c6f76662e41d88321ec96356740e082156d1ff98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:2b:d9:2e:db:12:c5:44:57:64:ea:ab:38:
                    74:30:b0:6e:a6:c8:10:2f:f8:f9:6c:21:b4:32:62:
                    90:02:d1:60:d9:f8:07:e3:da:57:44:d2:5e:3e:01:
                    a1:e4:a5:72:5a:9b:f2:0c:b4:66:bf:20:b6:2c:1a:
                    93:b8:c1:bd:2c:e9:c3:8e:57:41:4e:6d:4b:fc:89:
                    d8:5d:6b:75:2f:44:85:16:08:5f:b4:da:b4:4d:63:
                    da:72:b4:6c:c9:5c:3c:0f:b3:fb:ce:92:33:de:c3:
                    8e:3c:e1:67:94:bc:6c:a4:a8:4c:cb:b4:2e:74:ce:
                    3b:88:ce:03:41:ba:04:e8:38:02:5f:ea:5c:d2:a4:
                    c3:62:f4:04:da:28:80:f3:d9:6a:40:96:c9:67:56:
                    43:a0:8e:12:10:63:1d:eb:4e:70:12:71:a1:cc:df:
                    ae:73:76:d1:5b:4c:57:28:50:c2:1e:a6:f6:86:07:
                    f6:d4:68:20:4e:22:4d:77:18:65:5f:6f:d6:bd:12:
                    b6:a4:8f:50:27:e0:9d:61:a3:bc:75:cb:01:68:05:
                    6c:d1:84:77:ff:1a:8e:86:1a:7b:e3:cc:0e:f7:58:
                    d0:9c:46:0e:ab:a4:28:b0:c9:c9:3a:4f:91:67:82:
                    82:e5:3a:b6:89:59:80:28:37:29:0a:bf:16:35:ce:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:66:62:E4:1D:88:32:1E:C9:63:56:74:0E:08:21:56:D1:FF:98
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:dd:a3:2d:78:0e:b2:96:26:d6:4c:b0:c1:b4:b0:62:4e:
         1a:54:8c:db:18:1c:95:f3:68:43:d9:5c:79:67:ca:9e:aa:0e:
         0f:67:9e:f9:d1:71:50:0c:f2:15:5c:70:31:27:b8:a1:d0:ff:
         ac:2d:d1:cb:9f:a1:e7:41:f4:a7:8e:c2:2c:ff:8f:dd:67:2f:
         cb:2a:23:76:db:e6:3a:cf:7b:c1:17:a3:af:09:6c:81:23:e0:
         b7:af:7d:c0:33:17:2b:31:c1:f8:f6:b3:79:fc:7f:cd:92:3c:
         0e:55:b7:24:89:53:e5:af:8d:a6:81:e5:93:e8:24:78:5d:1f:
         d8:1e:db:30:1a:cf:88:d8:9b:08:5d:1c:11:7b:a6:8c:54:7a:
         ce:c6:ef:5f:15:d0:3d:62:52:73:6a:e0:f8:63:a5:bc:1e:79:
         28:a3:02:b8:14:49:df:18:6c:fa:88:a4:1b:a6:7e:fd:6e:7c:
         e7:15:c4:7e:48:96:b9:3f:f2:f8:27:45:1f:af:16:8c:32:59:
         aa:4c:f1:7a:94:06:b8:6f:d8:bc:6c:66:d3:be:26:fc:48:a3:
         eb:fc:1e:ba:f6:7e:54:ac:81:eb:69:18:c1:db:64:ae:cf:ce:
         f6:64:57:06:a6:b4:ab:fd:cf:13:95:02:c3:a7:97:5d:5b:ac:
         e0:ae:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:02:01 2025 by rpki-client