This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
File:                     6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json)
Hash identifier:          dQCTSRmD9gpAdoqsxv8Uvqt4E7YjT8W8UJGc0QJs2fs=
Subject key identifier:   EE:45:B4:57:93:95:7C:82:7D:88:BB:17:C1:C2:9F:4D:B3:77:F2:EE
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Certificate issuer:       /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial:       019B05FD48137BE9B6F226A776D7C22D4439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
Manifest number:          0506
Signing time:             Wed 10 Dec 2025 02:00:43 +0000
Manifest this update:     Wed 10 Dec 2025 02:00:43 +0000
Manifest next update:     Thu 11 Dec 2025 02:00:43 +0000
Files and hashes:         1: 4hrax96C0YsCzZ7N3cD-vhrr54E.roa (hash: p2Xi036U7l5VIBvQc3SfD5E2iNcExLoqMhnCDdE1HDs=)
                          2: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: cw7YrLPMG6Nn3WubQlj8s0UzsAaWPZVMJNveEhSsC0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:05:fd:48:13:7b:e9:b6:f2:26:a7:76:d7:c2:2d:44:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
        Validity
            Not Before: Dec 10 02:00:43 2025 GMT
            Not After : Dec 11 02:00:43 2025 GMT
        Subject: CN=ee45b45793957c827d88bb17c1c29f4db377f2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:a1:08:54:d9:de:7b:27:9f:44:7c:56:51:
                    9a:e4:75:10:9f:3f:8c:4d:0e:21:12:ff:44:ed:0c:
                    1e:22:ed:a8:b4:56:bd:79:f4:68:fd:a4:2a:7b:0e:
                    83:e7:57:6c:24:25:59:61:ec:70:22:5e:1b:86:bd:
                    02:c9:e2:85:d5:48:1a:8c:40:f4:ef:07:98:c9:b0:
                    3d:08:96:40:31:00:ca:93:43:33:bc:fb:e1:24:f9:
                    18:e3:8e:b9:db:70:03:c5:e7:7d:32:10:20:4c:f7:
                    c0:78:b7:b0:6c:fd:ad:f2:e3:b2:93:50:e1:c9:1f:
                    16:8f:a9:e8:5e:7d:c8:2b:0a:13:b8:ff:e4:32:8a:
                    fb:7d:30:c4:0a:79:5a:bd:f5:fc:32:a0:a0:ce:60:
                    07:fd:1c:85:17:36:b9:54:07:ec:78:a4:77:51:cd:
                    d2:58:b7:ed:6a:71:b6:ff:c1:c7:b5:be:ec:ca:ef:
                    d2:3a:30:01:df:e4:70:ed:e1:52:a8:08:a9:29:52:
                    e6:b8:98:b5:62:df:95:10:23:eb:c4:2b:74:93:74:
                    57:d0:07:8a:26:c9:8d:ea:cf:54:a5:ec:f8:84:b8:
                    59:0e:8f:5b:60:b3:7b:a4:ea:1e:8c:f4:49:45:7d:
                    84:85:ec:f7:86:fb:f9:9e:ec:fe:ae:c6:b4:f0:44:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:B4:57:93:95:7C:82:7D:88:BB:17:C1:C2:9F:4D:B3:77:F2:EE
            X509v3 Authority Key Identifier:
                keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:54:0d:bc:91:7d:33:d6:ca:77:75:b4:90:86:2c:90:01:63:
         de:7b:0c:5b:02:56:37:fc:91:1c:69:5a:93:b9:8c:83:28:b4:
         41:48:4b:fe:df:cc:30:1c:35:97:7d:45:3e:66:01:81:82:11:
         16:e5:82:36:25:9e:98:7f:1c:19:05:92:d6:01:b2:ec:6c:03:
         e3:00:09:84:e3:50:02:05:b1:d6:32:4c:86:c4:cc:12:ef:be:
         0a:47:06:6e:e6:4f:be:0e:92:6c:ed:c2:b4:2c:12:f5:f9:f1:
         86:79:c7:e8:13:99:45:3d:dc:2d:b6:8a:79:0c:7c:1e:9f:97:
         d3:2b:b9:70:35:c0:5c:d3:5a:fc:b7:65:a6:64:e5:e5:ec:a9:
         9e:d1:01:85:e1:1f:f0:95:a5:3a:07:e5:c5:d1:e2:22:dc:02:
         b8:a5:9e:f1:d1:9f:4e:ab:3c:6c:b9:b9:e8:e6:c3:70:22:a8:
         c4:72:fe:22:0c:25:63:64:6a:1e:d9:eb:c0:74:e5:b0:d8:ea:
         d7:0e:1b:41:30:8f:59:88:77:d9:35:36:59:9d:03:2f:7b:5b:
         aa:5a:ac:8d:2c:71:7c:2c:71:63:b3:78:a1:ff:aa:7a:2f:9a:
         3a:7e:ae:ec:59:52:f0:ee:77:83:70:12:c6:4a:7e:ea:0a:b4:
         eb:7e:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:03:58 2025 by rpki-client