This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          Vgb7E6/14grhWQfqy4UPw0JYAuT87u7f0FYIYYLF7yA=
Subject key identifier:   7E:CA:9A:89:2F:A3:5F:F9:78:52:2D:21:26:A7:60:30:F7:CD:CB:13
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019B435B8E669ACFCBC990A2732538F372E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          1359
Signing time:             Mon 22 Dec 2025 00:00:32 +0000
Manifest this update:     Mon 22 Dec 2025 00:00:32 +0000
Manifest next update:     Tue 23 Dec 2025 00:00:32 +0000
Files and hashes:         1: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (hash: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=)
                          2: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: h+CtpfwdhmP/+UqZbxEycXL+oFtPwlJ6wOKmmkRzzUg=)
                          3: OJiEpuu19DL0DK8EqfynqGFXkQQ.roa (hash: qdWhWnRWtAIkyoxDYPJOupy3MISxIyqCu/0vET2RQjw=)
                          4: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (hash: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=)
                          5: W5VQv-ze_wds3sZaktK1dB3TlqA.roa (hash: 3Qbtjb177rcscniRobuAC/Kh8GJ/smUC+jFvjdESqGQ=)
                          6: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (hash: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5b:8e:66:9a:cf:cb:c9:90:a2:73:25:38:f3:72:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Dec 22 00:00:32 2025 GMT
            Not After : Dec 23 00:00:32 2025 GMT
        Subject: CN=7eca9a892fa35ff978522d2126a76030f7cdcb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:7e:b7:f8:6f:d6:88:25:21:0a:3b:b5:90:
                    1f:94:b6:a0:48:84:60:cd:44:f0:8b:04:c1:16:00:
                    4c:04:de:0a:38:3c:6a:10:0c:48:f8:a1:c3:e0:d2:
                    a7:07:00:a5:4a:63:73:e8:05:e8:4c:c7:3e:69:5d:
                    d2:56:11:9a:1a:8e:a9:8e:d3:0c:d1:60:3e:6b:71:
                    f5:64:1a:67:42:bf:5a:54:a5:a0:18:d5:2d:2e:3a:
                    b8:69:50:75:1b:22:ee:03:2e:a3:57:0c:c0:99:e2:
                    f5:42:34:98:29:7e:b9:b0:ef:59:92:f1:d9:25:54:
                    26:eb:6e:38:c2:41:ae:86:bf:3f:13:53:ec:41:6c:
                    6b:35:38:78:0d:4c:22:6e:b9:ac:57:f0:9f:0f:44:
                    fd:f0:8b:02:92:c7:35:43:af:01:a7:56:12:64:77:
                    ca:ca:ec:31:db:8b:cf:27:6f:c2:3d:53:5f:ee:a4:
                    7c:c7:e3:56:65:de:67:97:06:cf:11:ec:ea:61:89:
                    3d:4c:46:e0:b3:78:65:ca:52:66:4b:2a:18:51:ec:
                    eb:1e:33:d9:51:4d:76:97:fa:bd:7d:56:a1:1f:2f:
                    4a:d4:04:91:5a:56:e3:71:c7:47:ba:25:01:93:3a:
                    b1:c5:5f:5d:71:02:41:26:96:3c:eb:52:ef:53:e7:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:9A:89:2F:A3:5F:F9:78:52:2D:21:26:A7:60:30:F7:CD:CB:13
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:f5:d6:23:1a:f7:5b:de:19:cf:7b:f4:20:14:5f:d8:b0:
         0e:39:bf:89:fe:50:db:ee:0d:17:68:0c:fe:f5:07:0c:cc:4e:
         a7:3e:f3:33:98:5e:4b:d8:ef:29:25:94:ca:ed:01:da:76:51:
         14:c4:b6:cb:a5:09:04:b9:d0:62:db:9b:c1:72:84:4a:b5:7b:
         60:72:15:27:bc:27:91:50:26:e9:60:28:8e:e9:66:f9:d9:9e:
         9b:dd:49:cc:68:f8:03:35:b3:71:28:37:7b:14:57:76:fe:41:
         bd:8b:5e:46:3b:a7:f5:d4:1f:e9:45:63:9e:e7:b4:37:54:3d:
         96:80:37:27:08:76:c6:11:e2:bf:e7:fe:3c:88:7f:a9:66:98:
         45:49:b0:74:0c:4d:32:e9:ea:c3:1c:30:5d:7c:3d:81:c0:ae:
         b0:2b:3a:48:f7:3e:a3:29:dd:6c:77:dd:98:6a:1d:fe:53:6b:
         ae:17:2b:21:39:00:0e:d8:5e:7f:77:fd:1e:78:56:97:76:67:
         f5:24:5d:63:7f:60:14:47:31:bf:01:c8:09:66:8a:dd:b5:c9:
         6c:3e:a6:ca:b8:7d:e5:65:52:07:21:5b:47:bb:17:de:e4:3b:
         97:18:ee:55:08:b6:3a:4a:37:e1:a2:6a:69:67:33:78:9c:c9:
         d2:a4:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:20:35 2025 by rpki-client