This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
File:                     e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft (raw, json)
Hash identifier:          jxKKbUyHjek/FTXrRCYiYAmD3zyVAEtt/ffj3X8U25k=
Subject key identifier:   8E:84:51:E1:F7:37:E8:5F:6E:15:A7:A8:44:75:6C:D6:A0:96:F8:7D
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       019B0DB69C587F34A3EE5756CEE5780C05BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
Manifest number:          0D6C
Signing time:             Thu 11 Dec 2025 14:00:29 +0000
Manifest this update:     Thu 11 Dec 2025 14:00:29 +0000
Manifest next update:     Fri 12 Dec 2025 14:00:29 +0000
Files and hashes:         1: 7X_WSvEFamMfNZjyNbtSSNp_DT4.roa (hash: BIAWYZiJ2Q5byj31tXy8i/6T7c/qS05IEfJLF0mtR+0=)
                          2: FsJ3zITAe84c1D5csHES5hjciz4.roa (hash: YNKbDTh8tdjiYkEUi21i1eLdfiJOkLdo8vV3R3CkNJc=)
                          3: P8Eoq9RR0aGjSpGwX1OgPUIROxQ.roa (hash: s3K98YwNuWaxYBAIxIP0FKSAzloX75bONeEAcTalG7c=)
                          4: Zokk9-ke3e4g6tf_NzEP8-t6QmQ.roa (hash: LDa+p34hUBYWv+O47IPPq2d0lQ+F5fOMupLZzH7le48=)
                          5: e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl (hash: EqIYvm8HT60mU8v05/CHilQplsWAdYgWgvWGnHgGH5Y=)
                          6: yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa (hash: UvfLf0kl1I/2dxM34pZ3U07NlO8Q7BM1QyFjXwpJPeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:b6:9c:58:7f:34:a3:ee:57:56:ce:e5:78:0c:05:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Dec 11 14:00:29 2025 GMT
            Not After : Dec 12 14:00:29 2025 GMT
        Subject: CN=8e8451e1f737e85f6e15a7a844756cd6a096f87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:7f:bd:b7:0c:96:88:6d:70:51:6a:ad:01:
                    18:3f:50:e0:de:0c:5a:dc:a4:e9:31:55:01:0d:37:
                    4d:9a:4c:1b:3a:71:e4:a7:5d:fa:40:1b:c7:f5:e8:
                    9d:5d:39:23:5d:9f:f0:b4:0c:ee:75:0d:89:55:ad:
                    2e:dc:73:e6:7e:71:d4:eb:ca:60:5e:60:83:d3:6a:
                    6c:ad:2b:69:d6:6d:50:5b:d7:26:f8:24:57:a9:0e:
                    4e:17:20:8a:a7:ec:fa:f2:3a:83:54:02:0f:b2:9b:
                    bd:d6:ff:5a:31:b6:ab:b4:ee:14:b7:42:5c:de:8f:
                    63:58:98:ba:f7:be:ac:68:cb:f9:51:9a:5c:5c:f7:
                    e3:9b:b4:f6:b3:2d:77:42:63:19:31:f0:91:19:4b:
                    43:85:44:3b:de:4b:89:c6:00:de:77:0d:11:09:67:
                    c8:27:9f:95:d7:6a:0a:a1:ec:48:d6:78:e5:d1:57:
                    b0:1f:d4:fb:0f:b1:26:79:6a:a7:4f:04:c0:48:db:
                    b4:a8:24:8f:08:72:95:78:3c:ed:d1:df:d2:78:5b:
                    b2:c8:2c:b8:e0:e4:d4:0f:7d:09:fc:e3:bd:13:45:
                    6d:eb:fc:b0:df:0e:e5:57:fe:7d:0d:61:79:41:12:
                    23:a0:99:24:36:ef:20:80:58:e7:44:24:30:ab:ee:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:84:51:E1:F7:37:E8:5F:6E:15:A7:A8:44:75:6C:D6:A0:96:F8:7D
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:87:0d:86:11:f0:99:f6:ec:11:3d:a9:a3:c0:b5:0a:8b:43:
         12:b4:a2:1b:36:d3:7d:53:8f:b1:a3:cc:70:b5:e3:92:68:da:
         0f:d5:45:ff:e5:96:e1:40:31:11:9e:41:36:2e:64:23:c2:1f:
         f7:1c:a2:9a:dc:d7:55:b2:a7:88:a9:e2:e1:a0:89:12:a6:3d:
         b3:df:f5:3a:21:0d:86:82:25:1c:96:f1:b0:27:f6:a5:54:6d:
         cc:38:16:5b:ab:63:17:f5:15:c4:ca:ee:cd:87:d8:2d:ec:ae:
         46:3c:6f:22:37:d2:51:bd:c4:ee:ff:e4:00:e0:24:e8:f7:3e:
         30:65:63:51:dc:2b:8f:f1:16:3f:78:aa:3e:12:18:6b:de:7d:
         c4:fd:33:87:90:72:b8:76:d3:c1:89:81:bb:a2:ae:81:a0:fc:
         56:52:65:5c:df:1f:8a:5e:65:f5:b6:a0:d8:3a:b3:8f:f7:62:
         ff:4d:4c:b5:c4:dd:97:20:30:d5:32:ae:01:87:21:76:81:d6:
         fe:30:83:09:c4:4e:fb:fa:46:43:5d:0b:ba:70:91:bb:7d:10:
         8f:8b:2e:04:f2:83:8e:a1:9f:e3:08:fd:7c:cf:39:4a:10:8d:
         19:90:2b:b7:17:8f:57:97:f3:1e:35:42:2d:9a:1c:49:e7:8c:
         c3:62:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 16:29:00 2025 by rpki-client