This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
File:                     6yOl9H7GfpJakkkauZskujcRg_E.mft (raw, json)
Hash identifier:          1bfWEy2wEkRQbxs5YUR3rgtDT8vycXzd7sCSKnwcyzs=
Subject key identifier:   61:7F:88:1B:B7:DD:4F:86:88:19:27:1D:B8:E0:9D:55:62:FA:A5:DA
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       019B3D90BE7179AD9AB4D5DAC59068487DDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
Manifest number:          0A56
Signing time:             Sat 20 Dec 2025 21:00:54 +0000
Manifest this update:     Sat 20 Dec 2025 21:00:54 +0000
Manifest next update:     Sun 21 Dec 2025 21:00:54 +0000
Files and hashes:         1: 0_VEKJrftYI-EHvTCLarg2lwsBA.roa (hash: kfpPpXA7rFVv7oH2r9JbqI4VMxVD5WROc79GogJD5qg=)
                          2: 6yOl9H7GfpJakkkauZskujcRg_E.crl (hash: ZyrPF4By/5I+jWutAX3GzK6o1drgysgkaJfBBrBYHfM=)
                          3: jHbTT3CA2aeWkakA_yKhSA0bnTI.asa (hash: v4qw7uZySxD4c6tXQD4nuNcL8EauWZcwC/VCuIhh2fA=)
                          4: muN4A4R4P7dSV7ABLHFva5p3gdQ.roa (hash: 7RttwWiy9qX2SJhBK1/HfXGPYBK3zQo/lPRpZaSS/8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:90:be:71:79:ad:9a:b4:d5:da:c5:90:68:48:7d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: Dec 20 21:00:54 2025 GMT
            Not After : Dec 21 21:00:54 2025 GMT
        Subject: CN=617f881bb7dd4f868819271db8e09d5562faa5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:a4:14:2f:5a:68:fb:90:e9:d4:19:c1:1c:
                    93:6d:1b:7f:5d:08:e6:d7:06:d2:cb:82:10:08:81:
                    8b:ce:92:29:5b:5a:be:00:1d:9c:d5:3e:e2:e5:d1:
                    cf:3a:32:9b:b4:05:72:61:2e:f9:43:51:89:f5:4c:
                    b9:44:f7:5f:96:9a:b9:0b:38:6c:49:2e:2b:18:18:
                    e7:c5:0d:51:25:45:51:14:34:d3:bf:5d:eb:4c:63:
                    30:4e:0d:c8:d5:af:9e:6d:98:78:78:8a:b5:54:d4:
                    c5:e2:65:9c:af:3a:6e:f9:a8:5c:55:82:bd:78:05:
                    0d:fc:62:da:81:b8:b7:83:08:4e:45:ff:08:f9:90:
                    7b:ce:e5:c6:11:05:8e:32:db:10:a7:da:62:bd:e0:
                    3b:74:30:32:31:25:f5:6a:3f:48:63:fa:25:02:4d:
                    38:a7:01:d1:18:0c:dc:b6:9f:07:c8:3c:e6:60:66:
                    09:1d:42:eb:f3:12:83:bb:37:dc:25:e9:a8:94:0f:
                    a9:ee:19:9a:c2:a7:4a:cb:78:41:0f:65:d8:e4:dd:
                    6b:76:26:ca:04:82:c1:07:07:dd:15:fd:2c:58:40:
                    c9:da:d2:b4:cf:3c:a7:3c:07:51:be:de:f1:70:5d:
                    b4:16:98:e4:05:68:fe:63:96:79:b5:4c:37:fc:d5:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7F:88:1B:B7:DD:4F:86:88:19:27:1D:B8:E0:9D:55:62:FA:A5:DA
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:a7:67:60:b5:49:6b:36:1a:35:1f:bf:0b:59:1b:1b:e8:
         68:aa:73:d8:e4:e8:59:1c:46:b4:f4:78:17:92:fc:1d:7c:7e:
         5a:11:0d:71:e3:b5:f5:de:47:1f:8e:fb:d9:83:0c:82:87:84:
         28:63:4d:73:5e:e0:6b:b4:20:26:60:f7:f9:ea:92:88:3c:c5:
         d8:3a:e1:ed:2e:54:ed:3e:78:01:a7:2c:82:07:22:6f:24:0c:
         ce:5f:d9:2c:00:04:ee:5c:5a:29:f1:e3:8a:4c:94:65:37:ae:
         1f:4a:b7:ea:51:60:7e:c2:05:b2:94:bf:6b:f4:ef:a5:43:9a:
         09:0f:84:e3:5f:cf:22:af:81:c4:e8:c1:2a:08:8b:9f:0d:e3:
         2a:f9:16:ca:4d:92:f2:4d:27:a3:0e:0f:5a:70:c2:74:3c:a7:
         39:73:50:67:a0:98:de:19:c5:0d:29:b4:f2:2f:52:c2:8e:88:
         91:1f:d7:7a:e4:be:aa:89:0a:ca:6a:c0:b9:09:90:92:8f:d7:
         88:3a:84:b8:f2:b3:bb:30:77:76:61:7d:7a:97:af:3c:7e:aa:
         d9:62:1e:a8:c0:1d:57:eb:ca:92:f7:ed:d9:fd:91:dc:de:62:
         35:55:b1:5c:f0:19:df:72:eb:e4:f2:49:c3:0e:1f:d4:01:25:
         42:4c:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:43:31 2025 by rpki-client