This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
File:                     S6P83Yf0VkMMzLLYY45hSM06Euw.mft (raw, json)
Hash identifier:          HA36wFsM/26Wt7vbY2pH6SPFLqkaxrqv2Jd8fg57S5E=
Subject key identifier:   D2:1E:E1:EE:F0:29:3D:5D:8E:86:31:DB:09:A1:39:DB:B5:66:44:44
Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Certificate issuer:       /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Certificate serial:       019B1012FC4B4806BCD03FAFD51B9A77A889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
Manifest number:          1358
Signing time:             Fri 12 Dec 2025 01:00:38 +0000
Manifest this update:     Fri 12 Dec 2025 01:00:38 +0000
Manifest next update:     Sat 13 Dec 2025 01:00:38 +0000
Files and hashes:         1: Luq1AGm-0yiU8GrI6ZL8kYwyd3I.roa (hash: 35d7vaos91aXg7eDTyQtgIWe7y3Nm+JQYfuUr0WlJf4=)
                          2: S6P83Yf0VkMMzLLYY45hSM06Euw.crl (hash: IFsfenaaXazchLfjmRQBV9PwmmZP2e412/VmmFMan/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:12:fc:4b:48:06:bc:d0:3f:af:d5:1b:9a:77:a8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
        Validity
            Not Before: Dec 12 01:00:38 2025 GMT
            Not After : Dec 13 01:00:38 2025 GMT
        Subject: CN=d21ee1eef0293d5d8e8631db09a139dbb5664444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:9a:c7:00:d9:ec:96:a5:b1:04:15:79:03:
                    11:b4:81:06:3d:60:7c:94:1c:fb:90:46:0f:0b:db:
                    b7:b7:11:e1:0f:25:44:e5:b0:02:5f:7d:14:b7:7a:
                    24:8d:0f:4f:74:60:f7:e7:17:73:99:93:6d:39:40:
                    db:4c:ac:15:88:d8:a1:89:3f:a5:fc:5d:3f:2f:ca:
                    9a:b8:76:04:e0:87:e5:8d:4c:d4:47:18:2c:bb:5b:
                    bb:d4:85:8d:af:65:20:28:7c:d8:34:7a:62:ac:12:
                    13:47:c0:eb:46:f0:f6:9d:08:aa:65:52:61:ef:ab:
                    18:a1:f3:37:4f:31:8d:be:5d:c5:02:b2:07:49:35:
                    7c:00:c8:e3:1c:42:0c:2f:e7:5c:a3:95:67:3a:06:
                    a7:d3:81:c6:18:9e:ff:69:33:3e:73:b5:93:3f:c1:
                    09:d3:c9:f7:96:67:75:63:a9:02:61:f4:75:35:13:
                    ce:fe:de:32:64:4b:b3:c0:af:bb:07:51:9a:a0:6d:
                    fc:68:f7:6a:a4:e6:02:08:83:c2:8a:1c:aa:9c:bf:
                    d0:8d:06:ad:79:7e:53:dd:2a:be:10:6a:4d:cf:d1:
                    fc:06:df:8d:f2:8e:3e:fe:22:54:e7:c5:eb:a6:9d:
                    6f:54:de:c4:84:24:ec:d7:0b:48:7b:73:b2:23:e5:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1E:E1:EE:F0:29:3D:5D:8E:86:31:DB:09:A1:39:DB:B5:66:44:44
            X509v3 Authority Key Identifier:
                keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:0a:1c:b0:d7:1d:41:b3:b0:3d:f3:dd:79:b6:f7:86:0b:
         fe:85:55:6b:54:ee:95:3f:3e:d2:a7:b6:55:11:bd:55:3a:5e:
         6c:f2:6c:b7:9f:7c:7c:51:e7:a8:6e:12:78:cc:43:89:c7:08:
         1c:eb:c1:25:aa:d3:a0:2f:17:f7:73:47:98:39:cf:db:ed:5a:
         1b:08:26:3f:36:09:0e:e0:bc:b2:88:44:32:31:a3:30:f8:c9:
         6d:c8:a8:dd:6f:38:2d:40:d0:0a:ae:3f:f5:a7:d0:b0:7a:19:
         0b:4b:71:d9:d4:fe:d9:59:43:f6:c2:c7:02:05:e5:ea:ae:b2:
         7b:4a:eb:35:5f:1c:97:37:41:47:42:fc:da:9f:be:ba:1b:88:
         e0:07:2f:9e:ac:19:f5:76:4f:3c:33:46:cc:11:8c:e6:8b:96:
         b8:5e:ce:7a:45:0b:cf:3c:0d:55:b7:0a:47:5d:d8:26:11:8f:
         34:12:d6:d2:0e:60:9e:62:17:a2:5e:e3:2e:b6:07:6d:30:d6:
         a7:76:3b:95:ba:d8:7e:16:73:6f:b6:52:88:7f:e2:04:0b:fa:
         e5:c2:18:b6:1b:32:b3:b4:05:05:1a:f5:55:58:bc:4e:c3:70:
         ab:99:ae:93:3b:d0:6e:6e:f4:ea:db:f5:c7:1b:10:7a:08:23:
         cb:d6:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 06:11:21 2025 by rpki-client