This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          bnm/ivkwTzRzqns8qp9tHLzZ+mjGo7lWmr/amnMGpfE=
Subject key identifier:   00:6F:43:E3:D7:44:32:90:90:21:6F:14:FA:8C:2E:CF:2F:6F:11:29
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       019B36B40CD10A1302CE7C1B4CFC0F146C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0B92
Signing time:             Fri 19 Dec 2025 13:02:07 +0000
Manifest this update:     Fri 19 Dec 2025 13:02:07 +0000
Manifest next update:     Sat 20 Dec 2025 13:02:07 +0000
Files and hashes:         1: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: 5mSIYm41CPvDUOCQLGlu9cwa4H0scbEcYjAAYkpqkeo=)
                          2: fz0sJARZZ_TYinSLBp8Y46GRSAE.roa (hash: k5Klk32fNc1hp3soFN9xokf0fk3JpGUEVYNQtXZtdqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:b4:0c:d1:0a:13:02:ce:7c:1b:4c:fc:0f:14:6c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Dec 19 13:02:07 2025 GMT
            Not After : Dec 20 13:02:07 2025 GMT
        Subject: CN=006f43e3d744329090216f14fa8c2ecf2f6f1129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:88:44:89:36:04:8d:8c:51:1f:65:5c:e5:db:
                    cd:87:9c:34:80:e6:66:51:bc:86:19:59:64:dd:bf:
                    a8:2e:b9:46:88:a7:a6:24:31:8f:0b:4f:c6:b3:31:
                    29:9c:6d:d9:70:8a:c3:b9:4d:25:45:0f:08:aa:d7:
                    98:7e:a2:f0:8b:e7:73:eb:71:e8:f5:c8:4e:d2:47:
                    72:19:f7:70:65:38:c0:bd:ff:90:fb:34:4a:91:84:
                    9c:25:de:24:3d:a3:58:f6:6c:41:91:aa:cb:8b:9e:
                    bd:1a:9c:68:38:03:81:98:2f:0f:0f:d5:68:bf:db:
                    6c:0d:dd:df:1c:7d:f8:2c:b6:3d:23:f3:95:8d:f2:
                    40:e5:06:73:f4:21:10:e2:3a:74:5d:23:d7:44:3d:
                    63:95:24:d2:70:c2:36:72:07:c7:90:c6:92:84:75:
                    bb:95:51:ed:8a:98:51:dc:d8:db:66:7c:5d:6c:f6:
                    a6:07:9d:ad:7a:01:7b:27:7b:75:28:a1:c1:ea:02:
                    cc:97:a2:7f:97:02:aa:de:02:41:c5:5e:21:03:0b:
                    27:f9:72:23:2b:41:07:3c:8f:fd:8e:55:94:55:a7:
                    02:f4:59:d8:13:6a:2c:e9:6b:bf:ee:9f:54:42:69:
                    4b:69:1a:5b:7b:dc:3a:4a:d8:e3:4f:6d:aa:0c:72:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:43:E3:D7:44:32:90:90:21:6F:14:FA:8C:2E:CF:2F:6F:11:29
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:f1:c7:d5:70:80:6f:bf:45:e1:7c:47:ab:16:2b:74:20:
         2d:55:0a:3f:02:f5:c6:eb:c6:2d:a8:a1:a6:03:8d:76:6f:1e:
         da:57:c2:b3:ad:e7:d6:da:39:d9:a7:e5:51:b3:84:3f:cf:f6:
         7e:05:7b:5a:d1:9f:5e:6b:01:85:22:74:fb:59:5a:15:aa:35:
         ce:17:35:c6:f0:b2:63:83:5a:46:de:69:c4:f9:2f:75:66:98:
         cc:af:8b:26:f8:7b:ba:22:ff:e4:92:7d:87:97:78:06:30:a5:
         5d:e6:9d:5e:33:d9:ec:00:b2:45:e7:46:3a:5a:d1:11:2d:da:
         c7:ad:6a:d0:d5:2a:0b:ee:30:fd:8d:ed:f6:37:a9:85:23:24:
         b1:d3:48:ce:ee:a3:90:4e:21:2a:91:31:01:c0:22:f1:2d:7c:
         d6:0e:45:eb:4e:cb:fb:19:3d:6b:7e:95:11:d7:4c:c6:53:02:
         b7:d5:9d:cb:20:72:ff:ef:a1:e5:b0:7c:09:d1:24:e6:87:1b:
         6a:41:4b:ad:1c:b4:c2:d3:f5:d8:9f:d2:21:32:0c:e1:ba:e7:
         f9:8a:59:27:f7:6f:68:8f:44:c0:96:2e:29:30:bc:8a:6e:15:
         97:e2:45:1f:33:9d:b4:35:7a:36:48:be:fe:01:40:ab:5b:59:
         cc:6b:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:32:57 2025 by rpki-client