This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          X+hHfVBR1nVFHfchhEfJoS8AQ4J5vgxs1B+vm0igyc4=
Subject key identifier:   C2:70:64:C2:7C:EF:B0:F4:F8:2E:B6:60:74:78:4C:1B:7D:43:1B:99
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       019B5A883A4F7D123E401F9BE2371AD9204A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          179B
Signing time:             Fri 26 Dec 2025 12:00:35 +0000
Manifest this update:     Fri 26 Dec 2025 12:00:35 +0000
Manifest next update:     Sat 27 Dec 2025 12:00:35 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: pl1Ojaf8NIo6fJhmb4P4FHdawJT82Woy2Bq22/8Iimc=)
                          2: rf8as8g6xWKnisNIKjg2yUHYSP8.asa (hash: 8dhhDgHt2G51sZMibCcljY1LkjkngjQiVuau20/yfQM=)
                          3: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:88:3a:4f:7d:12:3e:40:1f:9b:e2:37:1a:d9:20:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Dec 26 12:00:35 2025 GMT
            Not After : Dec 27 12:00:35 2025 GMT
        Subject: CN=c27064c27cefb0f4f82eb66074784c1b7d431b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:a2:0d:9f:8c:e1:7c:22:eb:63:2b:46:20:
                    0b:9a:7c:84:0a:61:08:3a:c4:cc:62:c8:1b:a4:1f:
                    d0:3e:d6:55:66:8d:e6:98:05:41:f7:98:7c:84:a5:
                    37:99:47:b0:b8:ac:71:45:de:ef:01:12:e6:f1:03:
                    2f:cf:37:87:dc:5c:75:25:59:9f:9f:6d:0c:3a:ff:
                    27:25:ee:5d:8a:a4:9f:1f:e8:a9:22:b5:9b:d0:7c:
                    f9:4e:fc:b6:90:1a:72:62:91:fc:55:98:02:3c:d9:
                    c0:2d:9a:f4:d9:9d:e5:65:ac:8a:24:f9:f1:ff:21:
                    44:c2:bc:f2:29:40:83:31:e3:5f:55:33:ad:c6:8d:
                    08:4c:c0:9a:70:73:e9:8f:bf:18:fb:8d:02:8b:79:
                    bf:de:b3:78:fc:d6:f5:1c:40:8c:dc:9b:bb:93:23:
                    67:19:69:73:0c:74:42:18:2f:99:a2:5e:6f:ab:b7:
                    d2:a8:60:64:5e:3d:3d:da:44:49:21:5f:a3:dd:8a:
                    13:3a:40:c0:e2:27:e9:47:f3:03:23:db:b7:f2:f1:
                    c0:ee:99:6c:37:9e:39:bf:e5:1e:59:60:bd:53:44:
                    97:ee:d2:c6:b0:99:8e:aa:de:14:1b:4f:4d:db:da:
                    cd:c9:d3:b7:11:b5:80:8d:62:84:3f:08:d8:1a:eb:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:70:64:C2:7C:EF:B0:F4:F8:2E:B6:60:74:78:4C:1B:7D:43:1B:99
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5f:f1:be:69:6a:63:cc:86:69:b3:fa:99:65:b1:ca:f4:af:
         d7:d1:63:35:f0:57:65:82:dc:91:a6:4a:be:6b:fe:95:4f:99:
         48:27:ca:92:7a:dc:3f:8a:06:36:c0:43:dd:4c:4f:2c:fb:80:
         09:34:9d:35:26:08:ef:58:c7:3f:ba:8a:30:21:1a:58:48:57:
         d6:8f:fb:f5:1e:05:b2:bb:d0:99:d2:28:21:16:a9:05:3a:f1:
         f3:a4:ce:be:59:fd:52:f6:5c:de:8c:b4:60:ce:b9:e8:e5:00:
         a2:69:61:8b:1d:65:3f:2a:63:e8:bb:c0:21:1e:2f:88:07:f5:
         44:7b:0d:ee:97:2d:06:7f:87:21:8c:57:fc:46:1e:86:e8:b2:
         90:ab:45:ae:a2:38:45:af:06:e2:cb:7c:46:a7:9f:43:4c:6a:
         34:30:3a:35:b3:bf:ce:93:cf:8f:c8:9d:23:d2:0a:41:5d:cd:
         96:64:c1:ca:a0:fd:f8:17:1a:2b:16:7f:9b:d4:cf:26:b3:2d:
         a0:e2:c6:ee:c2:b9:fe:e1:3f:e0:7a:32:ce:35:f0:79:99:2b:
         79:f9:3f:e8:4d:46:16:88:39:53:37:78:bd:92:37:c2:f1:22:
         4f:6f:32:78:4d:7e:19:b2:4f:b3:da:3c:34:7f:0b:d0:fe:51:
         00:4b:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:00:29 2025 by rpki-client