This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          vu/ZuwaKpVweIuK7xsyCPWv36HE1ByIRjap+Nu1aDfk=
Subject key identifier:   91:F6:D1:4F:7D:76:D5:1A:F5:32:B0:06:26:18:18:EC:52:FB:A1:DD
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019B06A2432512E19F7DD79E188A40447282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0B77
Signing time:             Wed 10 Dec 2025 05:00:55 +0000
Manifest this update:     Wed 10 Dec 2025 05:00:55 +0000
Manifest next update:     Thu 11 Dec 2025 05:00:55 +0000
Files and hashes:         1: 1-ZSGsCHMEIt-zdJlJw6apZX2Wrw.roa (hash: jSCF0+9de5r9THp7fXr99R1xtgUUcEM1y8WA8CvHwCI=)
                          2: DgOZwnFO8AhdHBgLmgcNwBsxDAc.roa (hash: h4KsWMGXdyj/8wNpX8sYIR4JqIdgBrnn4TPvXbnDMpw=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: VPTXwZtlXEegx8k3fNewiuqz6pPeA3GBURkxuvAkHY8=)
                          4: RR6pycHaTPsIe6GNf5JqSPKOd08.roa (hash: obNVdba5R47x54SSSjM+mOVGtvigMbqXtqMicMTi4UM=)
                          5: U9VsXfCDsGKpry_AQUbKGYz8tRI.roa (hash: SBzZHW/ujJ7yylMaWV4gG1R9SCvZEB29AnTHypdaXgY=)
                          6: m3gokZ3oqrQAkT9aNHEn43WdviM.roa (hash: MQtM6YjLXyL+j/Sfr97BhpgH5ErvjAr3xvEfcREF22c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:a2:43:25:12:e1:9f:7d:d7:9e:18:8a:40:44:72:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Dec 10 05:00:55 2025 GMT
            Not After : Dec 11 05:00:55 2025 GMT
        Subject: CN=91f6d14f7d76d51af532b006261818ec52fba1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:32:20:1b:82:87:78:bd:70:ed:c9:61:12:
                    db:f8:4a:d7:1b:a0:52:08:41:ea:cc:98:53:41:6d:
                    3d:ce:66:dd:ba:06:1c:17:5e:b3:11:c9:70:19:cc:
                    f8:3c:a7:49:ad:14:e2:37:78:36:30:d0:66:16:cb:
                    3d:99:f5:a8:12:de:51:82:0f:85:5e:27:08:00:9a:
                    bc:96:c3:72:a1:71:0d:c1:7e:4e:07:75:d9:2d:a7:
                    64:43:19:44:3c:33:32:a3:fe:0e:8c:4a:aa:26:95:
                    3a:13:f5:a0:aa:05:5e:90:d7:a5:69:c5:0c:4b:4d:
                    9e:2d:6f:36:66:5e:31:db:fb:b5:ad:90:ed:4a:40:
                    af:4a:31:b7:ac:28:d4:15:20:46:77:56:74:6d:fd:
                    32:9a:ff:ae:03:bf:1f:3a:6c:79:9a:7e:67:dd:d7:
                    74:11:e5:e1:11:98:a4:c0:db:ae:13:57:a4:d8:fd:
                    b8:22:d4:7d:31:d1:ff:16:9a:8f:69:2d:dd:b2:c3:
                    ee:e9:38:26:c4:3d:2a:b3:5f:da:7d:fc:d1:4a:c0:
                    54:74:8a:a2:7b:0a:be:7d:51:0a:7f:48:19:5c:40:
                    87:c7:7b:4a:ea:9a:be:a0:95:c3:2d:89:3d:d9:1c:
                    74:63:e9:de:f6:81:69:50:b8:ed:44:ba:29:8e:f9:
                    be:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F6:D1:4F:7D:76:D5:1A:F5:32:B0:06:26:18:18:EC:52:FB:A1:DD
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:24:50:b6:7d:22:d8:ee:35:14:1f:c2:36:75:96:57:cd:
         a3:de:f0:65:6f:b7:0e:12:35:1b:d1:96:d8:c7:d3:c8:da:7e:
         85:c1:e4:83:ff:7b:7b:38:2e:5a:e4:fe:bc:d0:2d:8d:35:7a:
         03:69:18:30:43:85:e5:cb:4c:a2:ea:b3:90:2f:53:dd:16:1d:
         9a:f8:79:12:57:ae:7f:81:5a:ce:38:2e:9a:15:db:cc:66:dc:
         4c:38:bc:2a:71:35:9b:6a:05:91:d0:62:78:0d:31:f7:25:18:
         30:ff:b9:a0:f3:7e:0f:b7:b0:e1:26:e4:96:f7:50:87:b4:f1:
         75:09:f0:64:19:86:68:d9:b1:3d:cf:a8:5d:2d:b4:f1:64:c5:
         eb:ff:84:c7:5d:a6:d0:c3:19:64:50:dd:51:36:70:3e:de:70:
         7e:fc:77:e4:1d:8f:3c:88:82:8e:5a:a3:54:6d:45:07:72:ec:
         49:16:3c:77:a3:0f:38:51:e5:2d:e8:71:42:36:e6:c4:8c:62:
         ea:51:f8:51:6b:9f:b0:6d:74:79:92:88:f2:7c:1b:98:26:f5:
         7a:7f:33:f2:7c:7e:c6:4a:56:05:2c:87:cc:2b:72:48:f7:67:
         3e:12:3c:70:ae:46:ac:c4:c9:b4:f5:d5:8a:e9:b5:34:f9:2c:
         07:19:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:27:52 2025 by rpki-client