This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          b7ZpGUf8IIEIdKM2W3T6im98k3x4SLYUP528T13dkB4=
Subject key identifier:   AF:A0:26:7F:FC:65:2B:C3:A2:7E:88:81:D9:6F:87:44:FE:3E:5A:71
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       019B1125B371EBDF992D1B2F3B6D00923DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          06F7
Signing time:             Fri 12 Dec 2025 06:00:41 +0000
Manifest this update:     Fri 12 Dec 2025 06:00:41 +0000
Manifest next update:     Sat 13 Dec 2025 06:00:41 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: cxdAiwTkxSmZJqE4NLDabjy3zg65G4/2YIc3550s/dw=)
                          2: P_YrqrFp8qFACBOuK-Z6Qw7eZq0.roa (hash: Hcdm4ocRxMkNA/bbdADoMEzvZvEEy+9TR0wc9RV/RHs=)
                          3: WnbUZd8VzGXIZNm_6Ldem9PyqpY.asa (hash: h1Kql9WjztW+T3od8LCl8lNgzg0+OneCnlP0755zkcQ=)
                          4: XVvqkubcjpXUYCIxbNhycnQ01pE.roa (hash: rZf6JadzlMziKvvRnlTt78J5GO4AeM0Q9BFM/dim7dI=)
                          5: yCHyGP6y_3JxsTYXu_wUlW35yq4.roa (hash: 3cjwWinK+G/YNSXwHxq1hg/X6dL+bfSg6cUqRX7293c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:25:b3:71:eb:df:99:2d:1b:2f:3b:6d:00:92:3d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Dec 12 06:00:41 2025 GMT
            Not After : Dec 13 06:00:41 2025 GMT
        Subject: CN=afa0267ffc652bc3a27e8881d96f8744fe3e5a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:8f:47:12:62:61:69:2f:78:5f:f1:48:50:
                    d4:fe:38:d0:16:a3:47:4b:ca:40:91:bf:53:d0:2b:
                    be:65:40:61:2a:ae:4f:1d:93:06:11:45:fd:f6:40:
                    1b:5f:b4:b1:b1:95:fe:c4:15:de:99:f2:d5:fb:0d:
                    c1:ff:44:ef:74:4b:36:d1:82:3b:1a:ce:e6:62:e2:
                    30:cd:49:96:fb:f3:bc:bd:68:6c:36:58:1a:94:79:
                    2d:8c:e3:cf:82:01:e5:94:d4:23:bf:8b:3f:6c:03:
                    1f:35:43:98:5e:48:f1:36:01:32:bb:a2:4e:33:16:
                    b9:2f:1a:e7:ba:fb:fe:c6:cd:f4:52:f8:24:31:9c:
                    65:40:fc:db:d9:9c:cb:6f:02:89:bf:a8:ac:79:91:
                    c8:d1:ca:60:11:cf:89:c4:17:ef:eb:b3:e7:c7:34:
                    85:cd:38:7a:e4:49:6e:28:9e:19:3a:4b:9b:d6:76:
                    28:a9:bb:2b:25:87:4a:a1:5c:fe:b1:35:96:ed:ca:
                    3e:27:3d:f5:9c:97:e2:4e:ba:1b:d6:68:72:58:16:
                    76:3e:a5:d1:e1:a7:1f:04:74:44:00:1f:fc:b5:7d:
                    a7:f9:16:3d:53:f9:af:44:2a:64:26:9d:be:33:e1:
                    7a:d5:17:f4:a7:6e:27:9e:c0:97:c5:77:15:62:75:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A0:26:7F:FC:65:2B:C3:A2:7E:88:81:D9:6F:87:44:FE:3E:5A:71
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:2e:f3:71:81:58:17:27:c0:4f:dc:28:a8:b9:ba:75:a2:
         ae:9f:ad:6b:41:b4:4c:90:fa:9f:ef:01:22:c3:91:23:62:06:
         be:e6:3a:02:51:1e:79:b6:2a:eb:07:29:c8:39:cd:30:a9:d8:
         5a:80:84:46:22:b0:94:72:64:08:4b:f5:a1:96:c3:2b:a5:54:
         d3:99:23:2d:cf:84:fd:61:5b:df:bf:4f:2c:35:fc:df:ca:3e:
         2e:92:9f:da:6a:ac:1b:cb:6c:7b:42:3d:fa:a1:c8:e2:3e:65:
         b6:e5:46:ab:c9:44:08:72:34:18:e6:4d:a7:e8:c1:72:48:6e:
         49:a8:c4:35:78:fb:4b:e5:4c:09:87:79:ba:b9:20:d5:b3:88:
         93:57:79:4b:ca:5d:d1:ba:ee:de:6e:64:28:ac:96:7e:f5:3a:
         c7:12:da:73:5d:5e:c3:c0:26:d4:ed:ce:63:42:44:c1:49:22:
         58:bf:ab:b3:e9:29:fd:45:6f:a4:a1:d3:30:86:e0:cc:af:87:
         9d:6d:12:27:b0:1c:ed:19:3e:68:00:c1:6b:1b:9b:8b:d0:a9:
         a6:cc:09:8a:a9:ae:22:cc:ff:66:d2:46:6a:a6:1f:a1:a9:e9:
         b8:20:e8:eb:10:81:f1:e1:60:1c:c1:8a:50:e6:c1:1f:c9:94:
         96:af:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 07:28:37 2025 by rpki-client