This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
File:                     6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft (raw, json)
Hash identifier:          1fozx5wDxNkYaYdhiE9tVsf446gKLFzbO/hJIiP324s=
Subject key identifier:   18:3A:2E:00:EA:DF:93:C4:E9:1D:D7:98:CE:35:FE:4D:AB:E4:1F:69
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Certificate issuer:       /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial:       019AEF75ED276CDB4701AFD6DBD46802E29A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
Manifest number:          1765
Signing time:             Fri 05 Dec 2025 17:01:14 +0000
Manifest this update:     Fri 05 Dec 2025 17:01:14 +0000
Manifest next update:     Sat 06 Dec 2025 17:01:14 +0000
Files and hashes:         1: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl (hash: oWsCOGW5XwoK3RRovjPFTFQKL8Ly7cqkF4OWBxPaOCg=)
                          2: HSuDnzcAlue63_e4y4OYNpRzfOM.roa (hash: 2RMQVOMX9MWINnX100maYIWBBtnYRoQ7hW/UubkuFuk=)
                          3: dseWtJsRtgXWG8ryLs-7XWYSHjA.roa (hash: dzJOgY0aN/2fDxN/Ny4dZY7HYiCJ2uahfS7o6nx3vAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:75:ed:27:6c:db:47:01:af:d6:db:d4:68:02:e2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf760c05773c15d73676450344668fefb723447
        Validity
            Not Before: Dec  5 17:01:14 2025 GMT
            Not After : Dec  6 17:01:14 2025 GMT
        Subject: CN=183a2e00eadf93c4e91dd798ce35fe4dabe41f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:a4:0e:10:2a:38:42:19:1e:35:86:36:0b:
                    a3:77:1d:57:da:08:3a:de:7a:34:ab:08:1b:1f:35:
                    1d:29:dd:ac:f6:7f:5f:d4:54:34:03:50:8d:96:fd:
                    49:b0:92:16:26:74:e3:a3:78:77:04:97:6a:38:3f:
                    aa:ce:81:4c:d0:0b:0a:91:96:6d:fe:22:85:0e:42:
                    f4:d6:db:e7:ce:55:87:ca:37:4e:b3:de:33:62:27:
                    29:0f:db:9a:28:9a:6d:68:25:38:88:6e:59:44:bc:
                    49:f4:c3:83:b3:a8:db:80:88:46:35:87:87:28:0c:
                    8d:55:c4:eb:5d:8d:47:36:ed:8c:94:ce:e5:cd:e8:
                    2e:92:47:2c:43:7e:58:a7:3e:78:d3:5a:87:2b:2e:
                    34:d6:fa:84:d0:dd:fc:08:09:d7:d0:da:42:87:6a:
                    be:b5:f8:fb:10:7f:02:57:52:76:41:28:09:ca:69:
                    48:19:82:26:02:9d:a0:81:89:3d:4c:c1:90:65:e0:
                    65:e2:fe:55:17:05:14:64:4f:40:f7:92:6f:64:2b:
                    82:d5:6a:85:0b:37:8d:4c:c5:ff:d4:b1:51:6a:14:
                    ad:b5:2f:d3:f0:71:a8:43:44:f5:49:9f:6c:b0:6b:
                    40:87:15:87:c0:c4:5f:69:2d:f1:e1:c0:7f:6c:84:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3A:2E:00:EA:DF:93:C4:E9:1D:D7:98:CE:35:FE:4D:AB:E4:1F:69
            X509v3 Authority Key Identifier:
                keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:b6:9e:fb:a3:46:b5:94:1c:d0:5a:d2:1c:61:2d:86:10:
         a5:f6:f4:4d:7d:53:47:bf:a2:fd:42:03:22:0b:b9:99:17:6c:
         7e:23:e0:e9:34:66:53:ce:b9:58:04:1f:f6:02:fe:37:97:2f:
         85:31:11:37:d2:90:c7:96:60:36:07:82:c9:45:64:d6:56:44:
         24:ff:ca:f3:11:a7:5a:ec:99:76:83:59:db:2d:86:44:e6:76:
         ae:30:76:25:a9:0d:8b:0c:b1:46:28:11:0e:90:6f:c3:ad:91:
         df:35:87:68:08:5a:43:9d:48:f8:8d:71:cf:00:b8:1d:30:ba:
         86:3b:4c:0b:7d:29:ac:48:c4:5d:ae:f1:32:06:ff:ee:1b:4a:
         4b:06:d8:f4:64:d0:43:5d:44:53:eb:01:2e:9c:bb:04:49:52:
         2f:2b:15:ea:b9:dd:d2:56:10:a8:53:8f:d2:07:84:44:9f:e4:
         7a:ea:1e:2c:30:a2:0d:aa:45:f9:a8:43:48:ed:73:5f:48:bf:
         6d:7c:51:ba:f6:b8:de:86:8d:2a:37:87:0c:9c:44:f7:24:d3:
         14:da:06:4b:b3:de:38:33:57:d4:ff:4b:e4:50:21:bc:1c:ad:
         0f:4d:ef:03:65:1d:cd:96:23:41:ce:55:80:b3:9a:90:1d:d5:
         5f:1b:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 23:04:50 2025 by rpki-client