This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File:                     6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier:          ym/Yc/5MlLwC1KoIrEr9P87JSW/RJgN/+Lc77K13zD0=
Subject key identifier:   5B:9B:1F:26:F2:CC:04:B0:8A:28:23:7E:55:B1:DE:61:4F:40:F1:69
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       019B3CEC6C826BCC99522E782FD0C9942F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number:          108B
Signing time:             Sat 20 Dec 2025 18:01:25 +0000
Manifest this update:     Sat 20 Dec 2025 18:01:25 +0000
Manifest next update:     Sun 21 Dec 2025 18:01:25 +0000
Files and hashes:         1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: YhIvh4orZtbb964vKcBNcbqtXLV3HbBfFDBTZ4B7xQg=)
                          2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
                          3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:ec:6c:82:6b:cc:99:52:2e:78:2f:d0:c9:94:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: Dec 20 18:01:25 2025 GMT
            Not After : Dec 21 18:01:25 2025 GMT
        Subject: CN=5b9b1f26f2cc04b08a28237e55b1de614f40f169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:80:d0:0f:02:8e:38:56:56:f9:4d:e2:e8:
                    d9:f3:a8:bd:a9:e1:62:7c:87:f8:81:c8:b8:51:85:
                    76:91:0b:76:11:eb:89:17:f7:96:19:7f:2b:b8:1e:
                    80:22:c9:0f:f7:71:2e:e7:42:d3:b9:45:2d:3b:7e:
                    2d:e3:6b:15:e7:97:0d:13:7f:0e:6d:58:c6:50:04:
                    42:e5:4e:67:56:f6:93:f1:cf:f9:45:6b:d3:10:c8:
                    7c:4b:af:2f:84:d5:4c:00:26:cb:9d:9b:5f:9a:02:
                    cd:24:be:cf:7b:2b:77:4e:8b:06:82:c2:98:38:5e:
                    7e:5b:f2:f3:a1:40:fc:e3:76:d1:1f:0f:1f:bd:f8:
                    10:9a:6f:18:29:d5:77:c7:83:e2:30:4a:4f:6e:5a:
                    65:77:15:43:4d:1e:03:ee:6a:c3:69:f0:40:26:b9:
                    5c:b7:88:a8:cc:68:75:a9:58:15:43:a3:a8:b0:ce:
                    c4:d2:f5:1c:70:f4:f9:a3:c1:3e:60:83:70:9f:57:
                    bb:1c:88:b1:0b:7d:b9:61:2d:29:be:1f:b0:ee:f6:
                    a3:1a:d6:1e:51:84:15:24:55:90:80:66:0d:ca:30:
                    a9:5d:d5:ff:f1:57:10:f7:ac:c1:4e:08:44:e5:08:
                    25:64:8c:c4:27:61:0e:e5:1d:30:85:16:67:c1:17:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9B:1F:26:F2:CC:04:B0:8A:28:23:7E:55:B1:DE:61:4F:40:F1:69
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:4c:f2:79:46:53:49:73:06:63:a3:74:7f:6b:80:df:3d:
         28:1f:84:96:56:f3:26:9f:f3:bb:e7:4d:4d:b2:68:4e:78:9f:
         aa:37:ea:d5:ed:60:53:3f:ca:ac:0f:94:58:0b:38:d4:3e:f7:
         01:3d:da:04:1d:6d:e8:8b:3a:3f:e1:91:f8:cf:c7:6e:53:b3:
         99:f6:58:1b:87:dd:7b:82:78:24:68:db:3a:07:cb:19:18:24:
         07:41:ec:e2:6c:d5:a2:da:9f:34:21:b3:24:91:0b:46:1a:10:
         69:13:a9:0c:4f:e3:85:d6:23:6c:8c:d2:3a:1c:27:b4:6b:7c:
         49:46:5c:da:f4:31:d4:b2:51:29:c5:16:14:17:47:43:97:d3:
         e6:cb:1f:85:c9:49:13:0a:e4:55:61:55:03:9a:c3:07:10:b2:
         c2:44:ee:15:67:6d:41:68:92:bb:45:08:4c:03:3c:b7:66:68:
         a3:82:f2:02:83:b3:ed:df:66:20:28:3a:45:f3:70:c4:de:af:
         7a:84:98:f1:0d:8e:dc:42:25:28:7b:a6:2a:bc:0f:dc:ae:52:
         93:cb:04:fa:1f:1d:df:4c:d5:64:30:ad:0d:37:dc:f7:a5:17:
         b4:6a:66:e9:dc:4e:62:39:73:b6:06:32:ed:3a:ff:e8:ef:1c:
         42:74:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:03:32 2025 by rpki-client