This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
File:                     6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json)
Hash identifier:          HFcCRdk1pgP2+yVz2s0MjgJLLGZzZx9eCwsuPjmceiM=
Subject key identifier:   1D:6C:09:23:10:E7:D7:FD:8C:55:F1:71:D0:8E:B8:82:13:8B:89:A7
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019B1202B1AA84A76697553955C622815B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
Manifest number:          1787
Signing time:             Fri 12 Dec 2025 10:02:04 +0000
Manifest this update:     Fri 12 Dec 2025 10:02:04 +0000
Manifest next update:     Sat 13 Dec 2025 10:02:04 +0000
Files and hashes:         1: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 7evo5pSk8IU+Nr3Qu1hBaPT0uf25fUZ2miDnGdWAnGY=)
                          2: 8ifx7KKJ18pryNHwF1j4-Fc64gM.roa (hash: VaIkHBJSp4yitHY1eixtkQXqBMvBgkd5WICUJNcd2K8=)
                          3: BO1ltB2867u60oaiDsy_-XsvL88.roa (hash: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=)
                          4: FoWNQ1gpwJC_vJTYQPjNq4EOPsk.roa (hash: y3YmRhUlwwI5SoZwTRIclzEsG8VBx6W5icxmsvJXHic=)
                          5: Q_XBBiAk4qHgl5xyRFCeUl8e3VE.roa (hash: sADh7knGI+0KPR0TD0XBdBdTNm9tN3/eGMw1gHZe2VI=)
                          6: cPczL7BSG5C-UOorLa44AbTPVd4.roa (hash: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=)
                          7: jIQE6oG-USVQsaVIsuMgVZrbPS8.roa (hash: tj3eChM7EThfXzNYj4xO6MKRf71fqyAWWs5gIA5ClkU=)
                          8: nCj-HurrM8I6ZuYeTftMdm0Nisw.roa (hash: f4dhcwMgx6vMMDpRWe3qOH6ZusltLaqZhMj8z/Gm8hQ=)
                          9: wPWSAuQLoLC84i_wxl8zAMN7M_I.roa (hash: AX93UGQS0hHBTCeSbLVGxtGmi8vpmUf8TykhODf8ipI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:02:b1:aa:84:a7:66:97:55:39:55:c6:22:81:5b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Dec 12 10:02:04 2025 GMT
            Not After : Dec 13 10:02:04 2025 GMT
        Subject: CN=1d6c092310e7d7fd8c55f171d08eb882138b89a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:4b:46:cd:48:81:78:d4:30:3f:08:a8:8d:
                    5a:2e:6e:05:7c:17:a0:33:d5:be:f8:bd:35:10:d4:
                    6a:a1:b4:b2:ad:55:fb:20:72:6f:aa:92:c1:80:ed:
                    0e:69:4a:07:8c:0b:98:52:e5:25:b5:df:13:34:fb:
                    a1:22:68:f4:5f:94:3b:2c:18:17:c7:0d:42:b2:51:
                    42:18:e2:cf:78:b3:8a:93:8d:fd:08:41:c3:bb:f8:
                    7f:d4:bf:a1:9f:c4:07:d6:84:c1:76:84:ca:1c:f4:
                    80:68:0e:f4:b5:78:d1:e6:43:93:eb:d7:f5:e1:a6:
                    03:8b:33:8b:f0:07:da:d4:7f:bd:5b:29:d7:c0:d1:
                    fb:7e:95:67:04:39:7a:e3:30:66:7d:fe:db:3c:35:
                    df:be:7c:21:ed:19:4d:d5:16:3f:20:2d:05:fc:b4:
                    66:39:97:6e:06:c1:a6:da:72:34:f3:16:19:70:be:
                    5f:d7:38:d4:f8:84:8b:31:95:73:98:e1:0e:27:e3:
                    26:68:56:a4:ee:f4:fb:28:35:ff:d4:e9:5f:fd:76:
                    09:0d:8e:67:cd:c7:54:90:e5:ad:76:69:28:a4:5e:
                    03:e5:2d:f6:fa:59:4b:ff:69:dd:bf:74:0b:b5:54:
                    34:42:b2:20:f9:c0:53:f2:d7:5f:7d:1b:f6:48:ee:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6C:09:23:10:E7:D7:FD:8C:55:F1:71:D0:8E:B8:82:13:8B:89:A7
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:af:87:28:a0:39:99:af:76:9b:ff:e9:23:12:83:85:a1:cd:
         71:63:19:ec:ae:62:e1:2b:f9:bf:5c:4d:a6:a8:e4:8b:0c:c0:
         37:66:62:e9:80:5d:c8:05:81:77:8e:c0:ed:b4:73:31:48:a1:
         a0:b8:1d:d2:7d:c4:41:c6:47:ed:8d:db:43:7e:b2:01:36:e3:
         82:e6:8d:59:18:57:e0:75:48:69:3a:bc:2c:0c:f3:8d:a4:a8:
         3b:2f:0d:8d:93:0e:c8:3b:a3:2e:19:75:e7:74:0d:a9:b4:f0:
         7b:fc:ba:77:b9:70:78:80:fd:4e:68:2d:51:bf:77:81:89:83:
         fe:48:62:77:f0:64:b7:e6:ad:5b:9d:01:da:c2:bd:bf:fa:8d:
         ca:20:34:9b:ed:6c:83:7b:4f:31:96:0e:83:e2:21:0a:33:31:
         f3:1a:bd:d8:5f:d4:19:1d:0e:40:fa:ed:8a:7b:7b:48:f3:ad:
         06:53:1d:39:b5:89:53:09:32:b7:0a:09:c1:17:ce:b2:8a:a0:
         15:db:5c:05:b3:64:ce:35:40:f6:00:0e:63:29:57:2b:32:80:
         34:bb:58:00:df:42:2c:6d:e7:5e:cc:9e:1d:80:43:ce:c5:f0:
         15:91:ea:dc:1a:ff:3e:52:18:24:cc:9d:35:a2:cc:c9:69:7f:
         b5:73:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:22:11 2025 by rpki-client