This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          M3d35zPMFYowHImlnQQWnZ0yBo4bxabknF0NUBytOYA=
Subject key identifier:   76:5A:4D:77:1D:7C:ED:68:9D:C8:58:57:0E:26:5C:20:40:08:91:22
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019B1B0480B4E824B1BFDF7540E4FF67E153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0BE3
Signing time:             Sun 14 Dec 2025 04:00:38 +0000
Manifest this update:     Sun 14 Dec 2025 04:00:38 +0000
Manifest next update:     Mon 15 Dec 2025 04:00:38 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: P1YYgHDci1cd2MiZ73BnF7OUFtYEgHF42sMtpWR/g2g=)
                          2: 9bzay8DjASkJgeZB2kwc03IZl1E.roa (hash: YnIRrZnkb+ZaEUQ60KogsTVA40VhsogIgFHewsnR6g8=)
                          3: KmjbiHimHyCSJqDdxyTHZkugEG8.roa (hash: Zrhax2xy9NJstkGQJu2b3a8/0keBQS8DGEbXxifWfvU=)
                          4: sRfOMDtXEOJHKDPkg1fl6drHb14.roa (hash: OPssx4HcgdB0D4pn+Z4AVIamXsKn+0ENmWUN4IAnizk=)
                          5: ubczNdByBOFEzjOfXGNUERLx6Wo.roa (hash: tqIV/Xp5is3Az+5RTmCD8At4/sPjG7925jxe55yccsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:04:80:b4:e8:24:b1:bf:df:75:40:e4:ff:67:e1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Dec 14 04:00:38 2025 GMT
            Not After : Dec 15 04:00:38 2025 GMT
        Subject: CN=765a4d771d7ced689dc858570e265c2040089122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:3d:d1:0d:6c:88:54:95:3b:39:b9:b2:7c:
                    b6:bb:63:20:01:53:37:34:ab:01:0e:48:1a:12:07:
                    26:63:6c:e7:66:e1:47:ee:e8:86:26:8e:01:b8:d6:
                    d6:01:61:a1:6c:78:66:f6:b8:f2:e0:91:a3:1b:c7:
                    68:70:fc:e9:9d:23:a3:90:59:9e:a5:d0:94:96:3c:
                    5c:26:22:61:a9:2f:33:00:10:28:23:d4:48:a0:68:
                    67:ce:64:44:6e:42:6c:7c:cc:ff:6e:a3:df:f7:3e:
                    5e:f3:65:09:85:02:09:83:2b:bb:f2:d1:8e:4f:37:
                    ad:78:a2:3a:68:6b:f2:e2:87:30:72:61:a9:24:1b:
                    31:e7:13:2f:ee:0b:99:32:2d:f3:0f:fc:e4:74:eb:
                    4f:33:66:fc:4d:9f:65:05:03:3a:9c:ff:47:ea:fa:
                    d3:9a:fa:e3:1b:27:00:8c:58:10:7c:82:ee:42:b2:
                    b9:c7:22:d6:18:2b:7d:cb:6f:c7:08:bb:0e:c7:fa:
                    35:9b:f8:a0:03:a3:29:08:e6:3e:9b:f2:79:42:a3:
                    d1:a8:07:2a:97:4b:47:12:df:6e:97:98:41:57:d1:
                    b9:fc:80:07:05:1a:cf:b2:a7:f3:dc:d1:5f:73:27:
                    c3:21:37:61:28:9d:75:a1:91:37:f7:74:d0:66:8c:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:4D:77:1D:7C:ED:68:9D:C8:58:57:0E:26:5C:20:40:08:91:22
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:72:dd:81:e9:ed:70:b0:26:14:be:e8:f7:4d:6b:dc:c0:9b:
         d0:99:69:d8:e1:a3:ab:55:ca:f2:02:86:7e:f2:6a:50:17:4f:
         0b:be:34:6f:e2:a1:cf:29:cb:d1:37:63:2f:10:e0:d1:ec:40:
         27:78:8a:69:4c:1d:0f:8b:1f:1a:f6:32:0d:b8:84:dc:37:9f:
         c1:13:5c:71:6d:20:3a:de:99:7d:9a:06:2e:ef:06:9c:67:de:
         21:e6:07:22:c6:d7:03:1d:5d:c5:46:11:a4:37:1c:25:98:8e:
         cb:9b:f8:1e:75:46:0a:ac:1b:ed:0a:3e:5b:1a:9f:0f:2b:d9:
         5e:97:f8:77:90:46:bf:63:fe:ba:ca:24:83:03:e2:94:85:00:
         c3:a8:5a:42:c6:8e:47:97:d0:c2:c1:60:93:40:50:7b:7b:49:
         f2:c0:bb:92:e3:f6:e1:b8:1b:bf:71:24:c2:4a:cc:ce:0b:b7:
         59:3e:d4:6d:47:82:cd:83:7c:54:4f:0f:5c:63:27:68:94:29:
         a2:44:23:f8:ad:61:bd:84:cd:4f:6c:87:a8:c2:1e:05:ba:b1:
         c7:e5:ad:b5:a7:aa:ac:ab:66:54:38:8c:1a:71:d1:cf:89:b4:
         f8:77:32:57:13:42:9a:ff:f4:71:7e:28:e7:46:12:6a:b7:8b:
         a6:54:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:41:52 2025 by rpki-client