This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File:                     bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier:          VL5+r9ARgGrCMed205bioPSWorm1vsttR+NlDVFD/G4=
Subject key identifier:   04:B0:1C:7F:69:D6:83:94:F5:C1:BA:60:98:7B:9F:50:DB:50:FE:BA
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer:       /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial:       019B2475EB66BA1F6286F90549DD47CB4778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number:          0A86
Signing time:             Tue 16 Dec 2025 00:01:06 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:06 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:06 +0000
Files and hashes:         1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=)
                          2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=)
                          3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=)
                          4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=)
                          5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=)
                          6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=)
                          7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=)
                          8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=)
                          9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=)
                          10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=)
                          11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: Xo9ma42sQ3KlyqLgWF55qYKP57dZvCfsMJDLKBwvSkE=)
                          12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=)
                          13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=)
                          14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=)
                          15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=)
                          16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=)
                          17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=)
                          18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:75:eb:66:ba:1f:62:86:f9:05:49:dd:47:cb:47:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
        Validity
            Not Before: Dec 16 00:01:06 2025 GMT
            Not After : Dec 17 00:01:06 2025 GMT
        Subject: CN=04b01c7f69d68394f5c1ba60987b9f50db50feba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:14:6c:97:21:2e:39:8d:fc:4e:ad:4a:e0:
                    e8:f5:11:b9:c3:c6:a5:67:5b:e4:91:ae:01:82:75:
                    be:91:72:a0:7b:dc:27:48:de:7d:f1:31:4c:f5:0a:
                    ef:2d:a9:17:71:7a:d8:3c:38:6e:bb:7a:e5:34:9e:
                    73:81:04:6f:92:da:77:68:5e:dc:a6:52:43:d4:1b:
                    90:59:1e:6d:95:7a:d0:fb:bd:94:20:44:43:47:c9:
                    dc:e7:e2:0c:9f:90:b1:07:23:b7:ea:83:8a:98:13:
                    18:a1:bb:d2:b5:eb:30:09:13:49:81:fd:c9:60:1a:
                    ef:95:51:93:f9:aa:93:25:26:b0:0e:02:c0:fe:72:
                    11:2f:52:fa:59:96:c7:86:0f:36:d2:7f:1e:fb:10:
                    92:b5:a9:d4:f7:29:47:e0:dc:5c:39:2f:1f:4a:86:
                    40:83:2d:dd:46:45:d2:fa:7c:ab:b4:85:46:01:0e:
                    fb:53:01:61:39:0d:bb:a9:5e:2b:8d:ca:07:85:4e:
                    db:7d:8f:42:ea:c1:21:40:bb:94:da:1c:f0:fd:44:
                    78:9d:b3:11:db:db:7b:d9:78:88:aa:ff:18:fa:36:
                    d1:31:f9:f8:7f:22:0c:9b:86:e9:bf:0f:06:09:77:
                    96:a9:7c:57:39:e0:2f:e5:ca:be:e1:80:ba:4f:72:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B0:1C:7F:69:D6:83:94:F5:C1:BA:60:98:7B:9F:50:DB:50:FE:BA
            X509v3 Authority Key Identifier:
                keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:35:1f:bc:5e:f1:8a:a9:6b:75:2f:0b:fd:e8:6a:8f:a2:5e:
         2b:a6:0a:32:c3:d5:24:65:ab:ce:64:b6:0a:3a:d0:fe:1a:0d:
         e8:6a:1a:bb:80:d9:21:cc:b4:13:ef:f8:6d:88:d3:ee:93:91:
         9b:80:55:11:5e:e2:9f:99:e3:06:ac:3a:ec:de:a6:ca:61:0e:
         8e:02:23:27:df:b4:45:12:0f:5b:a7:e1:f5:75:14:01:00:6a:
         03:70:d9:e7:b5:63:55:69:eb:6a:13:c4:5a:ee:3b:dd:59:f1:
         9a:ac:22:cd:1c:28:7c:30:80:53:c8:a6:7d:40:2e:8a:b2:e4:
         1a:a3:ea:78:70:a7:46:6e:81:32:38:16:17:74:99:5a:f9:3e:
         fa:50:0b:02:91:7c:d5:63:71:36:89:4e:ae:5a:ae:ed:63:ae:
         39:04:cb:62:3a:fb:6e:e4:02:88:0c:d2:61:dc:6a:e1:85:49:
         5e:dd:2c:93:7d:75:59:ab:69:54:d7:9c:7e:18:fe:f7:fa:95:
         46:f8:3c:e5:6c:9b:1f:98:a7:9d:6f:48:3a:7d:82:3e:8e:10:
         34:71:a5:ef:35:ec:f0:23:c4:bf:9b:c0:e6:1f:69:ba:35:35:
         15:e3:9f:a5:6b:c8:37:be:70:b8:1e:27:91:a4:f2:6a:02:85:
         af:92:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:25:40 2025 by rpki-client