This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          8ODMxjqlICjRpG74goWgZj8ZREG4a5spc63P84JZtEQ=
Subject key identifier:   DE:E0:A0:CC:67:5B:3D:B4:85:B7:05:82:C7:81:C4:45:CB:91:E8:33
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       019B2740E0C91FF302BE6775EF7D9EDD92E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          16E4
Signing time:             Tue 16 Dec 2025 13:02:01 +0000
Manifest this update:     Tue 16 Dec 2025 13:02:01 +0000
Manifest next update:     Wed 17 Dec 2025 13:02:01 +0000
Files and hashes:         1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
                          2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: xQKtv7+13wdpvj3t1DpyivfBA00IzuONVwYd/9+9/vw=)
                          3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
                          4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 13:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:40:e0:c9:1f:f3:02:be:67:75:ef:7d:9e:dd:92:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Dec 16 13:02:01 2025 GMT
            Not After : Dec 17 13:02:01 2025 GMT
        Subject: CN=dee0a0cc675b3db485b70582c781c445cb91e833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:c3:4d:06:62:fb:a8:84:08:68:c3:5a:67:
                    44:3f:b9:a6:6d:20:99:d4:43:35:8e:ba:c0:dd:8e:
                    8e:19:73:af:68:92:55:8a:24:c0:3f:3f:61:0b:7f:
                    77:32:37:9d:1b:8e:fd:ac:79:6e:34:b2:7a:1c:3b:
                    2d:65:75:4b:45:c9:c1:b7:c4:34:7b:3b:e1:06:88:
                    6e:91:42:1f:2c:05:87:9a:04:f8:ef:29:88:e3:7d:
                    71:02:d8:22:2c:00:a9:f1:36:b1:79:47:f1:a0:37:
                    2b:1b:b0:59:52:6d:a9:1f:3d:65:4b:2f:2f:f9:dc:
                    76:6d:bb:20:04:83:9b:ba:3e:96:41:62:8f:c3:a5:
                    f0:6b:3f:36:a8:b1:f5:9a:20:29:aa:62:dc:13:5b:
                    91:d5:c8:c5:e1:d7:38:60:e3:33:47:45:03:9a:65:
                    6f:6f:b1:d7:c0:b0:76:da:ff:dc:05:bb:91:ec:6a:
                    55:3b:06:6e:85:bb:88:83:a1:b1:4f:ae:7d:77:5d:
                    e1:e9:3b:1a:58:5d:4a:da:32:ac:7b:b2:63:0a:b8:
                    54:93:be:58:f4:2a:22:0b:51:56:ae:c1:45:79:4d:
                    a2:ff:a3:79:ec:10:d6:bf:07:92:d5:cb:c1:43:28:
                    79:8d:c8:29:17:3a:2d:42:fc:21:d9:de:57:ab:c9:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:A0:CC:67:5B:3D:B4:85:B7:05:82:C7:81:C4:45:CB:91:E8:33
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:ef:07:c2:d8:82:fd:c9:79:25:6a:50:7b:a7:03:f8:79:
         a3:11:f9:c5:94:ba:9a:78:3d:74:ef:b5:14:ab:bb:6e:63:51:
         0a:b4:f8:1b:67:a8:eb:7a:bd:df:88:e1:a1:01:fc:eb:86:12:
         c5:81:05:cc:84:7f:5d:5e:e6:cb:44:d9:0a:fb:42:67:35:a3:
         4b:db:e1:e0:48:26:95:1e:5c:5c:9f:23:64:b1:8f:22:2e:6f:
         c0:0c:39:3e:3e:8a:e6:03:7b:5f:ab:55:76:43:71:0c:89:2f:
         ae:4a:2e:39:2b:21:06:99:d7:c1:af:22:56:82:24:f7:b6:ee:
         86:5a:37:f4:ed:3f:53:e2:40:bf:e7:1f:e6:8b:f6:4c:c6:30:
         94:95:ec:0f:e5:86:05:12:5a:cd:ea:6a:b7:e1:2d:c3:0c:85:
         f2:ae:66:e1:d1:57:da:99:32:80:87:ab:b0:d0:c9:19:f1:16:
         a5:9f:0f:d1:9b:3a:3b:01:9f:d9:e6:74:44:19:24:6a:f1:29:
         36:a9:00:47:66:49:eb:75:a4:7d:e8:67:ab:b2:d8:e2:78:6e:
         3b:1f:95:95:4b:eb:f4:0d:59:61:c7:77:99:6b:e7:03:61:18:
         84:1a:97:27:4e:44:e3:8e:62:ad:ec:ef:6f:1a:a3:cc:6a:c1:
         bb:ab:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 17:47:42 2025 by rpki-client