This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File:                     l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier:          zHpjQwLKA9FcJRWzabqhtQmnP7kOpnfP2AMf9a6nL6o=
Subject key identifier:   AA:7C:EF:7B:E5:C1:BD:16:E9:C3:70:BB:62:AC:B0:57:AF:93:14:D9
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer:       /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial:       019B104A2D46946CBEFD1A833D06D5920CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number:          176F
Signing time:             Fri 12 Dec 2025 02:00:55 +0000
Manifest this update:     Fri 12 Dec 2025 02:00:55 +0000
Manifest next update:     Sat 13 Dec 2025 02:00:55 +0000
Files and hashes:         1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
                          2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: pogfJ4GSXlfCLLokBBAFyta1d42/sfdVeLQ4Ij9TKAU=)
                          3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:4a:2d:46:94:6c:be:fd:1a:83:3d:06:d5:92:0c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
        Validity
            Not Before: Dec 12 02:00:55 2025 GMT
            Not After : Dec 13 02:00:55 2025 GMT
        Subject: CN=aa7cef7be5c1bd16e9c370bb62acb057af9314d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:ea:9b:d5:48:3f:b2:e7:ec:30:9d:45:e2:
                    68:ec:62:7c:0e:62:f6:50:6b:66:77:f7:68:2f:e0:
                    b6:9d:e5:34:bb:34:11:7b:87:45:3c:c9:6f:49:b0:
                    ef:ed:77:53:0a:a9:8b:48:93:b1:80:6a:3a:7d:6b:
                    74:95:cc:3d:37:55:02:e8:dd:d9:5c:d3:6c:de:21:
                    3d:98:e9:f4:79:4b:10:96:00:d1:c3:eb:ba:56:7f:
                    f7:2b:ea:48:51:f8:53:db:b1:22:b4:f5:8d:0c:8c:
                    df:21:73:79:ba:f6:c0:a6:66:d2:2f:ce:e7:d0:60:
                    a3:18:57:51:c9:9b:6a:d8:d7:22:1c:95:4b:ee:77:
                    1e:eb:f7:f1:93:b3:ac:2c:dd:ce:a9:7c:b6:f5:2b:
                    52:85:22:ba:cf:12:8d:bf:a9:fb:c5:28:8a:ee:a4:
                    bb:ed:13:3a:71:b7:3e:9d:e0:cc:29:f9:d5:71:89:
                    d2:11:71:cf:6a:6e:aa:dc:bf:42:f8:90:bc:64:1f:
                    26:f5:f7:d6:10:85:53:92:0b:6b:cc:e7:7a:7b:3a:
                    b3:c6:f3:a3:d5:16:1c:d0:98:10:78:0e:d9:10:46:
                    a0:39:8d:de:8f:e0:86:c9:76:5a:3d:d1:61:71:91:
                    94:66:5a:5e:dd:07:62:04:d7:4f:10:e9:89:46:7b:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:EF:7B:E5:C1:BD:16:E9:C3:70:BB:62:AC:B0:57:AF:93:14:D9
            X509v3 Authority Key Identifier:
                keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:af:8b:1c:0f:ba:ae:6b:c5:6b:a6:01:3d:7a:af:3b:71:59:
         1c:16:d9:f1:3e:14:bf:b2:3e:a8:6d:78:b3:8b:92:52:2c:9f:
         3a:51:22:f2:28:82:ec:c7:6d:12:20:ef:d9:1d:23:32:a9:f3:
         3b:94:a8:49:9e:f2:ac:43:62:f9:48:ba:3e:63:22:4f:23:86:
         b4:f3:99:b7:3d:73:fb:20:b1:23:e6:b3:64:e6:5b:fb:d1:46:
         c6:82:f2:8f:76:e8:93:2e:7b:eb:b0:e5:67:ed:b2:a5:96:e1:
         2b:68:89:9c:6f:0c:de:a7:f1:d7:7f:1b:ec:1f:93:27:94:77:
         c2:46:17:67:2a:ee:72:c2:a9:12:54:e3:ae:a2:63:ea:01:39:
         6c:0c:a1:e6:a7:96:a4:a6:97:3b:66:20:60:c6:48:38:52:87:
         3d:ad:07:d3:40:f1:3b:78:44:09:51:da:cd:1f:ad:72:62:29:
         c4:34:31:24:27:2f:48:c3:e7:39:c2:af:33:35:f6:d0:2b:25:
         df:67:0b:7a:67:6f:b2:7d:d1:aa:ab:4e:64:86:72:d3:97:bc:
         83:2f:4a:dd:fd:fb:9b:98:ef:fa:d8:2b:35:02:c4:4a:70:46:
         37:2b:2c:e6:81:3c:91:e6:df:c4:71:aa:e5:82:fc:e9:d3:92:
         3e:9f:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 03:35:28 2025 by rpki-client