This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          Wi4/AqmqIaz0AkwfXXq4fRn0VSnWiAS7GU/LMCATIhc=
Subject key identifier:   10:21:60:9F:5E:6D:42:E2:AB:56:8E:00:70:DD:9F:99:39:36:8F:24
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       019B3C7FC68FF0909AC74B3DC65E488BDE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          06C4
Signing time:             Sat 20 Dec 2025 16:02:45 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:45 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:45 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: R23zeQRDOen9HPSmR-eKHeta0HU.roa (hash: lKe4syLzRE8BrGtoS0ZImyw7G/jxJEgSU5WDE02BXs8=)
                          4: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: veaHhJk9Wh0hH8wBb1QShpAm9AOxTEMPYV2+9rFKvgA=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:c6:8f:f0:90:9a:c7:4b:3d:c6:5e:48:8b:de:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Dec 20 16:02:45 2025 GMT
            Not After : Dec 21 16:02:45 2025 GMT
        Subject: CN=1021609f5e6d42e2ab568e0070dd9f9939368f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:2a:f6:6b:8d:8e:ce:54:0e:1c:b9:96:3a:
                    02:d6:16:91:48:e5:71:42:db:17:9a:da:21:e4:b8:
                    0f:39:88:ac:2c:d1:b4:20:f7:15:ba:7e:67:ff:01:
                    f9:83:79:46:0e:29:ee:f5:b3:95:82:c0:99:d4:3c:
                    75:bf:40:4c:10:ce:85:eb:7d:9a:df:88:0d:fa:ff:
                    c5:8c:eb:71:9d:ea:b6:f6:e0:61:1d:d7:0c:c0:c2:
                    dc:47:9a:45:2e:de:63:dd:2e:f5:df:e1:4c:c5:cd:
                    af:ce:73:40:3e:07:38:42:28:a2:cd:6a:e2:7a:a8:
                    1b:fa:35:61:89:c8:5d:54:48:b7:f9:87:83:0d:33:
                    7f:d6:f8:8e:53:7b:5e:06:fb:a2:c9:b6:1f:b8:5d:
                    4a:85:f8:95:d1:73:f7:d8:65:db:e0:ce:a1:a9:bc:
                    91:af:4e:26:8b:0e:68:99:41:1e:e4:aa:ad:c2:72:
                    f1:9d:32:69:c4:f1:a5:43:f4:32:cb:a4:ba:3f:96:
                    f0:34:ec:3b:8f:23:55:15:0d:6c:00:74:ac:4d:cc:
                    4a:eb:fb:13:35:d4:b4:8a:bf:98:1c:6f:30:6f:5f:
                    c7:0f:82:11:7e:2f:f9:11:fa:6f:5c:b0:d7:b4:37:
                    49:eb:89:b1:f6:e1:ef:b4:30:a3:98:7c:d6:30:cb:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:21:60:9F:5E:6D:42:E2:AB:56:8E:00:70:DD:9F:99:39:36:8F:24
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:83:02:29:e1:cb:40:42:d5:68:08:43:cc:25:8a:cc:fe:4e:
         d2:81:a6:94:d1:8f:97:4f:42:f7:26:ca:ba:c2:cb:99:a9:ba:
         f8:c9:41:73:aa:dc:06:23:37:f3:89:cf:60:3f:e7:9e:96:87:
         9b:7d:06:a5:e4:2a:0e:a7:f4:43:c6:90:57:5f:b9:ea:fe:4b:
         53:fe:fa:3b:94:38:37:4e:16:73:48:c3:30:55:3a:59:07:5b:
         75:3f:dc:cb:be:f4:2f:29:5f:ed:22:d3:2b:69:d1:2b:5d:c2:
         76:41:39:55:0c:a6:4f:b4:66:cf:12:89:49:04:2d:b8:fc:33:
         fb:01:ab:7d:af:fa:d5:14:4c:18:fe:a9:ec:59:ea:d1:db:81:
         27:96:c5:16:0f:5b:d1:fb:83:00:a5:5f:26:13:50:8d:6f:8d:
         ad:ca:a9:1f:29:c3:ca:48:04:26:85:82:f1:6b:f4:a4:4c:c5:
         e5:97:e5:f5:02:40:52:97:0e:57:b1:be:25:c2:a4:18:a6:8f:
         22:a1:e8:89:0f:4a:5d:0c:92:8b:c6:4c:d4:f5:c2:0d:10:50:
         57:0a:22:30:4f:16:2f:69:b2:1f:94:37:a7:04:48:de:89:51:
         ff:75:f6:cb:ae:6d:1b:58:b5:50:03:47:b5:77:f2:0d:1c:b5:
         02:d2:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:11:12 2025 by rpki-client