This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File:                     ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier:          +fBSCVyjUZMeos9oYkHeiaZeedrTLaXygcLH1g4ecfw=
Subject key identifier:   F4:F6:A3:9C:EA:DD:21:C7:E1:28:80:8C:0C:6E:33:7D:4D:1D:6E:59
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer:       /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial:       019B522A7E455477C34B997F4ED08C69C352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number:          0AB3
Signing time:             Wed 24 Dec 2025 21:01:15 +0000
Manifest this update:     Wed 24 Dec 2025 21:01:15 +0000
Manifest next update:     Thu 25 Dec 2025 21:01:15 +0000
Files and hashes:         1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: nHVsRxTtu2vdqifMAUi9edqV8S8ZB1VFlK4dCvGxXmk=)
                          2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
                          3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:2a:7e:45:54:77:c3:4b:99:7f:4e:d0:8c:69:c3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
        Validity
            Not Before: Dec 24 21:01:15 2025 GMT
            Not After : Dec 25 21:01:15 2025 GMT
        Subject: CN=f4f6a39ceadd21c7e128808c0c6e337d4d1d6e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:8a:b6:a6:a9:d8:d1:ba:8d:d8:cc:3e:93:
                    f9:95:ff:7f:3b:c8:e7:9b:31:a9:ff:b4:22:b4:f8:
                    a0:29:a4:df:d5:fa:cb:48:58:bf:a9:a0:d7:02:7b:
                    4b:f0:68:31:a1:0a:db:43:4d:dd:08:0f:15:a2:08:
                    89:45:ef:ee:e0:f7:b8:7f:15:a1:cb:67:0a:36:e7:
                    0d:00:13:6c:1f:bd:e1:b3:8c:9b:72:3f:9e:5b:97:
                    0a:10:47:c9:f7:88:7c:4d:cd:37:76:5e:fb:25:01:
                    05:7f:d4:16:34:be:4d:0b:aa:7e:a3:a3:e4:2a:b5:
                    14:fc:c1:a1:bc:ac:a2:5d:0e:d1:0d:07:1a:c9:96:
                    ce:f2:3c:75:12:9c:34:bd:8f:1a:fb:84:e5:a3:54:
                    84:bc:9b:d9:c7:eb:d9:f1:9e:d1:6d:62:5d:86:40:
                    08:4c:04:44:19:f1:ab:b3:17:48:ab:3e:cb:19:47:
                    85:7d:29:dc:4c:f4:d0:7b:27:6f:32:94:f9:6b:30:
                    5e:d9:f6:6e:d9:3f:77:07:0c:c1:47:a7:5f:4c:02:
                    7e:05:c0:4e:6f:76:96:45:f8:a2:25:00:ac:86:7f:
                    97:97:2c:cc:27:32:e2:1a:cc:38:09:0e:74:f9:1f:
                    7a:1b:7e:99:07:b6:c4:8a:90:29:21:88:cb:11:9b:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:A3:9C:EA:DD:21:C7:E1:28:80:8C:0C:6E:33:7D:4D:1D:6E:59
            X509v3 Authority Key Identifier:
                keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:c3:81:c8:63:a6:b8:ae:38:22:18:4e:82:05:10:b7:10:
         10:73:ce:8e:02:65:94:8e:19:d1:39:b9:61:20:f1:f0:6d:7b:
         13:14:a1:d2:18:52:1f:78:e8:a2:de:41:9e:21:55:a8:3b:f1:
         a6:f2:e0:3a:21:7a:ae:80:f9:68:f0:4b:f1:61:f4:59:8b:e2:
         08:5b:3a:32:a1:96:c5:57:2e:29:5a:75:b6:12:29:c9:46:66:
         86:21:a2:96:f0:d3:dc:82:70:b3:ff:36:9b:c9:7a:a6:3f:64:
         6d:9d:ba:76:ef:6a:e1:a9:4a:c4:90:7d:5a:9b:c1:92:4c:16:
         82:38:ba:de:51:aa:f4:1f:fe:53:96:4a:98:7e:4e:16:c2:ab:
         1f:53:4c:a3:81:e5:2b:4a:a9:a4:a7:cd:15:72:b1:f0:f2:66:
         ec:85:02:1f:5c:0e:17:f8:2e:db:d9:66:7e:cc:00:51:d0:0f:
         9f:8c:cf:66:9a:9e:b2:ce:e2:db:57:ba:86:88:83:52:e4:26:
         25:c9:c9:99:5c:bf:49:bb:c6:ff:50:72:e6:92:28:8c:c9:9d:
         c6:6d:72:fd:7b:a6:a1:00:96:23:39:37:6c:f9:80:d5:70:59:
         1a:17:e1:df:30:c4:fc:5f:98:64:d3:06:d9:2f:2f:c1:89:bb:
         66:dd:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:30:40 2025 by rpki-client