This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File:                     qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier:          myltkqWwrBX+u5Oe/+q8mcnTngYkFIPaD763YblpQpo=
Subject key identifier:   62:96:AD:DA:AD:E6:6D:C1:00:B4:F9:B1:F8:E9:6C:11:0B:AB:74:FE
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer:       /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial:       019B6B4580F260929632AD9396A2CAA410A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number:          0B8B
Signing time:             Mon 29 Dec 2025 18:01:15 +0000
Manifest this update:     Mon 29 Dec 2025 18:01:15 +0000
Manifest next update:     Tue 30 Dec 2025 18:01:15 +0000
Files and hashes:         1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
                          2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: 1xcTJW2ZRLUaTfMrGwZgdsIx6WKfiVUWrjfgxtCIfUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Dec 2025 15:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:45:80:f2:60:92:96:32:ad:93:96:a2:ca:a4:10:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
        Validity
            Not Before: Dec 29 18:01:15 2025 GMT
            Not After : Dec 30 18:01:15 2025 GMT
        Subject: CN=6296addaade66dc100b4f9b1f8e96c110bab74fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:75:7c:b9:71:fc:1e:58:3c:d6:64:45:93:
                    de:02:b0:d8:90:87:fd:b9:da:97:d2:87:f5:eb:a1:
                    48:22:9a:90:e2:34:36:0a:62:0e:a4:e9:22:1d:a2:
                    b0:23:60:26:64:5f:9c:66:8b:6c:c8:91:3d:f6:04:
                    e1:44:3a:ba:c0:57:1c:ba:fc:f4:4f:fc:1b:be:9e:
                    39:6d:bc:82:93:a6:48:04:90:c2:40:ae:c3:e3:72:
                    45:dc:a5:f6:be:71:a6:75:6f:a4:06:de:d6:8c:14:
                    54:f2:3c:81:33:3e:03:e2:ed:63:c4:aa:d8:a4:74:
                    73:c0:f2:10:ff:af:81:f5:e4:0a:79:c5:9e:bd:9a:
                    ae:c6:70:6e:c9:1a:f5:9a:bf:ad:b0:a3:5c:fa:2f:
                    cc:a1:9d:93:b5:6c:6c:f7:cb:00:6f:51:f1:3d:cd:
                    af:13:3e:81:4f:9e:e6:0c:64:41:55:df:7e:a0:29:
                    3e:e6:c8:0b:3c:64:02:f1:bb:58:5f:d2:73:09:76:
                    b5:73:2c:48:65:a3:3e:64:27:4b:26:bf:9f:0b:ed:
                    ce:10:16:19:d1:94:39:07:bb:4e:85:a7:be:06:37:
                    be:f3:ca:55:5d:48:9f:05:c7:1c:9e:ba:c3:78:a5:
                    d3:dc:60:fe:36:42:b3:98:8e:76:35:67:ac:9c:06:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:96:AD:DA:AD:E6:6D:C1:00:B4:F9:B1:F8:E9:6C:11:0B:AB:74:FE
            X509v3 Authority Key Identifier:
                keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:04:7c:41:f7:03:a3:0a:bb:04:3d:9a:c0:ec:47:08:9e:
         fd:88:12:c8:40:96:75:a4:83:06:a3:86:5b:87:6d:1a:db:53:
         e0:38:6d:46:ef:e6:b4:9a:c9:6b:47:94:ca:51:2c:dc:b8:06:
         de:3d:7a:6f:30:e7:ed:76:d4:37:1a:3c:3d:6b:9b:d3:7a:ae:
         a9:d6:98:9c:71:8d:e9:de:be:98:72:7f:f8:2b:42:e3:7d:18:
         f4:81:f9:e5:63:57:8d:56:76:dc:c7:92:49:0b:f5:fe:a0:73:
         91:6e:11:09:af:7f:09:e1:1a:73:20:aa:50:f4:17:c8:40:53:
         c2:20:fc:90:a4:b6:8d:62:4e:e4:dd:1b:ca:f3:35:b6:92:50:
         05:33:1d:ef:fd:7c:4e:e2:ee:c5:50:78:0f:d8:38:12:13:2e:
         a0:84:97:a2:73:26:2c:4a:b9:88:a3:d1:6b:dc:1f:1a:08:52:
         a9:52:00:b6:24:5b:34:50:2a:d2:dd:f3:3d:d5:f4:f0:09:e9:
         50:7c:55:35:cf:37:1d:8c:01:0a:57:06:8f:27:2b:5d:a6:de:
         4f:ae:e3:e9:28:e7:b4:71:2b:09:cb:0f:9b:ae:e2:89:7a:89:
         7d:5a:41:4e:02:65:d4:33:57:97:39:09:30:6f:66:00:84:a3:
         62:e7:60:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtrRYDyYJKWMq2TlqLKpBChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWMyOWM5NWQyNDhjYmZmYTc0NGFiMzRlNDdlYWNjYTcz
NTUwZDEwHhcNMjUxMjI5MTgwMTE1WhcNMjUxMjMwMTgwMTE1WjAzMTEwLwYDVQQD
Eyg2Mjk2YWRkYWFkZTY2ZGMxMDBiNGY5YjFmOGU5NmMxMTBiYWI3NGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMV1fLlx/B5YPNZkRZPeArDYkIf9
udqX0of166FIIpqQ4jQ2CmIOpOkiHaKwI2AmZF+cZotsyJE99gThRDq6wFccuvz0
T/wbvp45bbyCk6ZIBJDCQK7D43JF3KX2vnGmdW+kBt7WjBRU8jyBMz4D4u1jxKrY
pHRzwPIQ/6+B9eQKecWevZquxnBuyRr1mr+tsKNc+i/MoZ2TtWxs98sAb1HxPc2v
Ez6BT57mDGRBVd9+oCk+5sgLPGQC8btYX9JzCXa1cyxIZaM+ZCdLJr+fC+3OEBYZ
0ZQ5B7tOhae+Bje+88pVXUifBcccnrrDeKXT3GD+NkKzmI52NWesnAYy5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKWrdqt5m3BALT5sfjpbBELq3T+MB8GA1UdIwQY
MBaAFKscKcldJIy/+nRKs05H6synNVDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQt
ZWE2Njg0NDE0OWVlLzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQtZWE2Njg0NDE0OWVl
LzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU8EfEH3
A6MKuwQ9msDsRwie/YgSyECWdaSDBqOGW4dtGttT4DhtRu/mtJrJa0eUylEs3LgG
3j16bzDn7XbUNxo8PWub03quqdaYnHGN6d6+mHJ/+CtC430Y9IH55WNXjVZ23MeS
SQv1/qBzkW4RCa9/CeEacyCqUPQXyEBTwiD8kKS2jWJO5N0byvM1tpJQBTMd7/18
TuLuxVB4D9g4EhMuoISXonMmLEq5iKPRa9wfGghSqVIAtiRbNFAq0t3zPdX08Anp
UHxVNc83HYwBClcGjycrXabeT67j6SjntHErCcsPm67iiXqJfVpBTgJl1DNXlzkJ
MG9mAISjYudgoQ==
-----END CERTIFICATE-----
Generated at Tue Dec 30 00:24:17 2025 by rpki-client