This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          FFk6H66Rm57rirZPB+wRjzqNZVdo1ZFEmUwjBAw9RWM=
Subject key identifier:   C4:1F:DA:BB:64:B3:BE:8B:37:4E:CA:4E:A9:E0:40:8D:C1:14:14:44
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       019B3E6E11329A9F379ABB8074BCA552A7F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          16F0
Signing time:             Sun 21 Dec 2025 01:02:39 +0000
Manifest this update:     Sun 21 Dec 2025 01:02:39 +0000
Manifest next update:     Mon 22 Dec 2025 01:02:39 +0000
Files and hashes:         1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
                          2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: hUMiE1jyQB/MznlyaJ/S69qpDEwNQoX2GzJVmavZOgU=)
                          3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
                          4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:6e:11:32:9a:9f:37:9a:bb:80:74:bc:a5:52:a7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Dec 21 01:02:39 2025 GMT
            Not After : Dec 22 01:02:39 2025 GMT
        Subject: CN=c41fdabb64b3be8b374eca4ea9e0408dc1141444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:2a:bd:55:b1:0e:26:14:23:99:5f:18:23:
                    25:72:b8:6c:f4:8c:6a:b8:9b:94:96:6c:b7:f2:3d:
                    6b:13:ee:0c:d9:df:74:62:41:16:19:97:20:9b:89:
                    72:8d:47:2d:af:9b:35:45:80:61:7c:16:1e:d2:fc:
                    d7:c9:aa:dc:00:8e:e2:e0:a8:12:d1:54:1a:42:23:
                    60:13:c3:b0:50:c2:e9:17:8c:1c:9d:5a:78:30:84:
                    06:cb:59:66:0c:61:35:b2:24:cf:74:04:8f:70:91:
                    6c:73:f8:cb:98:27:77:8e:3a:f6:37:a7:c1:b1:7e:
                    35:b3:87:e9:0e:ad:67:4a:3f:29:26:26:75:db:57:
                    09:29:a7:43:d3:36:0d:a3:c8:ab:2e:ce:4c:d9:ac:
                    e2:35:80:0f:f9:5b:60:f1:3f:d6:a4:4c:aa:57:d2:
                    c3:58:c6:6f:74:28:86:c8:f2:a6:6e:a0:77:f8:83:
                    5b:fa:dc:9f:64:c1:78:e8:12:49:50:95:b0:b4:55:
                    71:38:12:23:e3:98:3e:fa:47:39:41:77:65:71:c8:
                    9b:a3:7d:dd:d0:6d:e0:c1:a6:41:17:d9:c7:d5:a1:
                    bf:37:1e:c8:24:8d:be:79:a8:a5:8d:5b:cd:d7:46:
                    d8:b7:34:18:d7:be:ff:a7:27:2e:16:4e:89:e5:58:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1F:DA:BB:64:B3:BE:8B:37:4E:CA:4E:A9:E0:40:8D:C1:14:14:44
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8e:e6:66:85:c0:82:ab:31:f8:fe:a7:01:06:21:50:fe:38:
         83:a0:22:7f:21:4b:a3:27:d0:59:4a:17:59:0b:d3:28:82:53:
         4a:4c:0a:0b:e9:a2:7d:1f:52:94:0c:68:a6:0e:89:9d:df:82:
         e7:35:b1:c7:7e:70:64:11:3f:f7:70:8f:e1:33:a1:b0:a1:d5:
         3c:ec:e0:5b:fd:ef:ad:a6:9c:31:26:66:6a:ab:cf:01:0b:e0:
         de:2e:f8:1d:00:ba:cc:29:49:f4:b2:f8:f9:bd:08:03:5f:ac:
         38:53:d3:5f:c4:62:31:1b:29:1a:60:1a:ff:61:eb:5c:f7:df:
         f6:30:33:a1:69:94:f0:8a:19:ba:87:4d:c1:8c:13:da:c1:5c:
         9e:3e:35:fd:b8:b5:5c:82:f6:b7:2a:24:25:6e:45:05:84:c6:
         91:65:e8:30:55:6e:2a:d3:fd:77:6a:f6:c6:7d:23:e2:91:d3:
         58:f3:01:f1:3c:80:01:ad:92:d1:05:7b:c5:8f:72:b8:c5:97:
         59:62:ef:ba:9f:87:5f:31:59:cf:ca:55:d0:fa:46:c1:97:59:
         c4:f2:dd:db:d2:dd:29:43:18:5a:c1:7d:49:30:34:db:cd:e7:
         55:02:7f:9b:94:ef:f1:07:3c:77:97:dc:55:8b:af:8e:7b:b7:
         2f:64:52:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+bhEymp83mruAdLylUqf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODhmYWUzNWI2NmI0ZGUyZTQxY2E1ZWUwNzdiNWVmMGI0
YWI2NDkwHhcNMjUxMjIxMDEwMjM5WhcNMjUxMjIyMDEwMjM5WjAzMTEwLwYDVQQD
EyhjNDFmZGFiYjY0YjNiZThiMzc0ZWNhNGVhOWUwNDA4ZGMxMTQxNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j4qvVWxDiYUI5lfGCMlcrhs9Ixq
uJuUlmy38j1rE+4M2d90YkEWGZcgm4lyjUctr5s1RYBhfBYe0vzXyarcAI7i4KgS
0VQaQiNgE8OwUMLpF4wcnVp4MIQGy1lmDGE1siTPdASPcJFsc/jLmCd3jjr2N6fB
sX41s4fpDq1nSj8pJiZ121cJKadD0zYNo8irLs5M2aziNYAP+Vtg8T/WpEyqV9LD
WMZvdCiGyPKmbqB3+INb+tyfZMF46BJJUJWwtFVxOBIj45g++kc5QXdlccibo33d
0G3gwaZBF9nH1aG/Nx7IJI2+eailjVvN10bYtzQY177/pycuFk6J5ViHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQf2rtks76LN07KTqngQI3BFBREMB8GA1UdIwQY
MBaAFKqI+uNbZrTeLkHKXuB3te8LSrZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzct
YjkyY2I2MTEzMDM1LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzctYjkyY2I2MTEzMDM1
LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo7mZoXA
gqsx+P6nAQYhUP44g6AifyFLoyfQWUoXWQvTKIJTSkwKC+mifR9SlAxopg6Jnd+C
5zWxx35wZBE/93CP4TOhsKHVPOzgW/3vraacMSZmaqvPAQvg3i74HQC6zClJ9LL4
+b0IA1+sOFPTX8RiMRspGmAa/2HrXPff9jAzoWmU8IoZuodNwYwT2sFcnj41/bi1
XIL2tyokJW5FBYTGkWXoMFVuKtP9d2r2xn0j4pHTWPMB8TyAAa2S0QV7xY9yuMWX
WWLvup+HXzFZz8pV0PpGwZdZxPLd29LdKUMYWsF9STA0283nVQJ/m5Tv8Qc8d5fc
VYuvjnu3L2RSPQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 05:54:04 2025 by rpki-client