This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File:                     qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier:          wc0oHsb/i8M2qxD0uG2+xYgSh2XZif7Spw8D2KWVaFQ=
Subject key identifier:   42:52:41:2D:3A:DF:A0:23:8E:F4:9A:3C:B9:2F:A7:DC:0B:EB:BE:EA
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer:       /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial:       019B39EB431224DEDF6A64958B32F5522858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number:          15BC
Signing time:             Sat 20 Dec 2025 04:01:17 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:17 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:17 +0000
Files and hashes:         1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
                          2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
                          3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: 3Nlot8Ixsr252iZGdh0hQd3vv2wMy2t1bJdroXociGY=)
                          4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:eb:43:12:24:de:df:6a:64:95:8b:32:f5:52:28:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
        Validity
            Not Before: Dec 20 04:01:17 2025 GMT
            Not After : Dec 21 04:01:17 2025 GMT
        Subject: CN=4252412d3adfa0238ef49a3cb92fa7dc0bebbeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:1a:7d:83:22:73:6a:b5:fa:83:0e:e6:2f:
                    e0:ce:8d:61:6c:bc:14:e3:ab:ba:e1:ea:4e:87:1f:
                    8c:fa:70:ff:cd:55:dd:f8:0e:41:0f:0b:e0:a1:ae:
                    dd:6f:a8:95:eb:46:60:0f:c5:f3:2a:67:66:f1:bc:
                    22:a7:f5:33:59:85:0d:8b:a2:75:db:02:2f:4c:81:
                    8e:62:09:d3:7a:b0:9b:ee:57:57:1f:f2:8f:6e:c3:
                    c6:96:eb:81:62:4f:05:00:ff:ad:88:47:0a:9a:06:
                    00:1b:c0:42:24:5b:9f:c2:92:65:5b:06:e3:01:aa:
                    61:81:28:3b:23:d1:10:b8:c4:ce:e5:02:7a:4e:71:
                    8e:71:76:a8:29:7b:6c:46:f7:80:f2:7f:6a:a3:f8:
                    e4:0d:7a:8b:db:6f:a8:ee:00:f1:df:8f:2c:94:60:
                    cf:5a:3d:d2:36:0b:56:ce:9f:09:6e:69:87:21:d3:
                    51:c2:42:6f:e4:23:dd:e2:8a:f7:37:c0:70:73:51:
                    92:a3:55:f0:a7:df:bd:43:59:04:ad:74:a3:79:9e:
                    48:af:21:2d:bc:be:fb:26:d4:e2:98:3e:28:45:24:
                    b8:79:0e:15:fc:78:b3:13:1e:cb:ce:d2:72:f8:b9:
                    7e:e7:76:5f:d2:ed:84:ef:a7:59:96:37:ed:63:3a:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:52:41:2D:3A:DF:A0:23:8E:F4:9A:3C:B9:2F:A7:DC:0B:EB:BE:EA
            X509v3 Authority Key Identifier:
                keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:12:26:68:ed:57:0e:06:c1:45:b8:e4:2d:4d:e1:1c:bb:c2:
         50:e1:e4:70:4a:3b:e0:3e:4f:dc:c0:1f:b6:05:e8:a0:5e:82:
         7a:f4:ed:bd:5d:75:bc:73:01:75:43:d5:68:b4:48:fe:7b:c3:
         68:4c:02:c4:e7:eb:1c:d7:f2:3b:d2:87:74:b4:b1:8c:c2:d8:
         96:11:59:59:49:3a:e3:87:cb:3d:78:87:07:33:39:3d:92:0c:
         ae:b2:78:d8:38:12:0b:57:b0:1b:1c:4d:32:3b:f4:f0:57:d0:
         1e:6a:ee:1c:c2:56:40:45:9c:64:e5:f5:81:90:74:dc:8a:b1:
         53:2a:e0:34:21:7b:88:d9:24:06:d2:8b:0c:2a:37:7d:26:0b:
         e0:8c:c4:4b:7c:75:4b:e7:e4:5b:65:80:d0:63:ff:6e:83:d2:
         61:94:be:45:f9:1e:a0:0e:46:29:e1:67:55:5b:45:0c:15:a5:
         33:b5:4b:e1:4e:2e:10:b5:d7:99:8e:c5:22:44:bf:d4:ce:98:
         15:e4:54:5b:27:f5:51:1f:39:44:28:5d:75:e4:92:f7:d0:9c:
         4e:75:80:15:86:7b:8c:33:21:39:9f:8d:31:88:d4:3a:45:93:
         3a:15:ba:01:81:d9:36:16:d7:7c:a6:73:44:8e:52:db:9d:86:
         76:00:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:39:18 2025 by rpki-client