This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
File:                     rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json)
Hash identifier:          IBqTSwlwvuzVwHfsjp4C5W7GHG8UHpNpfNeHyZi2jAw=
Subject key identifier:   AA:84:03:8F:49:27:78:CF:14:6C:0C:06:7E:93:9B:97:9F:1B:FA:85
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       019B35698ED374A88D39A343A079292650A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
Manifest number:          1796
Signing time:             Fri 19 Dec 2025 07:01:08 +0000
Manifest this update:     Fri 19 Dec 2025 07:01:08 +0000
Manifest next update:     Sat 20 Dec 2025 07:01:08 +0000
Files and hashes:         1: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=)
                          2: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=)
                          3: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=)
                          4: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=)
                          5: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=)
                          6: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=)
                          7: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=)
                          8: O_1KEMFUqgk53YPdkiJOMWFybCU.roa (hash: 4rGooap/6UNkN/imOgEGeKddbOoLvOCJN4FBsaaC0Sw=)
                          9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=)
                          10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=)
                          11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=)
                          12: cjQzMFxVd-iqEhVM-o1DNZllV_0.roa (hash: 85nOtiPI0UFXyc2nAprk9yS+5gMOcb9EUZheWPhZTEk=)
                          13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=)
                          14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=)
                          15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: XznK2kpymdhz8O1cq3BhlKe/48ucF4B3l8GU0dyf9Vg=)
                          16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=)
                          17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=)
                          18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=)
                          19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:69:8e:d3:74:a8:8d:39:a3:43:a0:79:29:26:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Dec 19 07:01:08 2025 GMT
            Not After : Dec 20 07:01:08 2025 GMT
        Subject: CN=aa84038f492778cf146c0c067e939b979f1bfa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:66:00:60:c1:ca:5d:1e:7a:d7:c9:32:5f:
                    de:ba:27:b1:28:cf:8b:c0:e5:d5:0a:d4:73:2e:38:
                    df:ea:9f:73:fa:50:f0:0b:15:11:bd:46:9f:f3:9f:
                    ff:51:de:8f:47:9a:f0:46:9a:43:57:06:6a:00:04:
                    18:4d:ef:7e:4b:6a:6c:03:ff:d5:fc:64:d2:5e:14:
                    40:d8:34:61:d0:53:3d:fe:0a:72:94:7f:5f:49:88:
                    8c:1b:56:16:32:fc:f5:5b:d7:34:cb:d4:8c:cf:85:
                    2c:f8:e5:37:2e:ef:1a:b6:d9:17:6b:6a:75:ef:03:
                    b7:e7:59:e4:06:45:62:c4:c1:78:fb:0e:d4:16:8e:
                    21:26:fb:79:bd:6f:93:b0:86:d6:3c:98:ce:2b:6d:
                    cb:8d:ce:c6:22:37:3d:95:d5:10:8b:f7:5b:e1:ee:
                    2e:bd:f9:db:8a:27:c3:4e:13:1b:47:0c:fa:b6:29:
                    b7:e3:c1:29:64:eb:ae:b7:66:c0:c2:67:3c:86:c1:
                    6c:7a:0d:2a:4a:43:fe:a0:71:0e:cc:3b:85:39:9d:
                    ee:e8:6c:e6:a0:d1:b5:00:65:32:0a:f9:5f:06:9e:
                    a6:b2:9b:b7:e6:5e:8b:6e:a5:3c:b9:41:c6:9a:b4:
                    59:19:ac:8f:be:73:99:c8:d3:dc:97:25:47:ba:d7:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:03:8F:49:27:78:CF:14:6C:0C:06:7E:93:9B:97:9F:1B:FA:85
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:97:27:52:94:a6:b1:ce:b5:3e:0f:b2:c5:cb:46:b1:91:f8:
         bc:c8:15:e8:c5:6c:6f:f5:93:34:af:6e:17:9b:06:3b:e4:4c:
         c7:f4:48:2d:ed:7e:47:de:67:4a:28:39:22:16:1b:1c:6c:2c:
         ab:b5:e6:9a:1e:52:31:82:ea:5d:ea:2f:a3:e0:61:d8:62:8b:
         5d:b6:97:aa:5a:b2:83:43:f7:10:99:3a:f8:38:5c:8c:a0:87:
         74:e4:88:2d:2c:27:61:9b:8f:be:15:48:19:da:24:e0:8a:bb:
         24:d8:2f:43:d0:e0:d4:d0:26:dd:9c:56:57:92:f6:10:d0:99:
         89:67:3b:0d:9a:bd:96:2a:18:c1:5c:8e:46:b7:20:49:57:de:
         24:35:d3:bf:c8:1a:3c:9f:b6:c8:cc:17:54:40:9e:00:53:37:
         d9:b7:28:6c:86:b4:bf:2f:3a:27:59:29:73:64:df:8d:86:11:
         9f:12:46:66:f9:e6:53:91:97:5c:74:83:06:19:cb:32:ea:44:
         00:94:cc:62:59:07:10:82:df:21:2f:6a:58:ff:cf:ab:d3:d2:
         9a:ad:41:8f:a0:64:4a:2f:9d:61:e2:a5:72:77:ce:3b:70:e4:
         4a:a2:f4:17:cd:ca:f8:91:55:2e:c4:7c:63:ef:fe:4b:4e:4c:
         e3:c5:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:49:29 2025 by rpki-client