This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File:                     aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier:          +BCmmyuEGcM4mzDhq4p+zYdBwBDfYyzz2iVtkhoDlRE=
Subject key identifier:   F7:BC:DD:34:51:9A:48:19:AA:97:6B:7E:B5:54:EB:13:04:FD:FD:6B
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer:       /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial:       019B443751361155D81E84066376293FD2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number:          13D2
Signing time:             Mon 22 Dec 2025 04:00:34 +0000
Manifest this update:     Mon 22 Dec 2025 04:00:34 +0000
Manifest next update:     Tue 23 Dec 2025 04:00:34 +0000
Files and hashes:         1: RLYdgFJvn-SCdRlbujqXRDojg9w.roa (hash: YgjAw3s158Hv/sBNq0Uj9//CRqxP6bn0sO/g49znFhw=)
                          2: _mq-Iedkuxj7G2-f6lHJz5Cp1pY.roa (hash: iMmq6hmw4oHjx4r8r/0Qs7tCaSPdyiDBIM5hIG283pc=)
                          3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: KXVgsApFtrZ/HdyLtfVc52H9JogNqTJ/Qe/Cs0S9g5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:37:51:36:11:55:d8:1e:84:06:63:76:29:3f:d2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
        Validity
            Not Before: Dec 22 04:00:34 2025 GMT
            Not After : Dec 23 04:00:34 2025 GMT
        Subject: CN=f7bcdd34519a4819aa976b7eb554eb1304fdfd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:56:f5:f9:b4:89:92:af:09:6b:b8:ad:25:
                    8c:a5:f3:62:52:ef:54:f8:3e:6c:5e:38:da:8d:89:
                    e7:c0:46:57:b5:af:e9:5d:15:e2:54:c4:4f:21:aa:
                    39:ee:e2:02:6c:f3:2e:65:d2:87:90:93:6a:97:91:
                    9a:de:17:6b:34:2e:b0:17:fa:c5:2c:24:4b:cd:3d:
                    2b:c2:e3:2a:08:bc:00:9c:c7:9d:98:49:f8:8f:8e:
                    4d:6c:24:00:43:a1:fd:bb:b2:6f:f3:00:7c:08:88:
                    c8:4a:23:65:01:d4:5c:e6:7d:f2:10:7b:be:75:9c:
                    ef:f2:23:cf:22:fe:1c:b7:26:8e:d1:28:41:b9:a4:
                    65:8d:2b:d4:69:36:ab:11:d6:19:26:d6:99:d1:44:
                    4d:40:0a:dc:ae:68:2b:38:1c:8c:3b:0f:97:b7:ca:
                    9e:69:e3:57:e0:c7:8c:93:bd:d4:bb:f3:bc:8d:f8:
                    c4:0c:a2:eb:f6:f7:89:09:dd:3b:f2:5b:95:87:24:
                    e6:bf:c4:ca:cd:df:70:e3:1f:3b:26:51:21:c4:f0:
                    f4:58:5f:a8:df:b3:2b:b2:58:b2:b9:cb:65:b1:f3:
                    1c:f8:41:5c:b3:9f:be:2e:05:5c:bb:b9:32:e4:2c:
                    89:78:4f:a6:fd:0f:be:2f:ba:de:99:68:5a:bf:e0:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BC:DD:34:51:9A:48:19:AA:97:6B:7E:B5:54:EB:13:04:FD:FD:6B
            X509v3 Authority Key Identifier:
                keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:dd:c8:11:0a:b8:69:9d:5d:f7:85:28:34:ed:c1:ef:d2:
         f1:49:66:3e:3a:0b:16:1d:4a:43:a3:53:dd:90:ec:52:6c:99:
         e5:a2:b3:a4:f9:5e:d3:a5:ef:6b:dc:6d:fb:69:58:ab:3f:56:
         d8:9d:cd:15:95:98:85:bb:e1:85:c1:bd:a8:2a:95:fd:02:90:
         e2:99:08:db:cb:36:ae:20:3a:af:21:97:cc:da:bf:db:19:0c:
         d1:25:cd:09:d0:63:11:de:00:80:d4:26:6a:83:91:51:85:34:
         25:c2:e8:b0:3a:12:2e:c4:a7:44:06:13:bf:c6:4f:00:58:18:
         76:72:40:84:21:4f:3e:4d:43:ef:e4:4a:ed:5a:ea:dd:ce:82:
         19:6c:dd:12:df:29:a9:e7:b2:ac:32:d8:8f:86:2c:65:35:03:
         9c:e7:75:9d:14:29:06:ad:7f:b8:38:a5:81:ec:0f:fd:77:e4:
         28:be:e9:74:d4:8f:6d:e3:90:1d:b1:c9:a4:99:e1:fc:7b:1f:
         da:7b:5a:4c:ee:a2:7f:43:03:3e:43:bb:e1:5b:e9:6b:2c:bc:
         12:c1:1a:83:cf:71:28:a3:f5:54:1c:ac:4c:6d:2d:1d:65:8c:
         6d:f7:9c:3a:3b:91:3e:90:f4:b2:5b:99:83:43:3e:fe:0a:bc:
         b2:20:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:33:00 2025 by rpki-client