This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          w5iq/Wa3EOAHiWMuDXfuq5eOCVlNvedWTBNp+j0zrBQ=
Subject key identifier:   E6:50:98:71:BA:5E:14:2B:9F:8F:E2:B7:DF:7C:E1:06:43:05:57:0E
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       019AF12EAA470A2C43B6EFE93F03679CD2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          069D
Signing time:             Sat 06 Dec 2025 01:02:38 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:38 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:38 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          3: R23zeQRDOen9HPSmR-eKHeta0HU.roa (hash: lKe4syLzRE8BrGtoS0ZImyw7G/jxJEgSU5WDE02BXs8=)
                          4: Rb4b2fJCublE-IL8HhGXicF9sEM.roa (hash: PyYAOqircy60MPWz4V06L7QvOxOEimKDajTYlawGVcc=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: RdMr39oLCV+UbCftVlgM0j2ozrq2DaBeqSEr0pPdm+g=)
                          6: nPr9uZx_D8jJFj15etiyotIJZFA.roa (hash: pbSWt6WwR9cxpCQXd7EkLbNcjMbaXCcbiCmqJC5x8GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:aa:47:0a:2c:43:b6:ef:e9:3f:03:67:9c:d2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Dec  6 01:02:38 2025 GMT
            Not After : Dec  7 01:02:38 2025 GMT
        Subject: CN=e6509871ba5e142b9f8fe2b7df7ce1064305570e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:bf:a0:18:63:b8:73:f6:25:02:b4:dc:c1:
                    38:3b:b8:72:8d:3b:99:1a:86:8b:65:9c:32:10:76:
                    27:c2:3e:81:f8:48:7d:28:b4:18:21:40:80:40:41:
                    01:8b:ec:b4:2c:2a:30:27:1e:0a:6e:8c:26:c6:4e:
                    18:3a:a3:73:a8:b8:bf:d4:05:8c:39:07:97:2f:b1:
                    1a:53:33:a0:f3:13:f1:b5:31:58:c1:46:61:85:18:
                    aa:e2:27:b5:fe:1d:6a:4d:3d:41:4a:22:f1:2d:dd:
                    d5:52:76:53:63:46:5b:f2:fa:8a:06:c8:61:7b:16:
                    f6:a0:46:4f:c9:18:71:7a:d2:7c:9d:c8:12:fb:81:
                    b3:46:89:82:bd:1b:46:ca:2a:79:2c:c5:59:8b:8f:
                    84:95:6d:69:4e:5a:59:13:b7:35:ae:90:96:5b:51:
                    29:5f:ff:69:a0:fd:a5:e6:05:d3:10:64:c1:f9:4e:
                    28:f9:c7:d7:c0:e6:13:d9:b1:7f:db:2d:e1:c9:c3:
                    e1:48:54:14:20:e5:ec:ec:4a:11:18:a1:e5:d3:fd:
                    c1:a8:34:ba:ae:e7:56:1d:63:22:fa:75:4b:03:0c:
                    c0:ad:59:d3:93:f4:46:93:4c:ca:ab:16:96:a4:10:
                    72:07:99:5f:ec:67:ab:00:0b:5a:a1:34:70:1c:85:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:98:71:BA:5E:14:2B:9F:8F:E2:B7:DF:7C:E1:06:43:05:57:0E
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:bd:a7:92:32:04:63:fd:41:86:b9:c8:d7:81:3c:99:dd:
         f0:05:bf:5c:4c:3a:1e:a8:20:98:4f:78:d5:1a:bf:e4:10:96:
         33:74:fe:12:52:b6:d7:81:76:dc:54:08:df:de:2d:cb:fd:00:
         0f:df:7f:31:4d:c4:9f:e2:39:b0:42:b5:af:b7:82:8f:9f:9c:
         f9:e6:22:a9:3e:10:a9:e9:7f:ec:1b:31:b6:f4:18:c6:0f:b4:
         7a:e0:27:64:e7:0b:e6:d4:d3:e8:f4:72:96:9a:5a:cd:9b:06:
         8b:34:c4:a4:56:03:19:78:4e:ea:a2:86:f0:8d:d1:23:ca:d0:
         9d:8e:fb:4d:73:80:b2:7b:7a:4e:cd:4b:b4:d7:47:2d:5c:b2:
         76:af:4d:1f:23:29:bb:ab:a8:12:6a:ec:69:57:1a:89:74:dd:
         fe:79:a6:50:f6:a8:4c:85:cc:b7:76:f6:28:ed:7d:d7:87:cb:
         93:89:cf:7a:3a:4a:0e:ae:a4:6f:e8:25:a1:a7:c2:ea:f0:6c:
         5d:98:d8:16:7e:bc:49:ec:76:05:9f:0d:62:5e:00:c8:b3:03:
         be:46:f9:03:fc:1b:df:17:ea:17:18:22:11:84:ad:bf:b9:8e:
         5d:ef:3c:ef:f3:2f:e6:18:4c:24:6b:3b:b9:a4:14:c9:0d:6e:
         f1:c6:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:01 2025 by rpki-client