This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File:                     qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier:          M/EkAfBXA3hJCpHMjeBxZKbHvFug5u3ulfWpLnh1UUc=
Subject key identifier:   B0:D1:EC:7D:43:D8:89:70:9C:80:95:14:95:68:C7:78:00:93:56:20
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer:       /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial:       019AF23FAF8992D67A2DEC4D0716ACA2FBD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number:          0CA4
Signing time:             Sat 06 Dec 2025 06:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:51 +0000
Files and hashes:         1: cTUW6h8O7oJIMmgLFdy8XjEMwQM.roa (hash: GWLeGo5Tx1NQYnIt9PV3FBH+YZ+jq0YpS9g5boQS2IE=)
                          2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
                          3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: NIVTehYoGqOEX5Q0ZdDChP1dqWVb6j+Chjk+QC3NHYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:af:89:92:d6:7a:2d:ec:4d:07:16:ac:a2:fb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
        Validity
            Not Before: Dec  6 06:00:51 2025 GMT
            Not After : Dec  7 06:00:51 2025 GMT
        Subject: CN=b0d1ec7d43d889709c8095149568c77800935620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:45:74:66:aa:4b:c6:b4:b9:f1:68:fe:3c:
                    bd:05:4d:fc:25:c7:aa:07:c1:c0:22:6a:d4:17:31:
                    bb:c3:55:6f:99:39:a6:cc:cd:02:a5:ec:35:1f:bd:
                    07:42:b8:28:64:5d:b1:51:17:0b:84:55:db:7f:72:
                    fe:7b:5e:47:63:75:d1:3b:8b:6e:29:b2:6b:2c:37:
                    b0:ba:9d:51:1a:69:01:92:e6:b9:be:8a:9e:29:1c:
                    fe:ea:70:62:99:05:6c:c1:15:60:40:06:b4:bb:6d:
                    95:7b:c0:20:f7:78:e3:b5:b7:29:2d:f3:0a:39:e3:
                    4d:45:f3:71:6e:6b:60:46:3a:44:a0:ee:20:d6:e4:
                    80:3d:c3:9e:95:a7:f1:a1:b4:99:7c:6b:a4:93:dd:
                    4c:a9:d4:55:cd:ef:49:50:3c:5c:52:65:c7:6a:a0:
                    80:25:62:8d:09:f2:f3:80:eb:5b:68:3c:5a:bd:cb:
                    0e:be:4b:80:b7:22:19:e8:3b:e4:0d:f3:db:3b:d8:
                    f0:79:6a:b6:cb:56:cb:c1:09:b7:70:e6:c7:06:b0:
                    34:92:d4:bb:2b:f6:59:6f:cd:1b:06:c9:da:c0:b7:
                    27:98:f1:ff:2b:ed:52:d9:2e:39:df:71:c3:9c:9f:
                    b3:bb:76:41:b0:a6:bf:c3:05:b4:8f:24:c5:84:e7:
                    7e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:EC:7D:43:D8:89:70:9C:80:95:14:95:68:C7:78:00:93:56:20
            X509v3 Authority Key Identifier:
                keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:39:71:bb:c3:de:84:29:4b:a7:0b:3a:96:ab:d1:26:b5:
         80:f4:3a:62:dc:41:8a:84:89:7d:24:c4:70:b3:d4:42:42:73:
         ac:46:e5:c6:69:2f:6b:d3:b1:ac:7f:6e:c0:9b:9c:30:6e:3d:
         3c:9d:55:42:bd:71:50:49:a2:5c:27:09:ea:a5:f5:3b:33:a1:
         33:0a:e6:4c:bb:dc:63:d4:4a:86:7e:00:ba:62:fd:f8:54:2d:
         ac:90:0b:3f:1a:d6:ee:4f:cc:e6:de:51:0c:71:55:17:09:af:
         d5:6c:26:78:2c:ab:73:8b:be:43:f5:0e:6c:56:7e:f3:a7:a0:
         bd:39:c9:0a:97:80:a7:b4:88:0b:17:f9:5f:c9:60:86:a9:1b:
         3e:ca:ce:9e:19:42:fb:63:70:d8:7a:e3:4b:7e:86:68:76:2d:
         f7:a8:f9:f5:42:a5:31:b0:70:a2:9c:f8:1a:b3:49:75:22:10:
         fc:b6:1d:51:b9:46:ad:a1:04:4f:6b:f3:c9:67:0e:be:60:42:
         bd:a0:fb:8a:84:b8:99:ca:85:81:04:28:f2:d2:84:8d:c1:24:
         5d:fa:c5:34:80:35:1c:de:b8:bc:0a:9c:b7:1e:24:c9:c0:53:
         9d:a2:2a:fc:98:ce:76:ea:48:56:65:6f:31:ff:7b:34:71:51:
         da:ec:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:59 2025 by rpki-client