This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File:                     l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier:          /hRyHuNjxNa5977k0rKm5k6TnHWfXEjMT5s65LfZE1E=
Subject key identifier:   14:20:81:6F:BE:AD:DF:06:D5:69:D1:97:99:88:85:98:89:1F:21:E4
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer:       /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial:       019AF72F5C5A3FB814831A94A8B101D3024C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number:          1762
Signing time:             Sun 07 Dec 2025 05:01:07 +0000
Manifest this update:     Sun 07 Dec 2025 05:01:07 +0000
Manifest next update:     Mon 08 Dec 2025 05:01:07 +0000
Files and hashes:         1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
                          2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: ApGIiZpL1ENIoTwvu4/z3ROoYvzYh5urkECD/8l9jyI=)
                          3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f7:2f:5c:5a:3f:b8:14:83:1a:94:a8:b1:01:d3:02:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
        Validity
            Not Before: Dec  7 05:01:07 2025 GMT
            Not After : Dec  8 05:01:07 2025 GMT
        Subject: CN=1420816fbeaddf06d569d19799888598891f21e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:8d:4a:3e:ba:14:f4:c3:d8:9b:bd:a2:cd:
                    a5:75:a5:87:3b:39:41:d7:48:15:89:1f:02:de:9a:
                    3b:54:3b:ba:02:5b:6d:b4:53:56:6a:a6:41:8b:cb:
                    27:b1:f2:2b:3b:95:cb:4d:f0:f4:e1:5f:06:42:21:
                    66:23:f4:c2:93:42:dd:7c:85:1d:8e:d0:8e:29:e3:
                    02:6f:fb:11:39:70:f6:e4:84:03:b8:86:91:63:92:
                    0e:c9:1d:20:a8:56:4b:c7:fa:75:fc:9f:a2:1c:51:
                    f5:3f:ab:69:dc:23:18:f3:99:8a:c5:80:67:71:57:
                    0b:f8:15:aa:2b:aa:10:64:1d:e5:86:f3:c5:e1:9e:
                    dd:48:11:3a:cd:a8:bf:13:e0:04:84:91:71:18:9c:
                    b6:91:ca:f3:1a:d5:68:bf:de:1d:14:15:a3:94:c3:
                    90:e8:5c:bd:40:8b:b7:29:c2:9a:0f:43:a9:ec:95:
                    70:aa:9f:af:2c:29:1b:5f:3e:4c:4f:63:94:be:76:
                    76:b6:28:1d:b7:db:20:c3:1a:9b:6c:12:5d:f3:a0:
                    a3:5d:d6:aa:1c:05:71:4f:b0:6a:90:cf:4d:e3:72:
                    d4:2f:34:9a:0a:a8:6e:b7:a6:35:67:c3:da:a8:10:
                    47:43:f3:a7:19:25:96:ec:74:c4:a2:4a:2a:20:10:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:81:6F:BE:AD:DF:06:D5:69:D1:97:99:88:85:98:89:1F:21:E4
            X509v3 Authority Key Identifier:
                keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8c:69:2f:46:85:04:c9:50:02:f6:4f:ae:8d:92:0e:7b:89:
         36:e1:24:6a:b5:0e:dc:bc:4f:b3:29:04:59:7b:7e:05:8f:5f:
         20:ac:88:50:5f:c9:81:64:c0:0b:64:6b:5d:24:6e:4f:cc:33:
         55:03:23:a8:99:42:0f:39:cd:6f:fc:12:f8:85:01:2f:58:99:
         6d:79:8f:0a:a1:15:16:e0:d4:82:ac:22:6b:03:e4:7a:c0:e8:
         d2:fe:88:67:df:cb:6f:57:19:72:3f:bf:8e:58:bb:d1:e2:51:
         91:d7:d9:4a:3a:83:26:49:8e:35:c7:ac:0e:f5:fe:65:cc:71:
         dc:75:e2:85:c7:39:c1:18:db:23:56:37:11:34:0d:7f:55:8f:
         f5:f4:9c:6b:bc:ef:22:f2:02:86:2d:37:e1:5e:45:9e:b6:aa:
         27:4d:ef:50:d3:50:51:a6:f3:e2:26:75:87:a2:6f:08:10:92:
         53:11:ea:0d:fb:d6:a7:9f:bf:25:55:f4:6f:3a:59:98:a8:26:
         11:57:a9:48:06:fd:58:61:3a:63:95:1e:44:a4:94:46:13:31:
         03:7b:45:81:59:a3:c5:ba:9b:06:da:fa:92:6d:d2:52:c7:c3:
         36:cf:bf:60:79:d5:19:ec:41:77:95:dd:67:82:fe:44:4a:ba:
         6f:50:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:31:29 2025 by rpki-client