This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File:                     qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier:          d7y1o3eU2Tzy959fhNju92a/dusH0dFzzpoqm0nFtGI=
Subject key identifier:   FE:C8:D9:26:20:D9:9E:AE:77:5F:FA:89:83:9F:FB:5E:83:6F:CA:4A
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer:       /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial:       019AF46595EC8958952105E7E6C3056A8A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number:          1598
Signing time:             Sat 06 Dec 2025 16:01:29 +0000
Manifest this update:     Sat 06 Dec 2025 16:01:29 +0000
Manifest next update:     Sun 07 Dec 2025 16:01:29 +0000
Files and hashes:         1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
                          2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
                          3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: PQxrl1fyAIPOi2vNtwSrnHiqBaaWgu/zEhao417cWaA=)
                          4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:65:95:ec:89:58:95:21:05:e7:e6:c3:05:6a:8a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
        Validity
            Not Before: Dec  6 16:01:29 2025 GMT
            Not After : Dec  7 16:01:29 2025 GMT
        Subject: CN=fec8d92620d99eae775ffa89839ffb5e836fca4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:bc:a9:15:e5:74:7f:89:5c:28:6c:6c:63:
                    a8:fb:d7:e7:c7:bb:35:3c:b4:22:54:41:45:e9:af:
                    f9:5c:5e:4e:cf:a2:1a:c8:71:aa:8a:c1:75:66:1c:
                    6e:46:e1:3e:30:d7:5b:c3:d9:1e:63:00:98:69:2d:
                    01:a7:3a:5d:7b:76:9b:e4:77:05:6b:aa:fe:5e:73:
                    dd:3c:87:9b:ca:5e:e8:f6:68:30:95:82:44:b1:4c:
                    0e:b7:00:c3:50:b0:55:0e:c9:0d:c5:1b:48:de:cc:
                    b2:0c:37:e2:7e:51:7e:74:71:48:7d:ec:82:18:34:
                    18:e5:4e:5f:a9:45:a3:68:2a:6a:37:04:2e:be:64:
                    05:eb:23:d9:6f:a2:ab:79:a6:27:c2:95:85:f7:43:
                    76:b6:e7:9f:66:5d:3c:00:73:21:a0:76:49:1f:49:
                    e6:69:d0:ec:92:84:2e:8c:bd:18:01:77:08:b2:82:
                    b2:38:a3:85:8c:f0:29:cc:56:da:15:8e:d9:f0:6c:
                    07:a7:51:45:d9:a4:c7:e9:b8:79:06:91:4f:d8:6d:
                    8a:52:10:f7:4a:fb:53:03:5b:2b:58:41:95:d2:a4:
                    48:b3:45:8e:6b:a4:46:c6:00:ed:f7:68:48:9e:77:
                    63:f6:a5:fa:ce:49:d7:9e:59:91:da:87:11:33:61:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:D9:26:20:D9:9E:AE:77:5F:FA:89:83:9F:FB:5E:83:6F:CA:4A
            X509v3 Authority Key Identifier:
                keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:d0:ed:9a:7c:fb:9a:83:77:c9:00:03:7e:30:85:bd:75:
         72:ba:34:24:91:e6:90:c5:9c:90:9c:3f:40:58:bc:2d:6d:5b:
         f4:9a:62:48:ba:4e:0b:27:8b:75:e2:0d:f1:ff:2a:47:60:23:
         fe:67:2e:8f:1b:60:94:18:1a:9f:fd:53:23:29:e8:1d:40:8b:
         61:0b:20:86:f2:f4:27:a0:f5:19:47:21:17:af:ce:d8:d1:f0:
         39:2b:cd:2f:a1:8a:bf:03:a6:fe:b3:1c:42:21:23:89:42:0a:
         d0:f4:fe:f5:53:68:57:1e:26:17:e4:82:bb:7c:20:4b:a5:65:
         b0:5f:2a:eb:73:0d:91:05:35:d4:33:96:45:77:aa:50:88:e3:
         d0:3a:9f:42:a6:77:44:81:c8:8e:1a:83:aa:8b:38:9b:61:cf:
         f7:58:9b:84:57:00:80:48:8c:d7:8b:77:c1:96:84:9b:4e:37:
         fe:1f:67:5b:e3:08:74:53:cf:2b:4f:65:ae:78:f7:47:b0:1a:
         26:d1:9a:1f:42:07:d7:44:f5:a3:8b:59:47:ae:d0:2e:85:ac:
         7b:50:c6:8a:3c:0f:68:51:fc:55:24:16:18:d7:a0:30:b9:09:
         37:bb:3d:60:48:51:56:3b:50:6f:a5:6e:b9:a7:3a:31:ad:55:
         54:09:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:53:56 2025 by rpki-client