This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File:                     ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier:          5VxK9+uQKvK4AIlvA/tQs8Vnkm/+/xr8/YzZbAWCu9k=
Subject key identifier:   FD:2F:F4:DD:74:10:21:E0:FA:3A:6C:7A:DB:54:4B:3A:A3:29:DE:20
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer:       /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial:       019AF0F5D5BB4905ED4EDF07038F5C825E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number:          08A7
Signing time:             Sat 06 Dec 2025 00:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 00:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 00:00:34 +0000
Files and hashes:         1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: ZSydN0Ny8kL0FG1Ul7MmP8IMlCI2DbYDIkjGUkpQjWU=)
                          2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
                          3: xDM12CcGD2Bni6l8L8cHWegda-o.asa (hash: KFGZ+nd44n5SlA7OxGk3cEFVuk7r49rEOqIITKnjxxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:f5:d5:bb:49:05:ed:4e:df:07:03:8f:5c:82:5e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
        Validity
            Not Before: Dec  6 00:00:34 2025 GMT
            Not After : Dec  7 00:00:34 2025 GMT
        Subject: CN=fd2ff4dd741021e0fa3a6c7adb544b3aa329de20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:07:c4:11:21:aa:03:e4:ec:1c:45:17:bc:
                    a9:f8:3b:d0:9a:73:f4:99:a2:49:e8:b9:53:ee:d5:
                    90:a3:aa:23:eb:88:c0:e9:25:7c:21:3b:5d:bc:9a:
                    34:76:90:0f:1b:f8:a5:ce:78:52:c9:ec:7c:e1:5f:
                    c6:b8:bd:87:52:83:81:b5:66:21:8e:7a:dc:96:3a:
                    51:5b:54:53:fb:bc:be:b6:76:77:75:1d:ec:37:30:
                    8e:a0:1a:32:d9:63:0b:2d:b9:2e:6d:d3:a4:db:3d:
                    fb:aa:c0:09:a4:e1:cd:85:79:bc:97:28:90:79:7f:
                    97:3b:05:ae:87:bf:98:09:da:aa:a5:ab:12:df:6c:
                    07:e0:d9:6f:ca:8d:a6:0d:19:62:c9:74:c6:e8:99:
                    f8:25:ad:f2:34:2f:49:21:fb:fc:11:f6:07:93:d5:
                    da:2f:cb:82:8a:3b:c1:4e:93:95:85:bf:3b:39:6a:
                    d2:41:98:c3:31:2c:b7:d5:0a:1e:c8:96:fc:40:ec:
                    45:90:98:6c:03:e2:21:47:e5:ad:3c:8a:e6:cd:3d:
                    fd:1a:cc:0c:73:c4:0f:15:9a:b3:2f:ba:8d:33:1b:
                    fd:ab:dc:f4:93:7e:c5:05:1e:b2:21:5b:46:d7:d4:
                    cc:71:69:30:1d:46:8a:62:c5:09:d6:b0:95:3e:62:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2F:F4:DD:74:10:21:E0:FA:3A:6C:7A:DB:54:4B:3A:A3:29:DE:20
            X509v3 Authority Key Identifier:
                keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:73:44:1a:8f:47:f6:81:98:37:d3:17:8a:4e:92:b1:20:
         9c:0e:bd:bc:10:0b:dc:35:53:1f:da:c3:47:a8:88:aa:de:a8:
         a7:bc:0a:47:a4:1d:bc:94:e4:a9:02:ec:02:66:b6:ff:ba:df:
         5f:79:68:f9:9d:fa:22:4a:8a:8b:51:83:67:67:2c:dd:7f:04:
         ea:4e:86:2d:c2:88:06:aa:90:6d:8c:21:be:65:ac:48:8c:2b:
         17:8d:47:8d:b0:5e:f2:aa:1b:da:67:78:7b:8e:7b:8b:24:78:
         4b:35:70:37:c0:57:d1:b6:e5:13:a9:77:d0:4a:dc:d7:ab:ee:
         3d:64:0b:69:b4:22:93:09:6c:7e:02:3c:e7:a5:7f:48:8c:a7:
         b7:e5:92:64:b1:21:78:39:23:45:e9:4c:e9:a8:81:f1:3d:d5:
         ab:cf:c2:ec:0a:6b:eb:47:88:47:c5:b1:85:bf:d5:8f:6f:5e:
         c4:40:db:90:d7:9b:6d:17:f2:45:9c:14:19:4d:bb:88:93:bb:
         ec:73:40:91:87:e8:75:a7:84:d9:27:06:f4:8f:48:ca:5d:e4:
         ba:66:33:0a:48:e1:c5:47:f1:d7:fa:06:8a:38:ea:ad:9c:83:
         cb:66:03:bc:6a:17:06:a6:48:53:72:ce:bb:a3:cd:01:42:ca:
         a3:d5:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:32 2025 by rpki-client