This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File:                     Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier:          c+pLG8NGSSMNdNqEYPda7dWJj6F7GlFfW86K8SeUNVI=
Subject key identifier:   CA:36:ED:02:23:65:05:9D:B6:2E:CC:53:4A:1F:BA:A8:14:D9:79:1A
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer:       /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial:       019B19F1D6EF2AE83E1B9AE1342588CDCBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number:          05F9
Signing time:             Sat 13 Dec 2025 23:00:38 +0000
Manifest this update:     Sat 13 Dec 2025 23:00:38 +0000
Manifest next update:     Sun 14 Dec 2025 23:00:38 +0000
Files and hashes:         1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
                          2: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: WaAC9oaj+ptRLNJEcwbs8V4PNLWlBvQGcJml8upVzkE=)
                          3: lyYoYFNGC2A9WNKCueXrm4mkRZo.roa (hash: IZrpJH4Ut/OiG1jPgHzsJ5IYnAXiTXDkQvi3YTSJS9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:f1:d6:ef:2a:e8:3e:1b:9a:e1:34:25:88:cd:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
        Validity
            Not Before: Dec 13 23:00:38 2025 GMT
            Not After : Dec 14 23:00:38 2025 GMT
        Subject: CN=ca36ed022365059db62ecc534a1fbaa814d9791a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:95:a3:be:23:73:33:aa:27:cd:d7:d3:76:
                    0f:6b:aa:da:c3:14:86:27:24:b7:2b:95:39:f3:54:
                    b7:d4:13:7f:24:61:d9:da:90:15:9e:1d:5a:f7:cf:
                    77:b1:be:4e:a5:fb:90:83:50:f9:fc:a4:b2:97:27:
                    fe:58:16:83:1d:7d:1f:e7:47:92:a2:14:51:92:0d:
                    aa:bb:2c:dd:eb:a1:6f:d6:c0:97:87:06:e6:ac:24:
                    fb:a9:87:df:5a:74:7c:16:2c:3e:47:e6:a7:97:7e:
                    54:14:c1:eb:13:08:49:c9:6c:da:f1:5c:bd:24:b8:
                    ec:c7:d9:8d:5a:93:2b:ad:79:28:df:34:ae:f5:ad:
                    77:ae:e2:08:ba:28:7d:21:a8:14:a5:e3:d6:81:b0:
                    7c:3c:09:6b:33:84:00:dd:eb:f3:9b:d8:22:dc:b3:
                    ff:75:4c:92:b4:b1:3b:f3:26:28:4b:c5:ec:a6:4e:
                    6e:e1:2f:55:f6:4c:08:aa:f4:5b:5c:96:61:2a:b0:
                    98:8d:bf:42:79:7a:b7:4f:bc:82:2c:36:4a:e5:18:
                    dd:02:61:a1:2f:a6:05:51:88:8e:5c:51:79:7c:fd:
                    66:d2:9f:96:7a:c5:f4:8e:1b:69:22:d9:af:15:61:
                    52:32:3c:5f:db:66:13:76:30:19:39:8a:50:58:77:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:36:ED:02:23:65:05:9D:B6:2E:CC:53:4A:1F:BA:A8:14:D9:79:1A
            X509v3 Authority Key Identifier:
                keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c0:1c:e4:50:b5:6c:4e:ee:e1:7c:cf:23:cf:5a:0a:06:19:
         77:64:cb:4c:7e:f0:3f:7b:97:8c:05:2d:b5:68:f2:2e:01:2f:
         23:15:7a:05:e6:96:55:be:d0:42:6b:c3:57:b2:7e:a6:f4:45:
         5b:a1:95:39:3e:6c:c7:62:c1:ef:df:a6:76:4c:f9:aa:6a:95:
         4f:04:64:bc:9f:27:0d:5d:c9:19:bc:0b:d2:b3:f4:bf:39:2d:
         8e:d8:7c:bb:31:14:ab:84:b1:29:98:a1:ed:62:37:8b:94:85:
         b5:cf:3e:b2:a2:f9:54:4c:dd:5b:57:5d:38:b2:bf:f3:59:6a:
         68:86:de:a4:1c:b7:d8:2a:6d:c6:11:09:62:9c:a0:f1:02:79:
         3c:ea:a5:ab:aa:5c:40:b1:f4:ec:f2:4a:2f:1f:d1:25:af:26:
         71:94:26:ae:cd:b6:3d:d2:d8:34:62:fc:7f:a3:ef:61:d3:72:
         06:a7:ff:f8:3f:d6:eb:42:8a:aa:9d:42:3b:4e:9f:12:14:45:
         06:82:f4:50:e2:71:38:00:88:87:69:b0:04:ce:26:7e:4b:0b:
         51:d2:a2:19:76:5b:0f:78:86:d6:65:2e:d5:1e:a1:dc:29:8a:
         ae:cf:68:2a:6d:ea:08:6e:bb:17:bb:51:a5:ce:e2:64:d4:cf:
         a6:d6:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:01:55 2025 by rpki-client