This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          UAhqVa5gfFUn90X58XAATaPG+axCfCvJp65sHlLj8TM=
Subject key identifier:   0C:3A:6E:F3:39:19:11:95:0C:3A:52:A1:6B:BC:59:80:32:75:61:72
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       019B1013304AF0CC880C1CF5FF260454FB78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          0F92
Signing time:             Fri 12 Dec 2025 01:00:51 +0000
Manifest this update:     Fri 12 Dec 2025 01:00:51 +0000
Manifest next update:     Sat 13 Dec 2025 01:00:51 +0000
Files and hashes:         1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
                          2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: NCfs5jH47uVYo4LWa590gSzzx2cpeOV8sT+C6tqaj+U=)
                          3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:30:4a:f0:cc:88:0c:1c:f5:ff:26:04:54:fb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: Dec 12 01:00:51 2025 GMT
            Not After : Dec 13 01:00:51 2025 GMT
        Subject: CN=0c3a6ef3391911950c3a52a16bbc598032756172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:e7:f7:b6:b8:00:b4:c3:43:85:ef:c9:e1:
                    61:cb:b7:0a:ba:4c:02:2c:ed:12:30:86:4d:94:c1:
                    9d:69:0f:81:3d:2c:36:a9:69:bf:1d:00:a6:b4:e3:
                    4d:90:62:f6:67:2c:83:dc:c9:53:63:71:cc:25:85:
                    15:f4:44:3a:3d:d4:74:e3:8e:ce:80:08:f6:56:76:
                    fa:4d:47:b5:db:2c:ee:a8:8d:dd:ce:76:79:2a:d9:
                    1f:d4:36:79:72:0c:e1:88:9c:31:23:81:15:62:a1:
                    66:11:9e:e4:0e:55:36:bc:37:1b:86:72:99:1a:0c:
                    5c:37:5c:7f:ef:62:9f:b5:a3:c2:19:0a:eb:0e:cc:
                    5c:62:62:44:21:9e:dc:fa:e4:3d:c4:b7:4a:dc:e9:
                    ac:51:ae:8c:0b:8c:0b:c1:60:7c:79:4f:8f:e3:61:
                    c1:8e:9f:77:2c:60:37:24:24:96:29:7f:86:f2:b3:
                    ab:86:14:2a:c1:cf:97:a6:b3:d7:5a:70:8e:a0:5d:
                    92:e2:95:47:d7:5e:ac:59:4d:ed:c4:04:5c:59:e3:
                    98:8a:13:dc:cf:65:99:aa:fd:0c:09:74:97:b4:01:
                    f0:e3:b3:20:3e:f3:df:8b:08:9b:70:83:ae:5d:33:
                    da:10:7a:0d:b4:32:87:58:80:55:66:d7:34:3e:fa:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3A:6E:F3:39:19:11:95:0C:3A:52:A1:6B:BC:59:80:32:75:61:72
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:8f:af:74:d6:d0:1d:e3:5b:91:de:36:18:b5:f8:35:5c:
         e3:28:95:08:ab:b1:7d:b2:90:7d:da:11:6e:24:71:01:d4:dc:
         74:61:8b:49:4c:ec:00:78:fa:87:5c:96:72:2e:e5:52:80:e6:
         6d:8d:95:37:d3:cd:7a:62:b6:e5:ae:28:fe:99:8a:64:b3:61:
         3d:61:8e:38:c9:7f:e4:26:14:bf:52:5b:fe:f5:71:1d:df:bd:
         c0:4c:7f:1e:ec:09:b5:0e:f2:00:d9:5f:87:d0:a1:71:85:e9:
         cc:6c:4b:64:98:fc:20:c6:1b:78:10:90:ef:c3:14:cb:cc:24:
         61:b6:3c:b5:78:be:10:3d:e2:5d:31:5e:b0:65:37:48:b9:d2:
         90:47:56:e2:4f:e7:c3:75:12:6c:dd:a1:78:a1:80:e6:20:9a:
         2a:92:6b:e3:d4:ec:d3:50:72:7b:14:f5:32:12:7d:40:3f:9c:
         0d:a2:01:c7:8c:20:30:d4:e9:a7:00:bf:36:cb:0d:24:39:69:
         41:39:85:c8:15:d3:25:5e:45:98:68:64:b2:14:9e:e3:bc:c2:
         c1:ad:51:18:c2:06:24:8c:3a:16:75:8d:ce:68:9a:a4:ff:65:
         ae:14:ee:0f:63:05:35:ef:ff:98:c3:2b:06:13:99:a7:6d:26:
         67:59:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:26:10 2025 by rpki-client