This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File:                     qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier:          w5bks4TIxXN64GtJQtvegP1RkwraUowBsXOfmtTJQwE=
Subject key identifier:   CC:C7:2C:AD:A9:01:94:C7:6E:54:03:60:84:83:C8:CD:4B:84:AC:6B
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer:       /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial:       019B38A1449852BA0E8E7481617023527FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number:          178C
Signing time:             Fri 19 Dec 2025 22:00:51 +0000
Manifest this update:     Fri 19 Dec 2025 22:00:51 +0000
Manifest next update:     Sat 20 Dec 2025 22:00:51 +0000
Files and hashes:         1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
                          2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
                          3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
                          4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: WgzE8z5JU/kWxydlrFQysuk68M/3rCMCTh6JQZ3mjds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a1:44:98:52:ba:0e:8e:74:81:61:70:23:52:7f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
        Validity
            Not Before: Dec 19 22:00:51 2025 GMT
            Not After : Dec 20 22:00:51 2025 GMT
        Subject: CN=ccc72cada90194c76e5403608483c8cd4b84ac6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:bd:5e:66:48:32:f7:39:3b:17:75:34:eb:
                    67:69:f9:0a:6e:79:a8:e7:12:cc:cc:d6:be:8a:9c:
                    e8:43:4b:95:ce:96:f4:ab:f9:1f:e6:12:bc:6c:ea:
                    c9:cb:92:98:22:ac:b6:13:67:ae:49:ae:48:b7:52:
                    7d:83:3a:d5:f9:f7:15:4c:91:23:b8:49:13:90:61:
                    a2:9f:85:81:ee:85:44:01:f4:62:6e:57:c5:d1:86:
                    aa:a9:57:41:66:7a:27:00:d1:42:01:39:df:fe:e1:
                    66:96:86:28:b3:6b:1c:99:2f:36:b1:d8:95:1b:e3:
                    bf:7e:f0:7f:5d:f9:13:9e:d8:49:81:65:2e:0b:c1:
                    23:f9:5d:34:ed:16:60:bf:01:2d:a6:2c:b3:de:17:
                    49:eb:27:2b:99:7d:f5:21:e6:63:f5:a0:57:40:81:
                    07:f3:27:24:e5:15:3a:76:e3:a6:e9:43:f7:19:28:
                    62:0b:c0:ab:49:21:f4:6d:0c:58:98:34:4c:74:2c:
                    db:07:97:35:34:f5:95:53:eb:7e:77:55:c4:89:69:
                    87:10:03:d7:66:27:75:5a:d2:03:0b:6d:d0:7c:35:
                    07:2a:fc:c6:61:21:05:14:4f:87:a2:b7:72:34:f2:
                    f5:d7:03:f4:60:03:76:e4:4a:14:2f:0d:da:1d:80:
                    81:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:2C:AD:A9:01:94:C7:6E:54:03:60:84:83:C8:CD:4B:84:AC:6B
            X509v3 Authority Key Identifier:
                keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fa:ec:c5:b0:27:8a:78:14:73:49:9b:e0:2b:27:5f:8f:e5:
         36:1e:97:92:1c:5e:a8:99:8c:87:e9:fa:05:09:9b:0d:4e:56:
         bf:8b:04:11:a8:01:7f:26:20:71:f3:f4:c5:9a:61:18:52:c5:
         fa:0f:9f:b1:b7:4e:58:9a:27:e7:59:ff:92:27:db:1e:31:7c:
         7e:9d:50:3e:f9:0e:69:76:3f:59:71:56:d9:91:7b:76:19:93:
         0f:07:07:e6:2e:f4:d3:e7:73:c8:73:ac:49:d3:5f:56:73:31:
         12:70:60:31:b1:82:b4:1d:d6:aa:8a:0d:f6:48:4f:3e:44:23:
         59:f5:17:b5:ba:cd:35:05:dd:3d:68:c9:88:23:3a:ee:d9:71:
         29:be:49:43:65:58:59:9e:ff:30:e8:14:c3:38:01:a0:c7:13:
         da:de:01:95:d7:04:a8:ff:99:ab:9e:ac:f2:cf:9a:53:d2:82:
         dd:86:e0:54:81:87:ea:88:05:63:14:9e:e7:a4:34:c9:d0:76:
         fc:cb:1e:67:61:a1:60:bc:ed:88:91:3b:e4:7b:1a:8d:ed:e2:
         51:2e:3e:7f:54:24:90:00:aa:8d:c4:5b:5f:55:14:ce:c2:0e:
         17:f8:d1:91:10:ce:ae:14:e1:5d:d1:29:3e:93:bb:54:a8:17:
         f0:f2:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:52:50 2025 by rpki-client