This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File:                     qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier:          m9XYGmFM0QyqeWiAYtIghCJN5ReigmX+xhw/GaNbYro=
Subject key identifier:   EF:DE:D2:83:7F:33:78:85:DE:53:99:1D:08:7A:72:90:32:2D:39:82
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer:       /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial:       019B1CBBFD9A157ADEDF096D39F9E60FBAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number:          13D4
Signing time:             Sun 14 Dec 2025 12:00:40 +0000
Manifest this update:     Sun 14 Dec 2025 12:00:40 +0000
Manifest next update:     Mon 15 Dec 2025 12:00:40 +0000
Files and hashes:         1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
                          2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
                          3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
                          4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: /aNstVTbi2eGF09pbxST4uTndAypUpTOFPjpgH9TC8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:bb:fd:9a:15:7a:de:df:09:6d:39:f9:e6:0f:ba:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
        Validity
            Not Before: Dec 14 12:00:40 2025 GMT
            Not After : Dec 15 12:00:40 2025 GMT
        Subject: CN=efded2837f337885de53991d087a7290322d3982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:d1:5b:cc:c0:61:ca:ca:b9:3d:76:b2:cf:
                    94:49:13:06:6e:5b:c6:df:da:9d:95:9f:6f:72:ff:
                    f0:34:76:b2:57:78:97:86:12:67:df:2c:99:7e:28:
                    c5:be:ea:09:ae:bd:73:d6:2f:ca:7b:ae:1a:60:30:
                    c2:92:87:36:35:2a:df:3c:1b:67:32:49:c4:0e:72:
                    2d:ec:5e:5d:dd:57:1e:29:76:d5:23:04:e2:4e:26:
                    3b:fe:c8:52:00:b3:41:64:91:4e:98:44:51:69:2a:
                    00:9c:e4:b5:c1:88:22:e8:83:61:aa:d4:3d:24:5d:
                    79:80:dc:80:f1:c7:99:13:f9:63:1a:96:48:2d:56:
                    0c:32:4d:03:5f:06:9b:4c:db:b1:e8:8d:95:e2:ab:
                    cc:da:7c:a5:51:eb:2f:62:87:c0:5e:6d:91:01:07:
                    8b:f4:f4:1c:1c:a4:26:c2:d4:8a:82:33:d3:26:1d:
                    f5:81:d1:77:e4:bd:1a:37:ba:a6:28:8c:2b:bc:59:
                    f9:09:7f:05:16:82:4d:36:8e:06:dc:16:a8:5d:84:
                    d9:42:12:f2:0d:b0:a0:a6:dd:6b:6f:ec:63:e1:3f:
                    bb:19:e3:a0:0e:90:4a:91:12:1d:fb:d5:56:76:8e:
                    8d:39:6e:27:5e:f9:a5:e8:68:76:cd:4b:c3:48:48:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DE:D2:83:7F:33:78:85:DE:53:99:1D:08:7A:72:90:32:2D:39:82
            X509v3 Authority Key Identifier:
                keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:cb:51:41:3c:27:d2:3b:95:9a:2c:2f:43:34:70:b3:5c:
         a2:6a:ef:43:f4:46:4e:98:35:54:b6:9d:0b:a2:6c:73:57:cf:
         d8:70:33:2d:b9:f6:0f:f9:6d:de:99:88:f7:26:8c:0f:96:67:
         9b:c1:60:ae:2f:0c:01:14:a1:2c:18:f7:68:46:18:66:8a:21:
         ae:3f:2d:c7:43:f2:66:73:24:fa:1e:02:e6:56:5e:6d:b3:fe:
         c9:27:31:4a:84:51:16:1a:a1:66:e2:d5:24:e2:05:fb:dc:32:
         b9:2d:ca:a1:3f:c4:bc:88:f8:e7:8d:14:61:5a:5d:f9:95:67:
         90:32:2b:13:d2:f4:aa:94:86:72:7e:62:d3:38:42:b3:eb:be:
         8a:7c:d2:c8:de:90:b7:05:2a:b6:cc:81:29:a9:e0:3f:70:2d:
         d9:7a:eb:d6:22:41:48:ca:b3:9c:e2:ea:f6:d6:28:b2:c6:ef:
         d9:fa:3a:f5:bf:2e:80:cf:dd:3b:9a:62:c6:37:ea:98:ac:77:
         c0:5a:64:c1:b8:6b:a2:61:0a:6c:af:5b:f6:63:0b:5e:f2:fe:
         29:2e:32:a4:95:11:7b:94:c8:c4:0a:45:23:c2:b9:dd:db:c5:
         b4:27:26:6e:7f:05:5b:10:2d:41:a7:6b:fa:6a:ae:68:be:4f:
         73:cc:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 14:37:40 2025 by rpki-client