This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File:                     QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier:          wfDQV1SCy2ragRr+I8dG+gbq3xz/EFq076ktMe2H//k=
Subject key identifier:   D0:E0:03:86:7E:26:8C:6C:F9:37:B7:83:18:05:08:FD:6D:07:79:C8
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer:       /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial:       019AF051C57199B1808A5105A7F412A2AED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number:          1762
Signing time:             Fri 05 Dec 2025 21:01:22 +0000
Manifest this update:     Fri 05 Dec 2025 21:01:22 +0000
Manifest next update:     Sat 06 Dec 2025 21:01:22 +0000
Files and hashes:         1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: b5WWJ+jBhvHDBrZiuETYldYLD3wu4eUbQ1oIpi/y9Q4=)
                          2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
                          3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:c5:71:99:b1:80:8a:51:05:a7:f4:12:a2:ae:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
        Validity
            Not Before: Dec  5 21:01:22 2025 GMT
            Not After : Dec  6 21:01:22 2025 GMT
        Subject: CN=d0e003867e268c6cf937b783180508fd6d0779c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:26:5d:d1:65:d5:57:ff:ad:62:07:d1:f6:
                    d2:5c:95:d9:b0:04:fc:db:19:a8:ce:8f:9e:60:42:
                    d9:a3:ad:6e:6f:d8:df:94:5b:e9:b6:0c:e9:11:b0:
                    65:27:bf:7f:31:de:af:a1:73:30:e5:e5:99:12:c4:
                    7c:8d:1c:54:25:31:50:28:c9:b1:64:e0:6f:8c:cf:
                    3f:3e:d3:e7:b6:00:46:f0:4d:45:e2:95:63:7a:72:
                    61:3f:14:21:83:5f:02:dc:d5:7f:30:20:c3:d3:b1:
                    73:46:ea:e1:d5:e2:4c:34:21:09:61:f3:24:8c:b9:
                    41:74:c0:68:53:3a:8c:5f:fb:07:0b:07:47:aa:e1:
                    4b:21:dd:67:a8:8b:ef:7a:64:3e:a5:4e:9a:94:ea:
                    67:2f:84:c3:1e:8b:94:d7:7a:d7:76:b4:ba:bb:2b:
                    48:3f:26:57:8c:af:25:d3:ee:b6:8f:5a:92:82:ed:
                    24:55:66:dd:4e:f3:d8:14:a0:cf:89:43:3f:9c:b3:
                    1d:ba:35:d7:91:8b:a8:ab:67:39:f4:64:e6:5d:95:
                    ed:5e:97:50:9f:53:9c:f5:a7:79:13:b8:2a:ea:01:
                    d7:2f:b3:a7:b4:87:76:aa:90:b4:a7:b9:39:55:f0:
                    55:c7:ea:94:9c:13:78:a3:a7:b9:aa:7f:a2:98:d1:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E0:03:86:7E:26:8C:6C:F9:37:B7:83:18:05:08:FD:6D:07:79:C8
            X509v3 Authority Key Identifier:
                keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:b9:15:5f:40:1d:b3:95:3d:ba:4c:23:51:de:6d:33:af:
         07:2c:ec:68:ba:47:c4:f9:be:5f:fe:cd:76:d7:f9:13:93:1f:
         ae:4f:cc:e3:50:53:e8:15:ea:2c:16:a0:98:73:1a:e6:5a:89:
         ca:fd:1a:82:53:1b:bb:d6:39:24:11:37:d7:ec:3c:95:f5:85:
         df:b9:c3:c2:c7:66:8e:88:d6:a9:2b:77:37:ca:dc:d2:4e:53:
         a3:2e:80:11:8e:55:3e:af:7c:51:a6:1c:e1:d2:8b:9f:9f:4a:
         66:1e:43:ad:33:90:13:16:d4:2f:e6:ff:0b:42:0c:ca:8b:87:
         d7:fb:ff:02:9f:76:19:1a:88:7f:28:47:d3:39:09:d2:28:9c:
         8d:6c:6c:13:f7:9d:d2:2f:6d:69:77:76:b3:53:a4:70:04:7a:
         4b:15:28:5e:ad:7c:01:f9:93:cf:d0:4b:dd:2a:9a:0e:3c:d3:
         93:04:64:30:a2:68:c0:bc:79:6b:f7:de:65:7d:7e:4f:24:28:
         0a:11:7e:cf:43:03:4d:68:c1:6e:f9:4d:e8:47:06:da:20:30:
         a0:6c:36:cc:bc:13:53:bc:a6:cf:fd:1a:fa:bf:ed:57:78:12:
         8f:5c:11:0b:88:b1:9e:9e:8e:8a:e0:44:a5:9c:1c:54:fe:67:
         17:54:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 02:45:11 2025 by rpki-client