This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File:                     QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier:          ssphxHBxmxy0PXYGX0lI3fx4e8wboC+m6GHHCskj23E=
Subject key identifier:   80:16:C6:4F:10:F4:B2:65:5A:B5:A4:34:CC:75:F0:D0:AF:85:95:0E
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer:       /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial:       019B1BA980B978D86A4168253E8AA94E9B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number:          104E
Signing time:             Sun 14 Dec 2025 07:00:51 +0000
Manifest this update:     Sun 14 Dec 2025 07:00:51 +0000
Manifest next update:     Mon 15 Dec 2025 07:00:51 +0000
Files and hashes:         1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
                          2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
                          3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: OL9cvYE1vw1W8n0wXcmF7BTZq+WIasz0Ya9NFhxAEIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:a9:80:b9:78:d8:6a:41:68:25:3e:8a:a9:4e:9b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
        Validity
            Not Before: Dec 14 07:00:51 2025 GMT
            Not After : Dec 15 07:00:51 2025 GMT
        Subject: CN=8016c64f10f4b2655ab5a434cc75f0d0af85950e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:72:e1:53:3d:b9:0f:88:c2:30:e8:13:d4:
                    bc:ff:de:9a:e5:42:65:14:ee:c2:9b:d2:9b:8d:3c:
                    36:8e:e3:e0:6b:d5:b6:6f:fb:a9:5e:55:e4:a7:d0:
                    42:c9:4b:9e:f6:d8:d3:9f:1b:a8:04:75:07:99:8e:
                    b8:bd:db:64:0d:2d:ad:5b:b3:4d:89:16:91:d5:fd:
                    3b:36:a9:87:19:8b:3f:37:07:43:df:2c:a7:79:1b:
                    70:03:94:ce:0a:81:75:94:c2:b7:e0:14:d6:b8:36:
                    a7:31:73:60:8d:ba:60:28:c3:b2:b5:31:dd:28:0d:
                    f2:24:a8:41:68:5d:a3:0f:5f:91:61:17:dc:06:e5:
                    41:97:0a:17:b6:d6:fa:05:f5:7d:b0:a0:87:88:29:
                    7c:d1:52:49:f9:3e:b7:e3:3b:25:19:6a:c1:34:c8:
                    2c:7b:17:fd:ef:b8:3d:c6:5b:99:c8:71:2a:de:e5:
                    f2:3c:e7:d6:e6:25:e2:d4:fd:12:9d:0c:8a:a9:e7:
                    70:37:2c:ba:82:2f:ca:26:ae:0c:82:29:7f:04:d0:
                    71:a4:23:2d:63:43:aa:bb:0f:8c:87:a7:6e:a4:84:
                    ea:df:8c:6b:4f:9e:7a:83:14:17:92:7a:da:f0:33:
                    c6:7f:58:e4:e8:c4:8e:bd:36:11:64:e4:fe:c1:21:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:16:C6:4F:10:F4:B2:65:5A:B5:A4:34:CC:75:F0:D0:AF:85:95:0E
            X509v3 Authority Key Identifier:
                keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:c1:7b:12:26:ea:34:08:af:b2:3f:d7:61:6d:79:79:39:86:
         bd:34:0e:0d:ab:75:02:71:ec:68:68:86:65:69:7d:b9:e5:ac:
         24:e7:c9:98:56:67:b2:dd:68:d0:e7:60:75:72:ae:86:2a:25:
         70:25:07:0c:85:e2:ad:2b:d0:12:a1:bd:84:31:da:35:f4:25:
         e3:f2:ed:09:14:fb:bb:ef:9a:23:1b:db:f6:84:65:8b:5d:b5:
         58:97:9f:ae:47:73:e3:08:5b:6c:88:03:15:76:34:61:f9:31:
         59:72:5b:37:87:34:0b:e1:f8:76:07:cb:29:2b:9d:c5:96:1c:
         f0:ba:fa:3c:8a:e3:41:ac:c1:d7:c7:ec:e4:db:f5:06:17:26:
         d0:d6:40:b1:0d:0b:7f:a8:24:cf:3a:92:1d:99:bc:14:37:1b:
         85:91:9f:82:c0:e1:97:91:ad:b3:c3:5a:0e:fb:79:92:5d:b4:
         e1:c0:b1:13:c7:e6:cd:99:ab:35:db:c3:b8:68:57:f3:35:90:
         18:2c:7b:21:52:d4:06:18:11:b5:a1:37:64:70:e8:97:28:2b:
         76:b1:27:f4:8a:a9:00:f0:57:6b:c0:d7:f2:88:68:9a:32:20:
         76:34:16:c6:a1:c1:40:c5:0a:cf:27:db:32:17:aa:05:ef:1a:
         66:a3:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:18:19 2025 by rpki-client