This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          G9V032uzwsgLw2tMyCPO8eN1ZAga9ma3ybVqFjodSx0=
Subject key identifier:   A1:8D:EA:B2:50:66:5D:A5:2F:C6:14:B2:F2:59:69:B7:9E:A2:3D:BD
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       019B341F8CC8D205451D84BEF8AFB17ABE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          136C
Signing time:             Fri 19 Dec 2025 01:00:41 +0000
Manifest this update:     Fri 19 Dec 2025 01:00:41 +0000
Manifest next update:     Sat 20 Dec 2025 01:00:41 +0000
Files and hashes:         1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
                          2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: LxXBx94RQ7CdJAG+GjLKiAu1lu7oXn/1S1ASBsRdh3A=)
                          3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:1f:8c:c8:d2:05:45:1d:84:be:f8:af:b1:7a:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Dec 19 01:00:41 2025 GMT
            Not After : Dec 20 01:00:41 2025 GMT
        Subject: CN=a18deab250665da52fc614b2f25969b79ea23dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:8c:6b:bd:49:23:a4:ca:5f:dd:79:a9:ec:
                    c6:eb:63:7c:66:b5:aa:54:e0:9b:f7:ff:ed:e5:72:
                    3d:4a:17:18:e8:74:33:0a:36:69:ea:5c:15:3d:ed:
                    1c:90:da:a7:e6:e7:e5:a0:d3:07:02:ef:fd:8e:e4:
                    82:90:47:5c:46:1c:0a:15:50:e0:97:4b:20:f7:93:
                    82:58:3a:fb:8f:a9:8f:85:37:aa:be:82:84:3a:2a:
                    cf:37:b7:e2:15:d1:7b:c1:0f:3f:f3:37:13:a2:41:
                    b2:33:8d:2a:d7:4c:26:ac:6a:d9:54:0f:a0:6a:18:
                    16:65:04:66:4b:83:b2:73:7b:e4:bb:20:dc:c0:7e:
                    b5:b3:3b:fc:84:23:29:3c:d5:1c:11:15:0f:ac:95:
                    a3:f1:25:66:db:2a:4b:1c:37:0d:c5:18:24:ad:04:
                    7e:b4:30:fe:98:ec:c9:a8:e2:36:a2:5f:25:27:fa:
                    78:d6:ac:a4:8a:1c:31:60:0e:a1:fc:a2:a7:da:af:
                    71:19:d5:1b:77:42:c9:07:4d:68:fb:ad:26:9a:76:
                    89:5f:56:09:27:07:64:ea:40:41:23:2b:1d:88:71:
                    a6:d8:5f:85:45:de:4b:48:a6:ac:c2:a5:5d:21:df:
                    db:dc:db:67:1c:a3:ca:1e:b4:b4:57:a6:ed:7e:f7:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:EA:B2:50:66:5D:A5:2F:C6:14:B2:F2:59:69:B7:9E:A2:3D:BD
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c0:31:8f:33:ee:97:18:04:9f:b4:7b:b2:2f:10:e2:db:40:
         98:07:d7:59:de:c6:8a:b3:9c:b0:1f:38:be:c2:35:f7:13:7c:
         62:05:ff:9a:64:17:51:10:7d:aa:88:c2:95:41:0d:19:2a:4a:
         47:34:bb:65:48:2e:5b:26:b1:c9:24:bc:f8:43:0d:03:82:5c:
         eb:79:bb:c8:3b:bd:6a:f7:0c:70:dd:aa:5b:35:79:b6:9f:e7:
         07:58:14:3f:39:10:c9:aa:38:32:df:9b:f4:9d:4b:44:bb:ac:
         48:1b:a5:af:b5:88:18:aa:14:13:12:43:bd:ea:e7:c1:f4:f3:
         13:68:c4:9c:95:c9:26:e9:b1:9d:2a:b8:cc:a7:19:32:59:fb:
         b9:5f:af:dd:26:ad:6d:d1:f0:77:b8:dc:9d:82:1a:79:13:b3:
         72:e8:96:3b:89:2c:3d:9d:90:74:2f:bb:e1:45:66:fa:72:dc:
         1e:51:c9:0d:59:66:e9:c6:a5:00:8a:99:f4:c5:cd:bc:e1:ef:
         f5:8a:d1:0e:ee:27:06:56:f5:d3:b4:00:c8:0b:b2:bc:a7:4f:
         28:3b:81:71:86:64:13:b7:ba:55:b1:62:ad:cf:de:a6:f5:f4:
         2e:21:71:9b:85:52:c7:fc:32:8e:07:83:74:b8:b3:46:93:d2:
         de:4f:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:06:15 2025 by rpki-client