This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File:                     qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier:          nVFhfSl8xsABdSa7oWNL3cKVHy7N1ptTApkzjekdJ/0=
Subject key identifier:   8C:43:4F:B9:86:BD:42:F6:B9:DF:3C:3A:A0:78:23:22:DB:99:70:F4
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer:       /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial:       019B59ACD52E22985559AB753B522004B2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number:          0199
Signing time:             Fri 26 Dec 2025 08:00:57 +0000
Manifest this update:     Fri 26 Dec 2025 08:00:57 +0000
Manifest next update:     Sat 27 Dec 2025 08:00:57 +0000
Files and hashes:         1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
                          2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
                          3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: ysF8biLP+OSrlwisrL6sop1eFBfZrJwR3NKLL5cBGss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ac:d5:2e:22:98:55:59:ab:75:3b:52:20:04:b2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
        Validity
            Not Before: Dec 26 08:00:57 2025 GMT
            Not After : Dec 27 08:00:57 2025 GMT
        Subject: CN=8c434fb986bd42f6b9df3c3aa0782322db9970f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:a8:87:cc:77:b6:88:72:d4:13:e5:61:78:
                    a5:b3:a1:8b:b5:8d:f1:1b:1d:c9:44:67:32:e1:c2:
                    36:bc:a8:4c:bb:df:c2:cb:9b:e6:2f:d4:aa:9b:64:
                    12:c6:94:2a:7d:bc:9e:2f:c0:9e:3d:ae:a3:09:c2:
                    14:a2:64:2e:14:fe:d8:79:f8:9f:79:ba:96:0c:5b:
                    00:8d:ce:3c:f2:2f:42:85:36:a2:10:6c:60:18:1a:
                    b9:d4:4d:ad:84:df:8e:19:d7:e4:0f:83:f2:f6:2b:
                    17:09:e3:85:92:5d:53:2b:b3:44:20:7e:db:19:e2:
                    a8:63:45:3f:09:f7:3f:40:e3:28:bd:fa:14:91:ed:
                    f5:68:2a:01:dd:f9:51:4d:6b:f4:ec:a4:90:d5:50:
                    94:b3:fb:46:90:75:62:6f:aa:71:9e:85:0d:d6:3e:
                    87:4a:b8:5e:d2:94:cd:fe:33:41:de:89:96:77:a9:
                    63:3e:ff:59:ca:99:2a:f3:a8:32:b7:f2:b1:1a:21:
                    18:30:6a:35:67:46:ec:75:87:b6:2a:0f:ab:a1:dd:
                    3d:76:a4:8c:24:8a:76:f1:ae:20:34:df:13:ee:a2:
                    ad:7a:44:81:19:91:3a:44:a0:92:b6:3e:b6:b7:56:
                    06:9a:a0:4f:f1:0f:dc:f5:b7:6b:d7:d9:f5:a5:de:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:43:4F:B9:86:BD:42:F6:B9:DF:3C:3A:A0:78:23:22:DB:99:70:F4
            X509v3 Authority Key Identifier:
                keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e1:d2:96:11:8a:29:e0:72:8a:e3:cb:6f:8b:75:30:ee:d0:
         df:92:4e:d4:a0:12:e7:d4:77:c5:c4:96:dc:27:3b:7f:07:6e:
         1f:9d:b5:cd:9b:47:2d:1f:85:3f:6c:76:95:6d:9d:2f:a1:40:
         ff:58:92:d4:a7:a9:77:d6:18:0c:42:c1:ba:8b:84:8f:18:58:
         1f:a1:8f:e2:71:0d:67:78:98:90:22:14:26:45:fe:f7:74:a8:
         bb:ed:64:11:aa:aa:ba:e6:69:da:76:eb:89:2a:6f:14:c9:7f:
         7a:c8:7e:84:99:9a:22:b1:70:56:c8:10:51:3b:f1:dd:53:cc:
         1f:ca:c7:7b:66:8f:db:e6:9d:bb:90:b1:94:20:d1:f1:1e:a9:
         f1:5a:68:40:b4:47:91:d8:58:ee:5d:49:ae:31:e4:27:11:ed:
         ad:ae:6f:4c:e1:20:2c:6c:44:4c:62:e6:9d:b5:c3:ec:8e:1e:
         6b:5a:01:6a:2a:22:98:ad:83:9b:c8:f9:89:96:46:b5:25:c3:
         da:21:4b:38:09:91:b7:a5:7c:6c:c0:21:23:18:43:e5:72:b9:
         72:71:55:63:84:b4:54:a3:04:59:cb:5a:6a:93:1f:3c:bd:4c:
         9b:6b:6d:68:b3:dd:9f:b8:ac:65:61:07:5a:94:e7:e4:66:3c:
         53:34:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:02:29 2025 by rpki-client