This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File:                     qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier:          Ra8x8dIcsnt1PqSjwEM83UA0HiM4zHgeSwSCxN+2Bbs=
Subject key identifier:   DB:27:5D:A9:01:64:19:22:04:9C:55:E6:13:84:B9:00:AE:26:05:40
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer:       /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial:       019B1983DDD6C7294D7EE2E0790A11C4B0A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number:          0C93
Signing time:             Sat 13 Dec 2025 21:00:30 +0000
Manifest this update:     Sat 13 Dec 2025 21:00:30 +0000
Manifest next update:     Sun 14 Dec 2025 21:00:30 +0000
Files and hashes:         1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
                          2: GtLmij_8lMV4f9doGmHNnDcYdXQ.roa (hash: 4rP3ji3712NwMTf13O5xXl0bE12eEGoiwj3aLeteuxA=)
                          3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: O44vfbZfzkFf+GHcI6PRhimLaptTxA6QtMK+pRcO3Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:83:dd:d6:c7:29:4d:7e:e2:e0:79:0a:11:c4:b0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
        Validity
            Not Before: Dec 13 21:00:30 2025 GMT
            Not After : Dec 14 21:00:30 2025 GMT
        Subject: CN=db275da901641922049c55e61384b900ae260540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:f5:30:88:a1:b5:5c:61:40:77:d2:cc:e5:
                    24:ff:66:f0:ef:8a:c5:7f:fa:c2:47:e1:8a:c3:23:
                    41:e5:5c:3d:0a:05:38:21:f7:3f:57:1f:81:ef:0e:
                    17:b9:3b:d9:07:04:8d:6f:7d:fa:01:9a:df:e3:9d:
                    44:78:dc:c2:1b:be:05:48:ba:68:2b:50:27:53:da:
                    b0:d3:e2:8b:bc:d8:66:c8:a0:d6:cb:dd:b4:8e:10:
                    97:cd:ff:b5:db:04:c5:18:1b:65:08:a0:d5:c9:8e:
                    40:7b:aa:11:2a:d2:8d:7e:9b:24:f8:ae:9e:7b:60:
                    ad:ee:a4:bd:6b:5f:d7:fc:3b:1a:00:4f:70:59:f7:
                    c1:9e:c3:82:14:5e:8b:13:9d:d7:b7:6e:6f:d1:4d:
                    b2:19:f5:3e:e9:73:6b:fe:74:bd:3d:7e:6e:83:e7:
                    ab:72:f2:a2:9f:cb:10:fe:d7:0b:b0:6e:c0:fa:42:
                    b6:bc:fe:7a:84:e9:85:ba:23:c5:cc:95:34:2d:f0:
                    ca:41:04:f6:0a:cb:10:04:13:e9:4f:dd:66:17:e6:
                    de:b7:18:73:61:7b:d0:b8:94:61:98:b6:ff:96:1b:
                    3a:01:cc:06:e3:c1:00:30:3c:a5:17:ea:88:d1:8b:
                    c9:57:a0:26:d2:b6:d9:69:e7:14:5e:c4:43:81:be:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:27:5D:A9:01:64:19:22:04:9C:55:E6:13:84:B9:00:AE:26:05:40
            X509v3 Authority Key Identifier:
                keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:65:3b:a9:1a:19:e3:45:f7:37:0d:bf:79:64:c8:7c:82:
         26:03:5e:71:d1:af:8b:df:cb:01:cd:f8:4d:c8:05:f0:26:95:
         c1:5c:b9:a4:d6:22:4a:c0:74:28:ed:c8:9a:9d:6a:73:b2:1d:
         87:76:2b:88:42:fc:95:ba:93:a4:ee:5e:53:ef:a5:29:35:fa:
         00:a3:23:ef:ab:47:c3:af:38:f1:b0:99:34:d9:e1:59:92:11:
         67:30:a9:74:73:42:10:dd:8a:31:d3:a9:54:be:3b:7b:29:8d:
         81:ce:b5:8c:cb:c6:46:8a:2d:fe:44:79:ee:ed:b4:47:06:33:
         b7:47:9b:26:5a:7b:80:c2:63:e3:7f:73:ab:15:11:a3:e5:d0:
         e0:57:c7:a5:62:42:58:43:64:59:8c:a2:95:2c:97:51:95:e3:
         65:5c:28:6b:56:cb:75:44:4d:d9:1a:87:21:52:36:cb:9e:a3:
         71:6e:f3:1d:17:58:8b:f7:ec:4c:e5:05:27:e7:7b:37:76:40:
         c9:4d:be:4b:68:bc:64:fc:59:87:b9:c2:c7:ca:20:f9:de:95:
         fd:c4:9d:74:31:fe:78:59:38:98:89:17:12:ec:ee:af:a8:d5:
         83:51:d1:99:c9:62:14:c1:2f:db:f1:29:18:a3:53:95:ae:bd:
         eb:6b:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:06:32 2025 by rpki-client