This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          1zx1czBTF3sDF5gNL01I4QhgbVRyYliPdsKaS596jiE=
Subject key identifier:   20:7A:47:AA:8A:AE:F0:CF:07:8B:56:17:BD:58:45:A4:53:13:2D:D9
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       019AF9F90CC9DCF426461E00F9C6DBF137EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          1766
Signing time:             Sun 07 Dec 2025 18:00:39 +0000
Manifest this update:     Sun 07 Dec 2025 18:00:39 +0000
Manifest next update:     Mon 08 Dec 2025 18:00:39 +0000
Files and hashes:         1: LQ0UyMo_r23ofQXV0yOGIa-qTpo.roa (hash: X9yChjYALTQXRzmOEi06/C9TIxnvZMLcDXd49hI5SlU=)
                          2: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: NLNrfSWRhE7hfDG02vIUQK+UBXL7Ix/DDorwSUpo4kg=)
                          3: V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (hash: zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=)
                          4: jGS8snyePsO074NpCXFdKhJggqU.roa (hash: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=)
                          5: wOE4JPTIGJlAFi9Bt4Todp1oTNs.roa (hash: XvGJnBOc7q3iGCoEZmt4SjrH7do6eadl4QVxex68LpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f9:f9:0c:c9:dc:f4:26:46:1e:00:f9:c6:db:f1:37:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Dec  7 18:00:39 2025 GMT
            Not After : Dec  8 18:00:39 2025 GMT
        Subject: CN=207a47aa8aaef0cf078b5617bd5845a453132dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:9e:28:85:d5:85:a3:77:49:59:23:25:76:
                    69:e3:3a:ee:72:b7:80:9b:82:6a:7f:52:30:e8:05:
                    6f:75:09:9f:a8:c4:b7:49:38:fa:dc:a8:b6:a8:d2:
                    e5:ad:0e:48:ff:83:bd:b3:44:99:fc:65:c7:56:e2:
                    b4:9a:4a:1d:23:83:0b:c0:56:a6:4b:1f:14:01:f8:
                    40:65:2e:68:b9:d0:d0:f9:05:f2:b1:00:eb:57:63:
                    41:1a:31:14:65:e1:2d:1d:37:62:56:99:12:46:b5:
                    18:19:99:ad:03:e3:fb:aa:bd:de:b6:3e:b7:9b:68:
                    c9:b3:7d:e6:19:df:e2:d2:92:21:d4:64:2b:b1:26:
                    6b:ac:4f:1f:ab:2a:4e:a5:90:c1:dd:91:c7:f5:08:
                    27:e0:fd:e0:a9:df:21:6b:34:a4:52:f3:ea:d7:3c:
                    15:91:7c:42:03:44:af:33:ae:9c:0c:d2:b3:d3:f4:
                    b4:a9:8f:bc:eb:c4:6f:36:0f:67:12:6d:a3:95:52:
                    bd:c4:3c:10:33:f1:df:7d:8c:bc:3a:ca:65:e5:88:
                    5f:2d:3a:50:25:ed:2c:d9:6f:df:a2:a9:51:b4:41:
                    43:e3:89:3c:51:e2:7d:93:2f:03:2b:50:5f:56:c9:
                    2b:81:ec:3a:9f:59:8a:d5:0d:4f:92:58:79:d2:d3:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:47:AA:8A:AE:F0:CF:07:8B:56:17:BD:58:45:A4:53:13:2D:D9
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:91:c0:d3:69:bf:a0:38:dd:7f:dd:6e:49:cb:70:82:9a:
         a8:ff:d8:91:5e:95:55:54:32:d0:a7:aa:08:82:aa:54:6d:11:
         b2:c9:ec:20:c0:04:09:d2:f7:0f:0a:62:73:17:8a:aa:4d:3d:
         4b:6b:e3:59:80:0b:2e:ad:cb:75:2b:8d:5f:ae:1a:24:41:76:
         98:79:39:17:e4:75:2d:a6:80:c1:d4:57:d8:e7:17:72:07:44:
         4a:4a:b5:d3:90:b6:e6:4c:a6:7b:61:7c:6a:98:4a:fb:58:a2:
         29:c9:15:e1:9d:60:87:94:9a:b4:a6:39:85:ea:c4:ca:c6:06:
         41:7f:25:b7:06:16:de:ef:cf:10:03:9c:45:42:00:df:cd:da:
         24:12:04:aa:ba:0b:9c:8b:be:18:71:63:6a:87:42:ae:d7:f7:
         6f:e0:87:ec:76:d1:2e:7c:f8:2b:4c:9b:82:fa:b8:fe:a8:65:
         05:6c:70:ac:b1:6d:68:64:18:33:01:9c:f0:de:57:f5:7b:2e:
         0d:52:a3:41:93:a8:a5:df:a8:03:e7:09:b4:bd:a4:c7:80:06:
         bf:29:9a:b2:1b:f8:d7:b9:cd:8e:a0:7e:44:c1:7b:b1:b1:66:
         e6:86:aa:4f:93:7c:d8:70:d5:92:8b:96:10:7a:70:7b:a7:f4:
         15:4c:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 20:05:26 2025 by rpki-client