This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File:                     qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier:          H86lAzzqiYn/RIP6bf8t1Tz760Ys9WY/pUf+H6NYHbA=
Subject key identifier:   8C:FC:B6:4C:09:D8:47:57:E5:E2:87:CB:4B:61:6D:49:39:8C:D1:E7
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer:       /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial:       019B4BF257FD5489A9097A8130E703A4B13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number:          1752
Signing time:             Tue 23 Dec 2025 16:02:11 +0000
Manifest this update:     Tue 23 Dec 2025 16:02:11 +0000
Manifest next update:     Wed 24 Dec 2025 16:02:11 +0000
Files and hashes:         1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
                          2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
                          3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: FY3YcApGbEDlERfn1ydzzdaUihw2MJnlLqB5sibllD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:f2:57:fd:54:89:a9:09:7a:81:30:e7:03:a4:b1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
        Validity
            Not Before: Dec 23 16:02:11 2025 GMT
            Not After : Dec 24 16:02:11 2025 GMT
        Subject: CN=8cfcb64c09d84757e5e287cb4b616d49398cd1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:23:18:9a:7f:de:b9:8d:29:8b:de:bd:14:
                    ce:ab:34:5e:31:36:74:1e:3c:bc:5f:54:d5:ef:1e:
                    c8:c3:39:3a:8f:40:4a:03:c0:5c:fc:6c:5a:08:3a:
                    42:e1:23:69:52:c4:91:bd:9f:95:78:8c:34:6f:19:
                    da:da:79:91:9d:e5:17:9c:36:36:bc:e6:60:e1:2e:
                    93:80:c9:54:5f:93:ba:63:13:b2:3c:37:ae:8c:69:
                    5b:04:e7:af:3b:db:0f:ea:22:e2:a8:bf:bb:07:2a:
                    bf:d8:2e:7c:5e:60:94:ce:81:20:74:04:a4:ff:f5:
                    ae:99:14:01:80:00:c9:42:f8:1a:ad:29:a4:0e:7e:
                    dc:31:fd:2b:52:ca:d4:a0:08:5a:89:4c:c8:94:b9:
                    76:a7:58:96:34:2d:c7:54:8f:d6:e5:28:86:fe:25:
                    dd:a4:56:37:72:fe:23:38:03:7a:b1:78:2f:79:ab:
                    50:cf:5b:de:04:66:16:5d:09:e5:cd:4d:c2:d3:6c:
                    15:15:74:60:16:00:d8:bd:22:25:a5:82:50:bc:93:
                    48:e4:18:86:36:6a:d6:46:0b:55:5d:47:55:e9:00:
                    e0:28:19:ab:c2:bc:07:d0:e2:d5:a4:49:7f:9e:9d:
                    89:39:b3:1c:80:76:29:fe:b7:ad:31:b1:92:c0:7d:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:B6:4C:09:D8:47:57:E5:E2:87:CB:4B:61:6D:49:39:8C:D1:E7
            X509v3 Authority Key Identifier:
                keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:45:16:21:8b:76:ef:84:d4:80:3e:c3:60:86:04:d4:52:
         15:0b:09:ba:b9:f5:78:63:b5:5b:b6:2c:de:a7:f7:4b:f7:e7:
         86:2c:82:e1:4f:2c:44:c1:a6:63:6b:93:f7:b7:df:d4:8f:b6:
         ac:19:83:0a:5c:7a:fe:c4:f1:f2:85:74:d5:70:98:f1:0a:4e:
         4e:32:1e:aa:6b:2b:e5:18:b3:22:a1:b2:06:6d:da:20:55:fd:
         96:fa:26:48:b9:3a:20:e5:f4:12:8f:cf:e2:bd:05:a7:7d:04:
         b2:14:90:e0:8e:63:87:0d:a0:3a:f2:25:48:5a:26:93:8d:0c:
         ca:25:09:a5:8e:63:08:40:9f:30:77:ad:92:2b:b8:30:59:66:
         de:93:d6:7d:b4:fc:0e:dc:d7:01:a3:88:da:c5:8a:0d:18:cc:
         65:04:9e:05:07:bd:88:32:65:97:a9:da:00:c2:f0:a1:a7:c5:
         a2:be:af:3f:07:1c:fe:3e:55:66:d1:4a:98:c4:60:2b:9b:86:
         3d:1d:0f:8f:df:fc:0c:ff:72:fb:f5:3c:61:81:d1:f0:7b:06:
         cc:30:b4:54:0c:eb:d9:fc:75:c9:51:aa:98:a3:6b:42:8e:33:
         15:4a:bb:df:7a:b4:e3:bd:fb:21:b8:c0:51:b6:d9:00:44:22:
         15:1e:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:30:24 2025 by rpki-client