This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File:                     1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier:          8e/aoOjdZRyAww5PKy87QeqeUScp/sXL98DSmPDKK64=
Subject key identifier:   0C:AC:B3:4D:A3:C3:20:F5:B3:9F:EE:83:CA:56:C9:30:56:7F:06:6B
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer:       /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial:       019AF38A10F320F6FE49016895C3FD489990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number:          0914
Signing time:             Sat 06 Dec 2025 12:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:42 +0000
Files and hashes:         1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: MXHS9mXy7A4MshqI1K/QwvURHrLz0np3iHczPn2eK0g=)
                          2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
                          3: oaQDmcPYSkml0RRQKrO-Em73IK4.roa (hash: bHgFTubSxlxLmOgCBCM51N98J0JO+nt18DnWZQ7MMJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:10:f3:20:f6:fe:49:01:68:95:c3:fd:48:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
        Validity
            Not Before: Dec  6 12:01:42 2025 GMT
            Not After : Dec  7 12:01:42 2025 GMT
        Subject: CN=0cacb34da3c320f5b39fee83ca56c930567f066b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bb:ad:e7:c5:23:82:d6:5a:8c:83:4d:29:19:
                    de:fb:69:e7:16:a6:56:9b:0b:c1:a1:81:84:dc:7e:
                    6b:ec:10:7d:f9:49:00:e1:db:1d:53:c7:4c:ec:91:
                    dd:d4:52:66:4f:5c:a9:14:7d:ad:8f:1a:06:7c:7b:
                    a6:69:a5:06:8d:df:df:63:3a:7e:f2:a3:6e:ef:57:
                    4b:d0:75:8f:89:ea:fa:58:62:c0:22:ac:e2:c2:75:
                    10:96:36:35:4e:0e:4f:11:c5:93:62:72:b1:5b:8f:
                    bf:9b:24:89:07:e6:41:43:54:35:e9:f2:aa:98:41:
                    3f:ca:5a:30:60:bf:d1:5e:5f:47:f5:ae:b4:54:37:
                    15:7f:66:4c:5c:33:9c:c1:a9:d3:60:8c:96:0f:8a:
                    5a:56:ce:0d:20:67:e4:ba:50:7b:d6:a6:20:ad:80:
                    03:0f:a5:d9:f6:9e:dd:59:e1:e6:6c:e3:3d:dc:a4:
                    71:45:e8:f6:9f:8e:b6:4f:39:25:4c:dd:5f:00:ad:
                    88:01:3f:2d:29:21:da:cf:36:88:b7:e6:06:19:35:
                    5c:7f:34:c7:40:02:ad:94:0f:03:91:c8:60:fa:ed:
                    85:88:82:59:cd:c3:3d:20:6e:22:16:f2:cb:e7:f0:
                    8c:c2:79:a2:12:52:f3:9a:7a:2d:6a:36:e4:4e:d5:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AC:B3:4D:A3:C3:20:F5:B3:9F:EE:83:CA:56:C9:30:56:7F:06:6B
            X509v3 Authority Key Identifier:
                keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:50:e6:5c:99:24:1c:a4:70:39:a5:54:ae:7f:f8:da:c2:
         e1:b7:35:b0:e5:c3:cd:ad:63:35:62:3a:0f:ea:69:ea:92:8c:
         6b:f9:1e:5c:53:21:59:d2:89:3a:58:0d:6d:5a:a7:51:82:e7:
         83:c0:43:2c:b0:5a:86:5b:d4:2f:1a:c5:51:3a:17:89:3b:d3:
         d7:d3:7d:99:00:89:5e:a2:5c:28:ab:68:d3:eb:00:e7:a3:72:
         a2:c9:78:3d:d5:c9:c3:6b:36:ae:1a:80:04:28:2d:fd:b5:e1:
         46:7e:38:20:9f:85:34:cb:bd:14:df:27:fe:26:2d:b7:c6:be:
         86:b6:5f:4f:b2:c3:ca:88:22:5c:04:ca:42:05:51:fc:61:f5:
         72:f5:9f:65:d0:8f:93:1c:fb:dc:ff:a6:9a:5a:ee:84:fd:5c:
         48:29:c2:49:d9:a3:20:1f:5a:7c:24:59:aa:9a:9b:b7:98:77:
         85:2a:14:bb:a9:49:c6:b2:fa:35:14:a5:08:2d:1b:8e:09:23:
         b7:1a:08:77:d1:24:61:b8:b5:b1:a5:5d:e1:04:cd:b9:4b:55:
         b2:38:8d:6e:be:16:5b:a1:4b:3e:4a:99:0c:ff:b3:30:53:09:
         48:58:68:1b:89:58:36:ea:ad:a8:20:93:dd:8d:2a:00:32:b6:
         d0:ba:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:54:24 2025 by rpki-client