This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File:                     QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier:          e2y2BWZRJcznLerxUrE4j6qgJoy4fvQQMgprH8NaWGw=
Subject key identifier:   D4:1F:D7:45:07:E6:83:01:66:B7:D2:CC:74:FC:EC:3B:DC:5D:05:85
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer:       /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial:       019B292E0A3E927E6BED66555D5609582B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 22:00:41 +0000
Manifest this update:     Tue 16 Dec 2025 22:00:41 +0000
Manifest next update:     Wed 17 Dec 2025 22:00:41 +0000
Files and hashes:         1: OBn58ZJwEh4MhAnhsFAWGGJLifI.roa (hash: 168HaFL19xy+6TCd3GYc8l6QrgMbWSIwNLv5YeyfQ/w=)
                          2: Q0GMmj0TLNZKmzThv89XKbeW0UI.roa (hash: JZ14w91MZvqFvHWvtqxAYRsNPtiKbIaz1hieDnidrSg=)
                          3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: ZY8+AHFFCnYueGwQMbNpwVkDkKDMTludHzVOssHGtbg=)
                          4: QY8orDNDFtPRatFK02MXIdps050.roa (hash: NiooW7R3ctbGvF0POc0TxPmXz9RBOYgCBww2xqBcPpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 19:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:29:2e:0a:3e:92:7e:6b:ed:66:55:5d:56:09:58:2b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
        Validity
            Not Before: Dec 16 22:00:41 2025 GMT
            Not After : Dec 17 22:00:41 2025 GMT
        Subject: CN=d41fd74507e6830166b7d2cc74fcec3bdc5d0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:f8:03:27:e7:5c:8d:3a:0d:6d:87:29:b4:
                    fa:7a:32:fe:99:d7:d9:76:74:0d:e4:3c:a4:bc:c8:
                    ff:5d:a1:71:90:e7:07:1e:89:3d:69:f2:1c:ca:9e:
                    ac:97:54:88:03:64:03:90:af:95:0d:d3:59:a4:b4:
                    6a:28:f0:19:4d:42:59:8a:7b:b2:b0:c2:69:58:5f:
                    09:7d:65:c2:09:e6:67:75:39:51:0e:4c:0a:58:ce:
                    3e:e0:39:04:9d:8a:63:47:68:4e:9d:2f:18:53:6a:
                    22:fd:71:37:3f:5f:f1:ec:92:65:64:60:e0:81:63:
                    ae:7d:e5:2c:89:27:33:df:9e:4c:45:60:dd:64:97:
                    e6:f2:07:0b:aa:c1:0b:05:db:7d:36:b9:fd:2a:3a:
                    be:2c:da:6c:db:38:28:1e:95:c2:24:66:ec:1b:e9:
                    28:2a:e5:1d:04:1b:0b:db:2a:5d:d2:f5:32:a4:2a:
                    a5:01:79:c5:3a:21:5c:01:48:48:37:54:90:9d:ca:
                    f9:a1:08:4d:2f:90:fa:e9:66:69:0a:f6:7a:60:b7:
                    c8:01:ac:bf:f5:a8:68:e9:44:e0:b6:91:52:0f:58:
                    27:77:93:56:bb:63:74:ce:37:36:46:f1:65:03:fe:
                    b0:66:e5:2b:a2:18:15:2b:90:d3:e4:a2:80:e3:9f:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1F:D7:45:07:E6:83:01:66:B7:D2:CC:74:FC:EC:3B:DC:5D:05:85
            X509v3 Authority Key Identifier:
                keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:89:7c:a3:a2:c9:a5:32:1c:3d:a1:c6:ee:fe:ae:df:87:
         24:fb:74:04:93:07:cc:9a:40:71:b0:78:3f:2a:3a:f5:63:89:
         6a:3d:5f:01:a6:26:8f:0a:d1:fb:5c:f1:68:a9:02:b7:b8:74:
         f4:97:8e:ac:80:9d:a5:61:39:9f:4a:8d:05:35:58:a6:61:11:
         66:a0:5b:fb:b9:9f:38:18:88:33:e0:2b:67:6d:b6:f6:29:1f:
         4f:34:59:90:2c:8e:e2:a2:f7:91:bd:5c:9e:bf:0d:5f:53:9f:
         07:0a:1e:16:e2:37:0e:04:04:2e:40:61:f2:d4:1e:88:fa:a5:
         5e:ae:bc:8c:82:e0:5c:ae:06:8f:ed:d3:7e:24:ce:21:28:c4:
         aa:13:e2:26:d9:7f:75:14:26:f6:98:ba:4a:de:92:c7:2e:95:
         0a:97:b8:f3:33:fa:13:9b:70:b8:bd:82:a9:d2:92:cd:ad:f9:
         95:6b:14:6d:04:45:c7:d0:e6:ce:95:04:36:ce:d9:60:b8:f6:
         d1:f6:af:26:5e:b5:32:ba:c6:af:30:10:4d:52:6f:f7:fa:1f:
         63:52:8a:02:90:36:c8:63:70:5e:98:f4:4f:e4:1a:59:18:86:
         3e:29:fc:99:78:a8:f0:2e:d7:86:0f:50:ef:c5:fb:bb:28:c6:
         f6:61:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 05:37:26 2025 by rpki-client