This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          XnJHyHCsqFCVBUCE2/31+d8N1p6PpyZx7wSaZSy/Nbw=
Subject key identifier:   8E:AE:51:DE:BF:E9:82:4D:B2:03:AC:88:60:0B:A8:8F:EC:79:37:F4
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       019AF209894DE106B9EDF7BBD43EF067C2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 05:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:42 +0000
Files and hashes:         1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
                          2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
                          3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
                          4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: TpTkeN45/8m9T10AADbIrr0Y/jzWkwg2/FluMXEj8PQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:89:4d:e1:06:b9:ed:f7:bb:d4:3e:f0:67:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: Dec  6 05:01:42 2025 GMT
            Not After : Dec  7 05:01:42 2025 GMT
        Subject: CN=8eae51debfe9824db203ac88600ba88fec7937f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:f4:d4:1a:5b:41:aa:5d:9c:87:95:f3:eb:
                    aa:3f:a3:3f:ea:e7:e4:73:4b:35:75:a6:ed:0a:2b:
                    62:b8:41:03:5e:f7:c0:31:fe:f2:15:bf:7b:02:f3:
                    e2:c5:97:bd:99:98:b2:38:b2:d2:80:b9:0a:2f:db:
                    bd:2a:14:15:8d:c8:8e:46:45:e3:27:68:30:76:4b:
                    10:0e:de:3e:e7:e8:27:95:5c:24:27:c2:bd:66:0f:
                    ea:69:1b:63:50:2c:ad:17:e9:ad:89:5a:a8:49:4f:
                    17:8e:a8:35:3a:0c:ea:d5:de:d4:e4:53:c7:b0:ff:
                    3c:b0:77:76:a2:ce:a3:b4:5c:02:01:29:99:63:8c:
                    35:66:de:06:a0:6a:7d:42:22:93:4f:bc:19:86:f2:
                    92:d2:9d:59:01:fa:ee:e0:4c:c7:08:e2:f1:df:49:
                    cb:4c:5d:60:41:4d:b5:f7:17:17:2d:23:bf:88:75:
                    1a:bd:a1:88:90:d2:76:ca:98:6a:e2:1c:2e:54:ec:
                    7c:c5:68:f6:ba:52:8f:d9:d2:7a:b9:df:25:05:0a:
                    eb:7e:4e:73:7a:7e:7b:ff:b8:44:92:32:af:42:27:
                    e6:e9:c1:bf:ea:a5:20:aa:05:9c:19:69:01:ec:a5:
                    06:f8:ad:ed:a7:49:52:cc:fa:ec:3d:65:95:38:ac:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AE:51:DE:BF:E9:82:4D:B2:03:AC:88:60:0B:A8:8F:EC:79:37:F4
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ff:2c:45:ee:dc:f2:72:01:c6:d8:89:d9:30:9a:12:8f:c8:
         5d:b6:be:33:88:33:98:48:fd:6e:6e:bb:14:a0:8a:eb:98:f5:
         79:a8:a1:e5:99:bd:75:86:5e:f0:3f:ff:3f:5e:53:d4:7f:ec:
         41:e3:b3:ad:01:18:cf:3c:93:09:42:60:af:80:1b:9f:f0:bd:
         44:65:3f:08:ab:8b:3d:c3:fb:9e:c5:35:70:ad:ca:68:16:b4:
         71:5b:60:86:28:50:1e:fb:f7:c0:5f:7c:41:76:12:ab:7b:4d:
         2f:0c:a7:36:d7:59:b1:e5:15:1a:38:06:c8:ca:b3:20:e8:76:
         fd:00:5e:48:d5:a6:fc:2f:2e:9a:b1:c6:d9:ca:ae:fe:36:f4:
         9a:98:4a:37:0f:2e:89:05:bf:5e:2c:4b:39:f0:9e:01:87:fc:
         07:c3:91:81:94:76:38:b6:48:d8:8b:e7:7b:46:26:da:d4:a1:
         e5:3d:44:e6:4c:ee:1e:2b:f3:f5:d9:e1:da:94:1e:8b:f6:96:
         12:d2:7c:5a:55:83:34:a1:28:56:fc:3d:be:a7:3e:9f:f4:2f:
         56:18:e3:03:ce:48:2b:9e:f3:7c:f8:56:03:07:bd:9b:53:34:
         a8:3e:13:31:fa:7d:ff:07:c1:e2:7c:eb:44:db:50:ee:5a:99:
         6c:0d:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:55 2025 by rpki-client