This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File:                     Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier:          WgIt11vCkTwqzbeFwlULpwg6uBBlMQByVZtTDVwiNoI=
Subject key identifier:   B4:25:74:83:F8:5C:64:FD:B0:A8:BE:51:15:C3:45:5B:9D:ED:18:A3
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer:       /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial:       019AF3528DBF7D09D368F70F57679488F6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 11:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:04 +0000
Files and hashes:         1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: SA0TNEfNeQK8E6TksLbK4E4pdOJy8LMBeNVvx3oCD0o=)
                          2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
                          3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:8d:bf:7d:09:d3:68:f7:0f:57:67:94:88:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
        Validity
            Not Before: Dec  6 11:01:04 2025 GMT
            Not After : Dec  7 11:01:04 2025 GMT
        Subject: CN=b4257483f85c64fdb0a8be5115c3455b9ded18a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:8e:e0:1d:5a:0c:84:fa:b6:b8:e6:94:25:
                    dd:0e:db:06:c1:bb:7c:25:3f:5d:12:e0:40:3a:cd:
                    3b:6d:58:5b:10:49:9a:ab:1e:70:05:b5:39:c9:5c:
                    fe:90:a0:b4:5d:6e:52:a8:20:e7:02:f3:40:12:f8:
                    36:ac:78:66:44:5c:57:db:05:c0:03:81:06:fe:20:
                    f4:0a:4f:10:27:78:03:70:29:a8:6a:e8:76:79:6e:
                    2a:37:a4:3f:5b:8d:02:ae:44:06:34:1c:e4:9b:06:
                    24:82:41:f4:62:fd:96:34:4d:66:1d:f4:15:9c:64:
                    a0:0e:28:b3:ae:53:30:2b:fe:6b:fd:87:eb:56:8a:
                    63:6f:e7:b3:91:75:67:3a:6d:8f:8e:c9:da:34:f8:
                    26:a2:3d:12:dc:bb:5b:28:c5:27:4e:8f:5a:35:97:
                    59:91:68:e8:bc:9c:89:3f:6c:25:85:44:c1:ee:14:
                    a3:a5:e2:55:d5:47:38:09:25:d7:82:a4:6c:9c:cb:
                    c6:e5:93:4e:a2:6a:67:85:52:64:ff:12:91:ed:1e:
                    35:da:78:c6:0c:fc:b8:11:53:e7:3f:fe:10:e8:f8:
                    6f:a9:6c:2e:b6:d8:c4:d2:23:ba:a7:3f:f9:52:b6:
                    1a:b8:53:38:a2:f0:ee:d0:3e:81:58:fd:c6:a6:95:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:74:83:F8:5C:64:FD:B0:A8:BE:51:15:C3:45:5B:9D:ED:18:A3
            X509v3 Authority Key Identifier:
                keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:30:ee:f4:cb:25:d4:50:54:6a:c5:5c:81:9d:5d:ff:fd:
         76:0f:74:2e:41:da:4e:ca:a6:ab:5a:0e:b9:3b:6e:ec:e3:11:
         52:8e:c4:65:14:ea:f1:65:8a:75:ba:fd:a2:97:c8:60:11:ac:
         75:d2:29:dd:ba:0e:c6:64:9a:d9:bf:82:be:51:cf:46:24:a1:
         95:a0:e9:0e:4d:ab:b9:f7:75:51:33:40:c6:7b:ae:3e:2d:44:
         e9:0d:8d:3f:4b:75:5a:19:13:05:06:3d:d1:f5:39:a4:b5:e4:
         d1:4c:04:52:e4:e0:68:69:92:b7:20:4e:9c:52:d0:00:c5:f0:
         13:a5:ea:77:9c:e5:f2:14:2f:d8:da:b5:65:93:0b:a2:93:1d:
         41:a7:3d:a7:7e:67:51:ef:bc:c4:98:0a:a5:71:7e:42:8b:44:
         2b:a0:15:d5:0a:b2:6b:f5:dc:b6:6c:98:a4:64:2a:45:a9:dd:
         8e:1c:6c:de:51:99:da:89:23:fe:71:54:c7:d6:52:35:3e:4c:
         f7:7a:bb:37:26:83:7e:9f:27:9c:ff:53:53:7d:cc:a5:8f:59:
         35:e1:d0:99:73:0f:31:d5:91:09:f7:4b:6e:d3:94:8f:77:79:
         ac:3c:cd:2a:23:91:81:b0:12:c1:e6:01:4f:05:50:8c:9f:d5:
         35:c1:df:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUo2/fQnTaPcPV2eUiPbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjUxMjA2MTEwMTA0WhcNMjUxMjA3MTEwMTA0WjAzMTEwLwYDVQQD
EyhiNDI1NzQ4M2Y4NWM2NGZkYjBhOGJlNTExNWMzNDU1YjlkZWQxOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2uO4B1aDIT6trjmlCXdDtsGwbt8
JT9dEuBAOs07bVhbEEmaqx5wBbU5yVz+kKC0XW5SqCDnAvNAEvg2rHhmRFxX2wXA
A4EG/iD0Ck8QJ3gDcCmoauh2eW4qN6Q/W40CrkQGNBzkmwYkgkH0Yv2WNE1mHfQV
nGSgDiizrlMwK/5r/YfrVopjb+ezkXVnOm2PjsnaNPgmoj0S3LtbKMUnTo9aNZdZ
kWjovJyJP2wlhUTB7hSjpeJV1Uc4CSXXgqRsnMvG5ZNOompnhVJk/xKR7R412njG
DPy4EVPnP/4Q6PhvqWwuttjE0iO6pz/5UrYauFM4ovDu0D6BWP3GppU68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQldIP4XGT9sKi+URXDRVud7RijMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqkw7vTL
JdRQVGrFXIGdXf/9dg90LkHaTsqmq1oOuTtu7OMRUo7EZRTq8WWKdbr9opfIYBGs
ddIp3boOxmSa2b+CvlHPRiShlaDpDk2rufd1UTNAxnuuPi1E6Q2NP0t1WhkTBQY9
0fU5pLXk0UwEUuTgaGmStyBOnFLQAMXwE6Xqd5zl8hQv2Nq1ZZMLopMdQac9p35n
Ue+8xJgKpXF+QotEK6AV1Qqya/XctmyYpGQqRandjhxs3lGZ2okj/nFUx9ZSNT5M
93q7NyaDfp8nnP9TU33MpY9ZNeHQmXMPMdWRCfdLbtOUj3d5rDzNKiORgbASweYB
TwVQjJ/VNcHf5g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:31 2025 by rpki-client