This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File:                     QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier:          Xkk1+Tm3LKzeZZbf93hyGlb3sUza6vNn9Jdt31YjUP8=
Subject key identifier:   A3:E2:12:25:5A:D9:3C:02:CD:89:06:88:50:25:29:AB:3C:6A:3D:C7
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer:       /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial:       019AF61CDBEDAE5401C2402F700C00C79F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number:          1765
Signing time:             Sun 07 Dec 2025 00:01:17 +0000
Manifest this update:     Sun 07 Dec 2025 00:01:17 +0000
Manifest next update:     Mon 08 Dec 2025 00:01:17 +0000
Files and hashes:         1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: FsGwC6BCmHE6rBWHUwjpCeK+zEQ9AJB1BI7SBOFHK3Q=)
                          2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
                          3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:db:ed:ae:54:01:c2:40:2f:70:0c:00:c7:9f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
        Validity
            Not Before: Dec  7 00:01:17 2025 GMT
            Not After : Dec  8 00:01:17 2025 GMT
        Subject: CN=a3e212255ad93c02cd890688502529ab3c6a3dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:e3:68:2e:04:b2:77:45:6f:99:9a:14:3a:
                    01:72:98:ad:cd:7e:c5:6e:7e:fd:a4:8b:10:c1:7b:
                    dc:e4:07:d9:3a:be:dd:28:3a:84:0e:c2:3d:8b:08:
                    da:7d:6d:ba:d0:0a:12:f7:ef:25:dc:c4:9b:c4:eb:
                    e2:d9:5b:55:3c:2e:a5:b9:00:c7:9c:a8:4f:22:71:
                    7c:90:f7:75:de:0f:1d:69:ee:1c:bf:0a:27:58:99:
                    26:f5:0f:ae:97:cb:7a:b1:09:8d:d8:ab:ce:96:14:
                    4b:2d:6f:41:06:5c:02:bd:da:c0:3f:b7:ee:ea:ff:
                    a3:af:13:1b:e5:0a:68:ff:26:6f:b7:fe:ca:fc:b6:
                    17:57:82:ec:0e:96:47:76:85:fb:22:c6:f9:28:9c:
                    67:17:e2:f7:e9:ff:87:72:96:94:28:b0:04:1a:c0:
                    9d:2b:8b:7f:95:e9:5e:82:08:ab:e1:68:74:40:84:
                    a1:c6:52:8b:9c:8d:99:7e:6f:1a:39:38:8c:2f:ee:
                    2b:61:fd:45:ba:5b:38:3f:5e:96:b9:dc:c1:84:d6:
                    b6:75:e0:b0:8e:d2:4b:2b:79:53:70:a9:a9:3d:77:
                    37:b1:85:c6:9b:ab:ed:fc:5c:b0:fd:cd:cb:7b:ab:
                    25:54:f4:a6:68:9d:43:8a:7b:98:b1:4c:d5:7a:f7:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:12:25:5A:D9:3C:02:CD:89:06:88:50:25:29:AB:3C:6A:3D:C7
            X509v3 Authority Key Identifier:
                keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:48:ca:1b:8f:49:8d:95:dd:81:59:e7:15:d5:ec:b2:77:9b:
         57:c1:2a:41:dd:ee:2e:c5:1c:db:3d:4b:c0:82:aa:8b:e8:88:
         ac:94:30:a5:84:32:60:42:7b:34:8b:52:bb:72:15:34:94:51:
         f3:36:11:f7:41:58:da:20:3e:f5:08:b4:4a:f9:d9:8e:12:fc:
         21:3e:69:de:5d:c7:27:d9:bc:52:6d:f1:5f:0e:95:f1:d3:2e:
         e0:87:ac:42:8c:00:8d:7c:f8:62:5b:1d:45:e2:73:a5:be:18:
         df:78:f2:a3:9f:52:84:66:b7:37:82:b9:06:ac:76:cc:86:e0:
         a2:62:02:0e:ac:6d:77:f0:68:00:9a:6c:1b:0f:7b:82:56:a6:
         cf:fd:56:1e:c3:0e:a5:59:e4:96:86:d1:3c:e6:7d:bd:9c:20:
         34:45:48:56:ec:1e:a3:84:bb:be:29:88:76:ab:c9:2a:29:75:
         e6:e4:7e:7b:45:4f:bb:1a:67:43:b1:79:6a:18:e1:18:a1:ed:
         86:f0:83:6f:59:4e:73:e1:35:ac:a6:c7:c0:66:cb:91:2c:6d:
         17:73:c3:5a:61:9a:c6:85:6f:64:ce:10:b3:ea:7c:78:ea:cf:
         77:a7:f7:a3:76:1e:c4:75:a3:ab:ec:00:42:dc:6b:6c:ed:d9:
         54:0e:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:16:40 2025 by rpki-client