This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          qGfOO6nJ4PaIZ76SdP+dvYIEV0F8c9m5K1ua7MriNI8=
Subject key identifier:   E8:31:11:FA:3B:10:BE:FD:77:6C:B3:2A:1C:DF:6D:BF:CE:DD:48:39
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       019AF2768384645801D67086E04E2EDA9BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          134A
Signing time:             Sat 06 Dec 2025 07:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:44 +0000
Files and hashes:         1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
                          2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: /T7pBFi+Uo9t2lFolraedGoFVH+kW6CsbquaXLCKxMg=)
                          3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:83:84:64:58:01:d6:70:86:e0:4e:2e:da:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Dec  6 07:00:44 2025 GMT
            Not After : Dec  7 07:00:44 2025 GMT
        Subject: CN=e83111fa3b10befd776cb32a1cdf6dbfcedd4839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:71:c7:cb:d4:84:81:0f:11:42:68:6f:e8:
                    ad:78:4c:0d:63:61:bf:c1:bd:57:6e:25:0d:f8:a3:
                    84:0e:7c:2f:6e:fe:81:f7:bf:45:52:d5:99:df:b2:
                    3d:ea:34:ac:4d:07:36:d8:16:90:c5:57:a1:11:16:
                    85:13:e2:a0:a6:62:96:14:05:89:e9:a4:c2:90:66:
                    45:36:1a:64:76:39:d7:9f:d4:a3:34:25:92:04:1b:
                    9c:94:54:f2:e3:cf:d0:c5:30:62:3e:12:09:21:3d:
                    2e:28:13:01:9b:04:4c:ff:d1:80:bd:82:ee:a6:eb:
                    12:b6:19:cb:ac:ee:ec:16:72:28:53:7d:a0:65:67:
                    25:90:fd:00:b9:74:2f:e2:c9:af:ec:15:03:ea:08:
                    45:c6:59:ab:80:34:6f:ce:fa:22:b5:7c:d4:07:be:
                    18:ab:08:5d:4d:ac:ec:93:55:61:d1:cf:11:54:9e:
                    f4:94:7c:ac:0f:51:51:fc:4c:b6:fe:8a:d2:60:1d:
                    6a:3c:5e:21:82:af:39:46:61:d2:5d:11:ba:3b:99:
                    81:31:e9:e1:5e:29:d6:bf:c3:46:9f:cf:25:d4:a8:
                    81:93:ee:03:86:f0:8e:98:99:52:6a:58:c5:2a:6c:
                    3f:cf:d5:c6:35:28:32:92:64:38:0d:c1:30:3c:02:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:11:FA:3B:10:BE:FD:77:6C:B3:2A:1C:DF:6D:BF:CE:DD:48:39
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:88:f1:1c:96:4b:0a:43:b1:1c:fd:a7:d6:6a:d7:7a:6e:a8:
         6c:25:6e:fe:e7:1d:b0:be:a0:aa:e4:0a:97:7a:4a:98:59:96:
         21:da:1c:a4:9e:3f:cf:45:34:7c:51:b8:eb:ea:3a:9f:b5:26:
         20:0d:0a:43:75:bb:31:70:62:11:65:04:28:f0:00:e8:62:9c:
         5d:19:06:53:11:aa:fd:b4:71:f9:b5:8a:d2:c2:89:23:47:50:
         1d:48:0e:b6:48:f1:41:fc:0a:f1:d5:a5:22:dc:50:8b:bf:e7:
         ab:ac:8d:b3:a8:17:09:28:15:1c:a2:72:94:39:96:53:d4:48:
         92:eb:cf:ed:66:8b:cd:59:fd:f7:be:2b:2f:05:a5:ea:58:b9:
         0c:91:0f:c4:5d:73:f5:4e:d9:d8:77:02:69:d5:2e:89:fe:2a:
         a3:d1:85:8a:77:f7:95:4f:f5:e9:5e:67:28:12:df:d9:5a:46:
         b8:27:37:10:b7:e2:4b:7c:47:02:6c:5c:d3:e4:33:67:a2:66:
         51:76:f0:18:fa:f9:12:d3:95:c9:70:3f:a1:3f:94:f5:de:50:
         c8:13:c6:3b:75:87:57:da:e9:de:f9:3a:79:f1:8b:d3:18:64:
         bc:38:58:6d:79:21:13:f7:9f:9d:bb:1d:29:71:71:1d:46:77:
         13:30:dd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydoOEZFgB1nCG4E4u2pvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD
EyhlODMxMTFmYTNiMTBiZWZkNzc2Y2IzMmExY2RmNmRiZmNlZGQ0ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sxxx8vUhIEPEUJob+iteEwNY2G/
wb1XbiUN+KOEDnwvbv6B979FUtWZ37I96jSsTQc22BaQxVehERaFE+KgpmKWFAWJ
6aTCkGZFNhpkdjnXn9SjNCWSBBuclFTy48/QxTBiPhIJIT0uKBMBmwRM/9GAvYLu
pusSthnLrO7sFnIoU32gZWclkP0AuXQv4smv7BUD6ghFxlmrgDRvzvoitXzUB74Y
qwhdTazsk1Vh0c8RVJ70lHysD1FR/Ey2/orSYB1qPF4hgq85RmHSXRG6O5mBMenh
XinWv8NGn88l1KiBk+4DhvCOmJlSaljFKmw/z9XGNSgykmQ4DcEwPAKcRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgxEfo7EL79d2yzKhzfbb/O3Ug5MB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIjxHJZL
CkOxHP2n1mrXem6obCVu/ucdsL6gquQKl3pKmFmWIdocpJ4/z0U0fFG46+o6n7Um
IA0KQ3W7MXBiEWUEKPAA6GKcXRkGUxGq/bRx+bWK0sKJI0dQHUgOtkjxQfwK8dWl
ItxQi7/nq6yNs6gXCSgVHKJylDmWU9RIkuvP7WaLzVn9974rLwWl6li5DJEPxF1z
9U7Z2HcCadUuif4qo9GFinf3lU/16V5nKBLf2VpGuCc3ELfiS3xHAmxc0+QzZ6Jm
UXbwGPr5EtOVyXA/oT+U9d5QyBPGO3WHV9rp3vk6efGL0xhkvDhYbXkhE/efnbsd
KXFxHUZ3EzDdjw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:22:28 2025 by rpki-client