This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File:                     Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier:          dQU8SRezScuc9n4jaYUi3hitHJyDOCaUMgthvM8uCd0=
Subject key identifier:   AC:E8:33:9F:56:68:8C:1C:DC:CC:9E:08:2A:E1:F6:11:E9:C5:0D:4A
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer:       /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial:       019AF5E595030992D2AC471F216280906993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number:          0D53
Signing time:             Sat 06 Dec 2025 23:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 23:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 23:00:55 +0000
Files and hashes:         1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
                          2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: 9GX37raP8DI4cjIsrgNZqTCOJxjzn4yWwXYF1YRN77c=)
                          3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e5:95:03:09:92:d2:ac:47:1f:21:62:80:90:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
        Validity
            Not Before: Dec  6 23:00:55 2025 GMT
            Not After : Dec  7 23:00:55 2025 GMT
        Subject: CN=ace8339f56688c1cdccc9e082ae1f611e9c50d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:00:ab:25:13:db:4e:cc:33:67:0d:96:91:
                    58:cf:cd:93:b9:82:0a:35:ea:0e:dc:8f:a9:8e:17:
                    ba:43:99:55:11:e1:20:79:88:d9:1f:82:92:b1:f1:
                    51:9e:8e:a9:9f:26:46:44:90:95:0a:c6:b2:76:78:
                    1b:95:2f:a8:71:f1:8c:0b:93:ad:0e:65:8e:81:39:
                    ce:d1:66:5b:f9:21:78:54:4f:7c:29:67:84:52:08:
                    a9:3e:70:98:56:d6:be:b2:da:df:58:d5:51:35:d3:
                    b8:68:bf:f6:af:60:d5:01:c2:76:6d:9f:7b:9f:59:
                    bc:fe:a0:ba:56:e1:2d:e8:99:2e:84:da:19:b2:e8:
                    a8:7f:e4:84:1f:40:b5:ee:e8:64:05:b3:90:a7:1a:
                    af:e7:62:ea:7d:64:03:86:dd:6d:75:ae:e1:29:9d:
                    ef:e7:09:3e:79:aa:0f:b9:3e:3b:d3:b2:0d:fc:f5:
                    0c:ec:d9:e9:66:c6:24:81:62:89:cb:19:66:d2:4d:
                    09:fa:07:f5:91:94:e7:d3:64:2b:40:5a:da:44:92:
                    13:9f:9f:0e:ec:c1:32:4c:1a:ec:c3:d7:b9:d3:a7:
                    2d:79:55:d4:e1:40:48:e3:36:92:ca:63:61:82:37:
                    5e:4b:64:28:70:aa:ff:4b:ff:b7:0e:57:df:a8:bf:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:33:9F:56:68:8C:1C:DC:CC:9E:08:2A:E1:F6:11:E9:C5:0D:4A
            X509v3 Authority Key Identifier:
                keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:b1:61:60:4b:4d:9e:5a:0a:55:53:cc:03:a2:d0:a0:cb:
         ac:44:11:41:4e:84:84:63:ee:b3:3d:eb:90:ca:a2:24:1c:e1:
         3a:79:e9:ff:4c:c7:33:9f:f3:f6:8b:08:a9:eb:14:4b:c2:da:
         da:7e:43:cf:15:a9:bb:1c:50:d6:4d:62:4c:4f:d6:1b:e1:c9:
         26:31:33:f9:6d:23:ef:49:6e:6d:55:b8:45:38:a0:0b:79:c4:
         ca:9e:ea:e6:b7:fc:c2:a6:10:60:b9:59:29:1c:0f:3c:77:8b:
         7d:bd:5a:18:29:43:a9:ed:51:b7:46:be:cd:e7:d3:c5:de:c3:
         12:2c:37:4b:4d:e3:b8:5f:09:c1:05:8c:8b:97:bb:3a:6c:da:
         43:cd:07:ba:7f:d3:44:56:0f:18:ec:f1:09:1c:85:cf:ca:b9:
         bb:a9:f6:cd:6c:85:ef:6b:77:ab:51:bb:c9:5f:31:87:e7:18:
         eb:00:05:4b:f9:1a:b9:e1:35:59:56:a5:f2:48:8c:ef:db:e1:
         11:d7:e2:4d:3e:9d:7c:db:eb:87:03:3c:ab:0e:d2:6a:2b:69:
         4f:e6:bb:cb:d8:dd:d6:07:3d:ec:ba:eb:69:9c:a2:54:87:c6:
         c2:b3:3e:3f:d0:4f:2a:7d:80:5b:59:97:cf:d3:e4:03:56:f4:
         2c:a8:05:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr15ZUDCZLSrEcfIWKAkGmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0
ZGJmYWEwHhcNMjUxMjA2MjMwMDU1WhcNMjUxMjA3MjMwMDU1WjAzMTEwLwYDVQQD
EyhhY2U4MzM5ZjU2Njg4YzFjZGNjYzllMDgyYWUxZjYxMWU5YzUwZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzcAqyUT207MM2cNlpFYz82TuYIK
NeoO3I+pjhe6Q5lVEeEgeYjZH4KSsfFRno6pnyZGRJCVCsaydngblS+ocfGMC5Ot
DmWOgTnO0WZb+SF4VE98KWeEUgipPnCYVta+strfWNVRNdO4aL/2r2DVAcJ2bZ97
n1m8/qC6VuEt6JkuhNoZsuiof+SEH0C17uhkBbOQpxqv52LqfWQDht1tda7hKZ3v
5wk+eaoPuT4707IN/PUM7NnpZsYkgWKJyxlm0k0J+gf1kZTn02QrQFraRJITn58O
7MEyTBrsw9e506cteVXU4UBI4zaSymNhgjdeS2QocKr/S/+3DlffqL8dEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzoM59WaIwc3MyeCCrh9hHpxQ1KMB8GA1UdIwQY
MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct
ZWM1MGRhYWQ4MmY3LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3
LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV+xYWBL
TZ5aClVTzAOi0KDLrEQRQU6EhGPusz3rkMqiJBzhOnnp/0zHM5/z9osIqesUS8La
2n5DzxWpuxxQ1k1iTE/WG+HJJjEz+W0j70lubVW4RTigC3nEyp7q5rf8wqYQYLlZ
KRwPPHeLfb1aGClDqe1Rt0a+zefTxd7DEiw3S03juF8JwQWMi5e7OmzaQ80Hun/T
RFYPGOzxCRyFz8q5u6n2zWyF72t3q1G7yV8xh+cY6wAFS/kaueE1WVal8kiM79vh
EdfiTT6dfNvrhwM8qw7SaitpT+a7y9jd1gc97LrraZyiVIfGwrM+P9BPKn2AW1mX
z9PkA1b0LKgFAA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:46 2025 by rpki-client