This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File:                     qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier:          PxHONYSgiyW+86xeRswhQ4g1zKBfkfoByptNPwqWy80=
Subject key identifier:   83:0F:78:95:0D:4F:4A:1E:06:5D:0D:E7:35:95:48:19:74:A5:EB:90
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer:       /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial:       019AF12EF289AD9CE250BDFF1F57D4F859D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 01:02:56 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:56 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:56 +0000
Files and hashes:         1: AJtxlRhC18CSM9vDFJ0bVbhxN3Y.roa (hash: fBqbrVqiGsFpDlku7pjNXfyrY6CdOCxCpNnDRdqo0xM=)
                          2: hFPPHhOMQW_4XkqhjXSBTCjwlfs.roa (hash: 4m3xa6SKPtpxIGZbIvqkpRqzc55Dx3AnOKG3Nnp54nM=)
                          3: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: zsLF8FcMlLa5vs7QbNpDQ1xWa9grk2HbRsupCMa7C78=)
                          4: z9pLNQSZNKFYtIVw9GxMfA_dzlc.roa (hash: ceBAqvnBw6p+b98UNKLSzZv2TyxRWLOoeu9xMf4knvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:f2:89:ad:9c:e2:50:bd:ff:1f:57:d4:f8:59:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
        Validity
            Not Before: Dec  6 01:02:56 2025 GMT
            Not After : Dec  7 01:02:56 2025 GMT
        Subject: CN=830f78950d4f4a1e065d0de73595481974a5eb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:2b:2d:22:d6:99:53:51:58:7c:01:be:a1:
                    96:5a:6a:57:b4:3c:20:9f:45:41:c4:b3:02:9d:1b:
                    43:8e:1e:af:c8:06:cc:d7:39:b4:88:a5:9d:49:6f:
                    ab:10:5e:8a:cb:33:16:be:fa:5a:39:a1:1a:02:8a:
                    5f:e0:62:82:6b:10:ba:e9:a0:5d:60:c2:46:d3:62:
                    a9:fe:66:a1:97:75:51:7a:e7:d6:79:da:11:72:c9:
                    12:65:43:86:13:12:72:05:e3:dd:d4:91:e3:58:9d:
                    9c:0e:83:fa:47:73:4b:89:ee:c2:62:60:00:a8:e0:
                    29:37:2d:7d:6f:d1:7f:ed:43:7c:46:09:b8:2d:22:
                    b2:f7:94:b0:e9:c7:8f:f7:61:ee:a3:2e:00:46:5c:
                    c8:99:f5:5a:c9:53:c3:d1:c7:15:23:ff:57:98:cd:
                    01:68:9f:93:e0:2f:3e:31:7c:a2:f7:ae:0c:8d:90:
                    6c:50:e7:a1:c7:5d:46:42:32:52:6e:ed:61:d3:14:
                    80:b4:8f:84:6b:0c:75:31:6b:d4:56:61:f2:5a:49:
                    46:df:8f:77:62:57:9d:13:cb:9c:0f:72:be:3a:ec:
                    58:09:5b:83:5b:33:a2:ed:4f:db:87:99:da:e6:c4:
                    90:4a:70:5f:4b:6a:99:83:d9:ab:4a:fc:39:7f:72:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0F:78:95:0D:4F:4A:1E:06:5D:0D:E7:35:95:48:19:74:A5:EB:90
            X509v3 Authority Key Identifier:
                keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:84:78:2e:64:fa:e2:1b:91:69:02:e2:cb:7f:d5:a8:5f:
         16:2f:14:30:40:86:57:22:49:b7:91:f0:55:fb:11:51:ff:1b:
         70:a0:f8:fe:9d:05:37:fb:9b:7e:1c:79:58:4c:4c:97:3a:b0:
         fb:69:7f:b1:79:bc:5a:fa:c2:4f:cb:67:2c:30:76:07:a7:5c:
         fc:b8:27:4f:60:b3:7c:24:2f:3e:e6:f5:63:47:08:c5:7c:3a:
         70:e4:64:f4:ee:ac:d0:c9:4b:cf:7b:8b:14:29:59:02:dc:9d:
         4e:eb:c6:a0:9b:19:9d:18:53:1f:e8:8b:ec:5e:84:83:02:1e:
         6f:b3:35:7f:61:f6:63:2e:9a:49:73:42:b5:1a:0b:87:18:23:
         01:9a:19:4e:c4:1b:9b:0f:fa:8b:88:b8:ac:4b:1d:2d:f4:c2:
         a8:28:c7:91:eb:e3:2e:1a:52:1a:11:8a:c6:b0:e4:91:f6:f6:
         3a:dd:c6:7a:89:2b:35:bd:58:ab:29:8e:ff:19:19:a4:a2:ed:
         3f:2d:f4:a9:60:fd:2a:d6:d1:50:be:79:68:ef:6b:a3:83:3f:
         f7:23:92:26:27:fd:7a:92:9a:d8:e0:e9:bb:87:1d:a4:fb:29:
         9b:49:48:9f:92:96:7a:63:e5:e4:19:75:c8:ee:1b:21:24:07:
         5d:62:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:57:19 2025 by rpki-client