This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File:                     QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier:          78yFC1xUYmm/vBbbfzovohH2TAKqDCLt9yW/O5/5sPo=
Subject key identifier:   B1:4B:DB:2E:29:53:44:AE:A3:91:9F:25:4A:49:BD:26:8D:D7:F1:54
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer:       /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial:       019AF42DEB929B0DB6C72C6F9525DC751F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number:          1080
Signing time:             Sat 06 Dec 2025 15:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:41 +0000
Files and hashes:         1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
                          2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: gijgeTfk++fyDcRIsfphdHhLpMbnGnBNHvhNFzPYOWE=)
                          3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2d:eb:92:9b:0d:b6:c7:2c:6f:95:25:dc:75:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
        Validity
            Not Before: Dec  6 15:00:41 2025 GMT
            Not After : Dec  7 15:00:41 2025 GMT
        Subject: CN=b14bdb2e295344aea3919f254a49bd268dd7f154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:9b:b8:cc:6b:25:62:de:16:ab:88:77:4a:
                    a8:7a:ec:f9:4a:eb:0d:c0:55:49:32:3c:14:dc:83:
                    41:91:ea:48:42:27:8e:f3:3b:aa:c9:be:5d:04:b1:
                    1b:11:42:c2:a7:a9:c5:c3:70:30:d9:3c:6f:68:2b:
                    e4:4e:8b:53:b9:49:59:92:9c:eb:70:c5:a3:e7:c9:
                    b0:da:a5:97:89:fb:c9:26:a8:47:22:9b:42:b7:65:
                    75:ff:5c:7d:c0:5b:32:cf:7f:21:a5:8c:b8:81:13:
                    5b:7a:7e:b5:18:e1:e1:5f:ee:83:e3:44:5c:68:db:
                    b8:6c:78:b8:0a:cc:e4:07:e7:a4:16:f7:48:9f:6c:
                    0c:cf:d1:96:4e:59:ee:a3:12:69:71:86:e7:53:c6:
                    c9:f5:a4:60:44:90:91:dd:86:9a:d9:0a:9f:5e:b8:
                    bb:00:2a:63:79:95:86:28:37:90:ea:71:3a:6c:6d:
                    b6:d2:fc:c3:e5:9a:2b:99:15:18:42:9c:3e:18:17:
                    68:3a:69:e3:ce:86:d4:99:13:9e:0d:9f:26:06:a3:
                    ab:b0:99:fd:d6:a7:4d:9a:b2:a2:a3:11:f7:86:d6:
                    9c:cb:8d:14:9b:eb:f3:e0:65:3c:f5:d4:65:1d:58:
                    b5:da:92:1e:08:6d:d8:29:a8:b9:1c:8f:34:0a:b7:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:DB:2E:29:53:44:AE:A3:91:9F:25:4A:49:BD:26:8D:D7:F1:54
            X509v3 Authority Key Identifier:
                keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:48:09:09:c7:41:0f:b5:2d:9d:7c:ed:07:1d:fb:f5:7e:01:
         f4:5d:d8:f2:f3:39:10:d7:67:6b:1f:77:3f:a2:3b:04:b4:1a:
         89:9e:1c:b2:e5:c4:c7:6f:c2:c9:50:4a:e4:ad:6a:aa:df:60:
         53:e0:57:f1:d1:73:0b:14:78:5b:1d:c2:94:51:ba:07:4e:1b:
         a9:d1:1c:4d:84:6f:78:9b:5b:d9:2e:d2:f0:57:2f:25:7e:0f:
         6a:d2:40:b1:8e:43:7d:92:0a:9b:1f:7b:4c:cc:88:12:e6:22:
         2d:d6:e1:b4:31:79:e0:e0:81:f3:ba:9d:22:4f:fd:0f:0c:8f:
         6c:29:a6:ba:c2:f6:bc:b3:45:63:1d:e6:66:ad:18:b2:de:70:
         44:46:ad:1a:87:4f:7e:eb:2d:aa:e2:ff:40:88:a9:8a:3c:f9:
         6c:be:7f:e7:79:f9:3b:38:92:4c:5e:93:f8:77:63:22:76:23:
         3b:37:1e:5b:dd:ba:58:ed:99:84:f8:84:b8:a2:1f:2b:9d:5a:
         05:0c:4a:4d:b5:9d:5d:f7:bd:9a:37:a2:4a:87:6e:ca:eb:b4:
         f9:28:1e:c9:8f:df:4c:51:a5:d1:66:3f:52:76:1e:82:53:f0:
         33:e4:a2:cc:bb:55:26:05:1e:31:62:08:d8:ba:4b:4a:92:3f:
         07:14:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:19:03 2025 by rpki-client