This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File:                     MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier:          bkSwa1OSUEDpyrwRS3uKWTTQJEFtbn7nkaSsCOTU9N4=
Subject key identifier:   BE:0E:DC:E9:D9:F6:65:60:DC:46:95:D0:E6:37:EF:C5:AE:E6:9A:AA
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer:       /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial:       019AF12E7778C5BBE671F149D9E2662F305F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 01:02:25 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:25 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:25 +0000
Files and hashes:         1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
                          2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: 6bRWNC/XLAXwwvYpOnfCzzus74mk2Nzs2FuaTim62kY=)
                          3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:77:78:c5:bb:e6:71:f1:49:d9:e2:66:2f:30:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
        Validity
            Not Before: Dec  6 01:02:25 2025 GMT
            Not After : Dec  7 01:02:25 2025 GMT
        Subject: CN=be0edce9d9f66560dc4695d0e637efc5aee69aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:7a:0f:4b:4e:f0:d5:87:11:ff:61:64:66:
                    34:e6:e5:22:9e:9b:a1:b8:7f:87:83:28:a6:b6:ab:
                    9d:0d:92:63:06:d4:04:5b:e4:8a:20:3b:44:a7:6f:
                    1b:5e:38:0d:2c:1e:85:69:0f:1c:68:69:b7:31:1d:
                    1b:eb:6a:00:e8:cc:05:53:6c:1f:5d:da:fc:9c:f8:
                    22:0d:02:fe:6d:cf:26:4e:bf:d5:b0:41:14:87:b9:
                    58:2a:7c:03:da:f7:c8:46:74:e5:5c:6b:e2:e4:97:
                    02:66:4b:bd:1b:e1:17:f7:3b:7c:1a:85:a1:5a:56:
                    2e:97:13:b7:88:90:9c:fe:cb:94:9d:a1:a1:07:2e:
                    2f:ad:58:3c:98:4b:ce:29:7d:6c:1e:4f:2f:95:c6:
                    87:eb:b3:83:5d:f3:1f:ef:33:d5:06:43:5c:b7:e6:
                    9d:e9:2b:7a:e1:e2:bf:b7:81:fe:d7:6d:43:b0:85:
                    6a:48:4e:7c:c9:ed:a2:41:27:1e:17:a0:79:ee:54:
                    14:d7:0b:86:c9:1c:db:8f:b5:1c:e2:72:c0:39:65:
                    27:dd:02:2d:37:ad:29:68:f1:cf:04:b9:e2:0d:98:
                    6c:c1:2b:7c:a2:e4:d4:9f:48:5c:97:34:0d:e3:c5:
                    88:09:6d:a0:6d:fa:44:23:80:e4:ab:e2:2f:c3:1c:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:DC:E9:D9:F6:65:60:DC:46:95:D0:E6:37:EF:C5:AE:E6:9A:AA
            X509v3 Authority Key Identifier:
                keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:a9:74:ca:70:4f:fb:29:b5:b5:1d:36:37:75:c7:bd:e3:
         2b:91:ad:8b:82:6b:4f:26:b2:9a:88:18:43:97:a8:80:80:e7:
         24:67:9b:98:f0:b2:d4:52:2d:47:5c:1c:b5:52:c8:06:20:50:
         f0:4a:4f:be:fb:8a:63:5f:53:e8:43:54:c2:af:f4:f8:3e:ca:
         5f:4b:b1:31:b0:9e:07:62:15:90:03:8e:b5:d3:a0:fc:e3:19:
         1e:42:c8:db:60:4a:d3:b1:64:e2:9f:0e:c9:34:06:fa:2b:a6:
         c3:03:59:a4:fa:7f:15:09:a0:d8:4d:cb:98:5d:9f:db:ab:c2:
         4a:bd:2f:a4:21:cb:13:85:0b:93:28:e4:6b:b5:f3:49:fc:4a:
         38:a0:95:c0:ae:16:ef:ec:67:b4:44:2b:58:ae:df:20:ff:f7:
         94:99:0d:8a:14:1f:51:48:fb:4f:a7:cc:da:66:d9:c3:5a:69:
         a0:ea:79:e5:b8:10:b5:fa:2e:ca:32:7f:94:a5:ca:d5:31:fe:
         e7:56:c4:96:8b:1d:61:a9:8d:2e:80:33:4b:56:fa:04:27:09:
         2a:cc:d0:e5:65:ab:4a:1a:84:d4:b5:10:43:7e:40:fd:68:24:
         e2:78:a0:fa:dd:f5:bf:68:77:d3:52:b6:29:7c:91:29:c3:13:
         5c:7e:9b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLnd4xbvmcfFJ2eJmLzBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm
NzQzODQwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD
EyhiZTBlZGNlOWQ5ZjY2NTYwZGM0Njk1ZDBlNjM3ZWZjNWFlZTY5YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnl6D0tO8NWHEf9hZGY05uUinpuh
uH+HgyimtqudDZJjBtQEW+SKIDtEp28bXjgNLB6FaQ8caGm3MR0b62oA6MwFU2wf
Xdr8nPgiDQL+bc8mTr/VsEEUh7lYKnwD2vfIRnTlXGvi5JcCZku9G+EX9zt8GoWh
WlYulxO3iJCc/suUnaGhBy4vrVg8mEvOKX1sHk8vlcaH67ODXfMf7zPVBkNct+ad
6St64eK/t4H+121DsIVqSE58ye2iQSceF6B57lQU1wuGyRzbj7Uc4nLAOWUn3QIt
N60paPHPBLniDZhswSt8ouTUn0hclzQN48WICW2gbfpEI4Dkq+IvwxwXTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4O3OnZ9mVg3EaV0OY378Wu5pqqMB8GA1UdIwQY
MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt
MDdlZDQ2YjE0OWMzLzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz
LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8+pdMpw
T/sptbUdNjd1x73jK5Gti4JrTyaymogYQ5eogIDnJGebmPCy1FItR1wctVLIBiBQ
8EpPvvuKY19T6ENUwq/0+D7KX0uxMbCeB2IVkAOOtdOg/OMZHkLI22BK07Fk4p8O
yTQG+iumwwNZpPp/FQmg2E3LmF2f26vCSr0vpCHLE4ULkyjka7XzSfxKOKCVwK4W
7+xntEQrWK7fIP/3lJkNihQfUUj7T6fM2mbZw1ppoOp55bgQtfouyjJ/lKXK1TH+
51bElosdYamNLoAzS1b6BCcJKszQ5WWrShqE1LUQQ35A/Wgk4nig+t31v2h301K2
KXyRKcMTXH6bzQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:10:27 2025 by rpki-client