This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          7sirVtBP7tL5KqhFaU5WBVm3hAHkkIiFx/5V609gJ60=
Subject key identifier:   91:5C:9E:2E:40:77:9E:A5:A0:07:6C:B8:48:50:A9:20:E2:6C:42:4C
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       019AF42DE3928666A8D8C29473C2ECEA3C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 15:00:39 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:39 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:39 +0000
Files and hashes:         1: LQ0UyMo_r23ofQXV0yOGIa-qTpo.roa (hash: X9yChjYALTQXRzmOEi06/C9TIxnvZMLcDXd49hI5SlU=)
                          2: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: LphI+RlGXQULQlGOJKHGrpKFs8eoOGgzozLpoaaCdGQ=)
                          3: V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (hash: zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=)
                          4: jGS8snyePsO074NpCXFdKhJggqU.roa (hash: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=)
                          5: wOE4JPTIGJlAFi9Bt4Todp1oTNs.roa (hash: XvGJnBOc7q3iGCoEZmt4SjrH7do6eadl4QVxex68LpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2d:e3:92:86:66:a8:d8:c2:94:73:c2:ec:ea:3c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Dec  6 15:00:39 2025 GMT
            Not After : Dec  7 15:00:39 2025 GMT
        Subject: CN=915c9e2e40779ea5a0076cb84850a920e26c424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:0e:b1:e0:51:8c:bb:54:73:7c:de:1f:af:
                    41:21:0c:91:55:c6:ae:c1:28:c2:e7:01:c7:b1:ac:
                    c7:78:ce:46:35:0f:d0:d4:68:ad:15:ad:69:ac:e3:
                    02:3a:c3:35:e5:dc:26:75:ec:8b:80:f1:93:24:03:
                    9a:14:d5:9d:e6:08:ec:6c:73:86:c4:20:9a:72:2f:
                    43:57:b9:4b:3d:0b:68:61:11:32:b1:93:82:38:2c:
                    d1:50:a9:85:62:22:0e:06:3a:7a:f5:65:e1:6f:ec:
                    dd:64:d4:10:f0:46:13:36:96:b3:dd:ef:4e:03:f9:
                    0b:fd:3f:7c:ec:0a:b7:53:a5:e3:c0:6b:65:da:ee:
                    4b:e8:e1:ad:9c:1d:a1:df:ed:a6:39:b4:56:db:b5:
                    40:34:90:4a:55:01:cd:d6:f6:67:9b:60:32:df:0d:
                    5c:68:5a:63:da:ee:62:81:f0:e3:33:a2:93:eb:a7:
                    e8:2f:45:3a:15:0b:28:f5:cc:f2:41:e6:ac:08:d4:
                    6e:05:73:43:4a:95:26:26:90:16:4f:65:5a:5e:cc:
                    40:c7:ef:00:4c:e5:22:77:55:ae:1c:74:33:ad:3e:
                    7a:91:45:c8:be:c9:04:54:84:bc:66:3e:cb:a7:4e:
                    88:3d:62:23:01:18:e2:1a:55:68:af:3f:9c:5e:83:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:9E:2E:40:77:9E:A5:A0:07:6C:B8:48:50:A9:20:E2:6C:42:4C
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:f0:3b:ca:1b:3a:cc:1a:5e:74:93:17:60:33:56:a5:7c:
         e9:9b:4f:f2:d9:fb:1b:41:63:16:88:90:8d:1f:04:ec:c3:9c:
         c9:4e:a7:5c:5b:3a:7f:0e:03:a1:81:5b:a2:4d:78:2e:13:23:
         17:fe:53:97:b9:84:1a:92:9e:03:d1:9d:00:a1:46:d8:45:c3:
         29:d1:13:c9:f2:80:02:fe:ac:98:ca:42:fa:e6:1e:11:70:32:
         37:f4:7f:81:43:6e:ae:a4:55:ab:ab:8a:85:10:7e:86:20:d3:
         f7:86:8a:75:5a:e4:c4:4e:5b:a4:14:4d:b7:37:d4:ad:f2:7b:
         a4:48:3c:be:a9:16:24:da:40:44:dc:14:42:87:76:98:3a:01:
         62:42:72:f0:69:6e:16:9a:a0:7e:3f:1e:21:0d:c1:13:95:b9:
         47:55:63:62:87:7e:6e:1c:71:71:af:17:7d:81:bc:dd:ce:5d:
         32:85:24:19:03:6e:8b:aa:29:a6:de:87:1a:47:13:6f:6e:fa:
         83:e4:14:4e:9e:41:d9:5f:78:59:a9:f5:0e:b2:e8:ed:12:46:
         e8:d0:0a:70:85:72:56:2e:8c:a3:a3:7b:26:b7:7b:86:16:9b:
         c1:2e:7a:78:91:9f:9d:66:1a:80:80:54:b0:82:6a:8b:0e:7c:
         4b:93:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:39:39 2025 by rpki-client