This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File:                     qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier:          xcNaEuu3Um9FLPs5+ft3dK8ZdqNmYjd83xnW6FBP6Ko=
Subject key identifier:   C4:02:BB:24:A8:C0:AF:DB:D4:82:FD:C9:B3:7B:BD:B9:5D:7B:93:86
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer:       /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial:       019AF163E68F4B0B01D2677F70B658A64210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number:          012E
Signing time:             Sat 06 Dec 2025 02:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:47 +0000
Files and hashes:         1: 6-EX2htJlHImEHBSvQOybhHaeO0.roa (hash: 1ZsDmzKZ+zRhoeIFPi5/Pw5pQ/dfpTV0ipC/YNmanno=)
                          2: fl64q3w812YfzXLS36kYEo550Os.roa (hash: FCrMbgS1Qp2Ghje1H1/gJu/F21+3Pg9qcnIqWk+O48U=)
                          3: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: AnGuR8I3ASA7cS8Iw7Qp7UnTPE9WyvzEDqXM5bo8Q6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:e6:8f:4b:0b:01:d2:67:7f:70:b6:58:a6:42:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
        Validity
            Not Before: Dec  6 02:00:47 2025 GMT
            Not After : Dec  7 02:00:47 2025 GMT
        Subject: CN=c402bb24a8c0afdbd482fdc9b37bbdb95d7b9386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:78:f2:4b:b6:d3:24:3d:ef:99:d7:c5:bf:
                    ba:6c:89:3a:4f:08:c6:02:a1:28:a8:9b:d7:e6:cb:
                    8a:86:a0:c7:b1:af:73:73:83:ee:ad:94:e7:c6:35:
                    f2:90:c8:7c:18:f5:86:d1:01:6b:77:37:4b:de:90:
                    23:cd:41:ee:b5:38:3a:95:d0:36:99:06:b1:7c:41:
                    13:e8:4c:3a:0d:2e:ba:f4:82:ae:df:67:5d:d9:50:
                    c8:ff:bf:3c:99:bb:9c:d4:d2:19:66:3f:01:e6:71:
                    94:bf:c7:0e:dd:10:67:48:62:aa:6d:40:6c:fa:7c:
                    8c:31:b9:d4:57:bc:f4:24:c2:e0:a6:9a:7a:fd:7e:
                    d1:5e:bf:ae:d8:0f:af:21:56:af:ab:12:e6:49:ef:
                    cb:c3:33:40:6b:4d:20:32:8a:5e:4f:3b:ff:7c:89:
                    68:f7:2f:2f:c7:da:10:94:22:c7:88:77:8f:12:2e:
                    67:72:08:7e:ca:49:3b:bb:bc:a7:32:cc:24:6a:95:
                    4e:8b:34:95:3d:91:14:49:1a:54:eb:78:8c:42:4b:
                    e8:aa:51:2b:f9:af:45:ad:b5:06:3c:8b:36:45:0d:
                    7e:fd:1a:56:9e:93:30:3a:b8:2b:6e:68:95:05:75:
                    86:38:e6:ea:53:b7:e5:c0:a5:f2:c1:96:69:a2:9c:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:BB:24:A8:C0:AF:DB:D4:82:FD:C9:B3:7B:BD:B9:5D:7B:93:86
            X509v3 Authority Key Identifier:
                keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:74:c3:02:b1:db:af:d3:3d:81:77:fb:da:36:9f:f0:1f:b3:
         22:60:35:34:30:ea:19:ec:8c:1f:1a:61:c6:2a:cd:f6:5e:f0:
         d5:8f:c3:ed:ce:2f:53:80:6b:27:0b:e9:0d:7a:e5:00:d4:2f:
         bf:e9:0d:23:b6:6a:52:13:5b:10:74:2f:43:59:49:e8:b1:ea:
         36:4b:33:f2:73:01:42:c0:1d:7a:ef:04:dc:a1:6a:5f:84:2f:
         a7:c2:45:5b:d9:0d:64:4a:54:56:b1:62:6b:98:08:33:64:3b:
         61:e1:93:a1:ba:93:16:a4:df:48:b5:9b:a2:a6:21:b1:38:1a:
         f8:c0:25:76:8f:f6:4b:ce:64:d8:dd:c6:d2:36:9d:3c:a3:e0:
         7d:9f:33:e2:9b:b0:11:45:3d:1d:5d:15:6e:95:e2:11:f2:61:
         dd:d3:54:29:fe:9b:01:8a:b5:09:bd:3e:01:48:d4:7c:10:8e:
         56:fb:de:ca:e9:65:dd:59:34:b5:60:89:29:5a:b1:fe:fa:26:
         c2:ec:7c:ce:f5:d2:ed:ee:d5:ec:5d:fd:42:d6:90:97:5d:63:
         89:7f:5c:22:c1:4e:45:f1:e4:9e:81:c1:d6:e6:f3:77:34:82:
         72:95:a7:7c:7e:ff:f0:3d:4a:6c:1e:3a:f8:b1:27:c5:02:96:
         43:20:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:50:58 2025 by rpki-client