This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          BoQlYxObZp74QflrtM2fuKH+JhdKolSikfp2wijwrO0=
Subject key identifier:   C5:9B:6F:22:55:F0:49:CD:2A:5F:22:7E:A9:97:11:AD:27:CF:3C:06
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       019AF2E440FD6398CB4391D4A209E06E6F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1772
Signing time:             Sat 06 Dec 2025 09:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:36 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: oTgpd2ZAcegpiC3RLjQFoMPCkCqY/AI5a6wl0esXU7U=)
                          6: xZ8_FtyOoYQhBe4_1jlvCQDfhhU.roa (hash: A6XCP73eFEKF/rQa/nJO+G6QSChxaH4U3Rru774QV8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:40:fd:63:98:cb:43:91:d4:a2:09:e0:6e:6f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Dec  6 09:00:36 2025 GMT
            Not After : Dec  7 09:00:36 2025 GMT
        Subject: CN=c59b6f2255f049cd2a5f227ea99711ad27cf3c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4e:98:f6:8e:5f:f0:d0:61:c4:97:d3:3e:b5:
                    76:8a:85:44:15:d3:1c:17:25:5e:1d:d8:3a:28:86:
                    84:5c:95:03:3c:45:8c:ed:bd:32:7e:4f:e3:2e:b8:
                    de:75:42:4b:c0:d5:9d:d8:d2:6b:df:ad:1e:49:88:
                    80:98:db:c3:0c:ad:36:d9:bb:5e:98:84:25:3a:a3:
                    91:24:e6:63:42:97:5f:95:2f:69:f8:74:59:63:5b:
                    3e:b4:5f:31:8d:48:2f:99:68:0b:7b:d8:c3:cf:c9:
                    2f:d9:7f:9a:67:36:c2:fe:f6:0f:99:de:8e:74:14:
                    20:0a:d4:c7:9b:e4:db:87:12:bd:a8:d6:50:90:77:
                    82:39:49:eb:c3:88:c7:b9:02:7a:71:05:03:a6:91:
                    55:cb:74:76:be:55:92:70:aa:cd:17:52:51:b4:74:
                    2b:a8:ae:83:c6:fe:08:16:ee:7c:62:14:87:b9:d4:
                    4b:56:1e:98:05:55:85:b6:8d:44:37:99:f6:d5:88:
                    65:dc:40:d7:78:f7:c3:54:7c:11:7a:c4:04:a0:ac:
                    ba:9a:a5:d9:a8:fe:eb:7b:7b:f2:bf:70:af:ca:bc:
                    9a:73:74:0a:10:d6:c3:d7:f2:d0:d4:02:54:16:19:
                    9d:9b:84:05:f8:06:89:32:6a:07:1d:7f:6c:f0:2d:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:6F:22:55:F0:49:CD:2A:5F:22:7E:A9:97:11:AD:27:CF:3C:06
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:77:c9:f6:28:3c:56:37:37:bf:df:1c:84:4e:7b:fc:c4:
         84:ef:d1:9e:2e:d2:a7:db:6d:55:84:1b:c5:c0:f4:a2:c3:b9:
         a7:52:e6:2b:3a:87:b6:05:e8:ba:ac:c8:bb:95:8d:4d:39:71:
         77:e4:63:ff:58:99:74:59:d7:7d:19:cc:25:f7:ec:7c:9a:fe:
         54:2e:3e:5b:5d:c7:1b:68:e2:26:dc:25:c1:a0:b9:0f:9a:69:
         ce:88:90:0c:c3:a1:d9:e8:1e:3a:4d:3e:24:7f:8a:52:e0:9a:
         5c:43:e8:2c:dc:5f:e5:41:b6:1d:9a:a5:f3:1f:dc:b4:81:93:
         4a:47:ed:39:d9:5a:53:a9:e5:f1:5a:8e:57:28:e9:ba:1b:27:
         36:bb:75:ac:19:85:4b:66:43:4f:37:fe:e2:2d:79:f7:06:34:
         8d:db:da:b4:54:b6:d6:04:75:25:91:57:35:9b:cd:8d:fb:71:
         c3:4c:e9:76:98:be:52:51:28:42:01:9f:12:7e:5c:e2:17:b0:
         92:5d:12:df:e8:aa:15:63:fe:fb:bb:26:98:fc:22:ab:56:b0:
         a5:3f:6b:b5:30:54:4a:a8:29:87:8c:be:66:45:48:4a:2f:f8:
         b3:f2:1d:1b:46:27:a2:0b:7c:6b:01:2e:7b:1a:74:ad:d9:34:
         a1:f4:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:22 2025 by rpki-client