This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File:                     DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier:          wKvRfXOZY0A5RzfiXPEtp0CKDfi+45asOPzxlOqHJYg=
Subject key identifier:   0B:EF:EE:A7:35:90:59:24:7B:BA:24:5E:36:B6:4F:3A:EE:2C:18:8D
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer:       /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial:       019AF31CD00744FBFFEDEBC6A04638740EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 10:02:22 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:22 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:22 +0000
Files and hashes:         1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
                          2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
                          3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: c1PA1QSTRiUAGSuaEde15gqamu0xrMgZy4CAc/DqoYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:d0:07:44:fb:ff:ed:eb:c6:a0:46:38:74:0e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
        Validity
            Not Before: Dec  6 10:02:22 2025 GMT
            Not After : Dec  7 10:02:22 2025 GMT
        Subject: CN=0befeea7359059247bba245e36b64f3aee2c188d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:88:c2:71:5d:97:17:28:51:34:e7:de:1d:
                    39:b3:37:eb:d1:3f:33:1a:c4:43:b1:92:5a:00:ed:
                    73:32:08:b5:80:c0:ad:d9:38:ae:0b:fa:4c:a8:99:
                    90:9a:dc:85:1b:0f:70:49:ac:1c:ba:66:d3:dc:83:
                    55:6e:49:42:65:76:2b:ac:cb:37:a8:f6:8e:20:b4:
                    6c:21:56:1f:eb:49:c8:f0:7b:a6:2b:58:66:89:51:
                    e9:f2:83:db:b5:2a:48:50:2e:ef:f7:a9:99:51:92:
                    37:f1:72:7e:13:5a:80:80:db:75:30:a7:c2:61:0b:
                    34:77:7d:5e:d7:38:f1:09:83:97:3a:0e:ca:f3:d5:
                    d5:e7:b4:85:5f:75:b0:f3:9d:c4:b0:be:11:f0:7a:
                    fb:40:1d:dc:9d:12:6b:0b:ec:54:6f:05:18:16:2d:
                    30:5c:0d:4e:bc:58:3f:e8:6c:4e:7e:70:6b:3a:69:
                    5b:45:99:77:14:b4:33:33:a8:e1:65:3a:63:c9:19:
                    db:da:41:b0:d4:2f:cb:5a:c4:80:e2:d1:ae:85:de:
                    18:1f:5f:b0:d8:3e:60:b6:dd:d7:52:5d:32:88:af:
                    c5:66:3b:97:47:f3:ad:8d:d4:fc:e1:dd:6f:dd:82:
                    a6:5a:39:85:d5:cd:9c:5c:28:23:a8:3d:0f:24:cd:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EF:EE:A7:35:90:59:24:7B:BA:24:5E:36:B6:4F:3A:EE:2C:18:8D
            X509v3 Authority Key Identifier:
                keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:24:c3:b4:af:56:23:90:a0:de:ed:bf:e6:44:5e:3b:ac:41:
         d9:d0:48:15:d9:d8:30:57:9c:17:05:42:d4:48:a1:30:11:a8:
         f7:66:7c:94:e6:f2:28:e4:82:9b:c4:65:43:75:04:cb:46:3e:
         92:2a:5d:64:6b:01:00:14:2d:14:3f:af:b2:ec:b2:e4:14:81:
         ae:82:fd:68:d3:36:12:f7:c3:98:94:e6:9b:54:a8:c7:5b:cd:
         63:13:fb:82:ee:f1:29:a9:09:b9:13:18:72:ae:23:e5:1a:93:
         3e:07:de:25:c6:de:76:fd:63:58:78:bd:ee:5d:be:e9:50:a3:
         26:70:20:35:84:b2:a9:2f:cb:a6:48:32:e9:c4:85:97:4d:e7:
         cc:10:90:c9:39:8d:f6:aa:61:b9:2e:7b:b6:16:e4:ab:9a:50:
         ae:98:31:49:d1:fd:e2:4d:3e:1e:f6:12:c3:67:37:81:70:8c:
         6c:62:87:fe:01:1c:a1:4b:72:04:54:fe:56:2d:be:cc:2b:38:
         c1:92:4b:a7:e0:9f:7d:2f:dd:10:82:60:da:d2:40:cc:4e:6d:
         19:44:34:95:6f:ec:b9:66:2e:19:8d:ba:aa:5d:51:88:0d:55:
         cc:11:05:8d:8d:ae:0e:23:c7:eb:f1:48:3b:ab:06:d4:e4:4f:
         27:ec:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:21 2025 by rpki-client