This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          LCOI8ektmqNxmGQkIY95zAH/HsMi+LZ4zvBNvfL+aQs=
Subject key identifier:   B4:3B:C2:7F:A3:EE:6B:30:97:0A:CF:98:E1:9D:E5:0C:A5:F8:86:11
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       019AF61C8520A025B96D2B310B9020FE925B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          14F8
Signing time:             Sun 07 Dec 2025 00:00:55 +0000
Manifest this update:     Sun 07 Dec 2025 00:00:55 +0000
Manifest next update:     Mon 08 Dec 2025 00:00:55 +0000
Files and hashes:         1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: XayB4b+pnhSf9/hLw1nrDXMFR0GYFtM/FN+UrN2w3N8=)
                          3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
                          4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:85:20:a0:25:b9:6d:2b:31:0b:90:20:fe:92:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Dec  7 00:00:55 2025 GMT
            Not After : Dec  8 00:00:55 2025 GMT
        Subject: CN=b43bc27fa3ee6b30970acf98e19de50ca5f88611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:80:c1:89:72:37:7e:c1:bb:27:09:56:dd:
                    52:de:41:db:ae:74:d8:1e:a3:13:52:69:6c:f4:a9:
                    7e:86:4f:0f:c1:9b:f8:e4:7a:32:6b:b3:02:99:7e:
                    a0:dc:2b:d1:55:27:0b:6e:51:56:1e:cc:a5:f4:b1:
                    76:ec:70:38:23:1e:82:47:0f:a6:97:05:59:05:a3:
                    76:cf:95:ac:9f:c6:2d:0f:01:c3:67:48:f6:42:14:
                    c8:23:b2:4c:77:af:61:95:af:22:56:9b:93:65:ab:
                    a2:20:50:2d:d9:be:a0:6b:c2:7e:c9:c7:87:56:8d:
                    3f:22:c8:d0:a0:e7:a7:54:8d:c0:ee:7f:50:3f:ad:
                    c1:8b:9c:84:93:64:06:a7:cf:99:3a:99:39:a4:95:
                    a0:0f:8a:ea:35:a8:73:d8:8a:c3:be:7e:49:fa:f6:
                    36:95:37:3a:5f:b4:11:d8:65:51:41:db:6c:d1:78:
                    03:3d:fa:e8:9e:5d:d3:94:87:bf:bc:95:da:92:05:
                    7e:8a:9e:e5:54:1c:88:69:ee:7f:58:e7:df:98:de:
                    6c:40:77:f0:9a:54:33:8f:7e:7a:aa:82:0c:7e:29:
                    ec:91:8f:da:cb:37:e7:0e:93:4b:f1:f4:f9:91:3f:
                    fd:d5:56:60:61:c4:6d:e6:fd:f6:68:93:f4:e5:73:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:C2:7F:A3:EE:6B:30:97:0A:CF:98:E1:9D:E5:0C:A5:F8:86:11
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:91:83:6b:fc:83:8c:da:2a:93:91:6d:5b:bb:37:a8:bc:aa:
         8f:67:71:d7:a0:66:8c:f1:6f:3a:ac:4d:e1:a8:97:07:e7:b1:
         71:6c:db:e3:eb:89:bd:ee:af:ee:89:a5:ae:84:41:51:13:17:
         5f:f1:86:1a:bd:70:37:13:77:90:f9:56:8c:01:bb:79:54:a7:
         ee:9f:80:ba:77:c1:bd:0a:b2:27:5e:32:0f:0b:58:8b:1d:99:
         33:10:15:ac:83:79:6f:ca:5a:91:dc:1b:70:c0:f1:f1:3d:74:
         16:92:a6:99:fc:5a:3a:55:34:60:cb:b5:7d:13:18:66:a7:d8:
         4b:16:ec:08:b0:cc:3e:18:c6:0e:d8:bf:00:9e:24:2f:a0:61:
         eb:cf:aa:54:74:92:4a:9a:d2:f0:18:ee:fb:a9:09:9c:ca:0d:
         66:5f:b0:6e:36:8a:f9:06:c6:65:fd:9a:c5:21:7e:d6:e2:82:
         18:b6:0b:8e:8e:33:3e:b3:b5:dd:03:2d:70:2d:81:bf:18:bd:
         d3:89:0f:5b:4e:c1:56:ab:fc:6b:3d:ed:70:89:90:46:f1:17:
         79:81:29:38:80:2c:f0:b4:9c:74:fd:f7:8b:3e:13:d2:50:bc:
         46:97:9d:a0:3c:c1:d1:a9:25:27:79:35:62:83:29:c0:cf:aa:
         c8:35:89:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2HIUgoCW5bSsxC5Ag/pJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx
MmFjNjgwHhcNMjUxMjA3MDAwMDU1WhcNMjUxMjA4MDAwMDU1WjAzMTEwLwYDVQQD
EyhiNDNiYzI3ZmEzZWU2YjMwOTcwYWNmOThlMTlkZTUwY2E1Zjg4NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tWAwYlyN37BuycJVt1S3kHbrnTY
HqMTUmls9Kl+hk8PwZv45Hoya7MCmX6g3CvRVScLblFWHsyl9LF27HA4Ix6CRw+m
lwVZBaN2z5Wsn8YtDwHDZ0j2QhTII7JMd69hla8iVpuTZauiIFAt2b6ga8J+yceH
Vo0/IsjQoOenVI3A7n9QP63Bi5yEk2QGp8+ZOpk5pJWgD4rqNahz2IrDvn5J+vY2
lTc6X7QR2GVRQdts0XgDPfronl3TlIe/vJXakgV+ip7lVByIae5/WOffmN5sQHfw
mlQzj356qoIMfinskY/ayzfnDpNL8fT5kT/91VZgYcRt5v32aJP05XOxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ7wn+j7mswlwrPmOGd5Qyl+IYRMB8GA1UdIwQY
MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt
YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx
LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJGDa/yD
jNoqk5FtW7s3qLyqj2dx16BmjPFvOqxN4aiXB+excWzb4+uJve6v7omlroRBURMX
X/GGGr1wNxN3kPlWjAG7eVSn7p+AunfBvQqyJ14yDwtYix2ZMxAVrIN5b8pakdwb
cMDx8T10FpKmmfxaOlU0YMu1fRMYZqfYSxbsCLDMPhjGDti/AJ4kL6Bh68+qVHSS
SprS8Bju+6kJnMoNZl+wbjaK+QbGZf2axSF+1uKCGLYLjo4zPrO13QMtcC2Bvxi9
04kPW07BVqv8az3tcImQRvEXeYEpOIAs8LScdP33iz4T0lC8RpedoDzB0aklJ3k1
YoMpwM+qyDWJtA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:16:46 2025 by rpki-client