This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File:                     qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier:          dw9p0tA24kA05/Vk/BtUFUjB9UMUXmKr7BEgKc5RfqQ=
Subject key identifier:   1D:D5:61:FB:AB:92:D5:B3:56:B0:85:E2:49:9F:2E:7C:64:4B:62:BB
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer:       /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial:       019AF540FEDAB4E03E406BA9FDF0D5A0D6C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 20:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 20:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 20:01:08 +0000
Files and hashes:         1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
                          2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: /qvTuYfJkOBiH2y5rU40RGhLb0P7VPyofKfkHPlcfHs=)
                          3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:fe:da:b4:e0:3e:40:6b:a9:fd:f0:d5:a0:d6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
        Validity
            Not Before: Dec  6 20:01:08 2025 GMT
            Not After : Dec  7 20:01:08 2025 GMT
        Subject: CN=1dd561fbab92d5b356b085e2499f2e7c644b62bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:74:d9:7d:ad:09:34:bd:48:2c:39:cb:a0:
                    c3:e8:4d:f2:ad:4e:5d:b8:fe:5c:be:79:fa:de:0e:
                    2f:f6:8c:a0:1e:6b:4b:06:ca:ff:e9:b0:e7:3b:c3:
                    2a:e4:e6:66:ce:85:a7:01:75:88:dd:b2:c6:f8:1d:
                    4e:1b:b3:66:8c:6e:07:18:f6:ea:38:2b:88:3f:78:
                    c8:81:84:ed:4e:1b:a3:79:18:7a:23:ae:66:e8:c4:
                    a0:57:50:42:d5:23:10:e6:84:bf:a0:fd:e7:59:f2:
                    de:f8:43:12:4e:3e:73:45:5d:51:eb:ef:f9:1d:ab:
                    69:9b:2a:be:bf:97:b1:2a:11:33:0a:1a:26:41:de:
                    e4:33:49:e0:a7:3c:75:16:6e:41:df:61:a3:f6:1f:
                    ee:f1:33:cc:d6:c6:21:8d:70:be:b0:bc:e8:24:97:
                    39:cd:c1:2d:db:d1:c1:50:14:f1:a1:25:48:4e:8c:
                    af:91:0d:6c:90:26:f8:8e:ff:20:e0:7a:4c:5e:cd:
                    f2:03:06:8f:62:55:2a:a1:7e:0b:80:a1:d6:39:b6:
                    3c:b4:e1:d8:1d:2c:09:5c:0d:d2:86:f3:cd:9d:68:
                    8a:8a:43:25:0a:69:50:64:0d:be:c8:cc:53:0a:ed:
                    c6:34:45:42:23:92:e1:46:7e:68:18:9b:9c:76:f3:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:61:FB:AB:92:D5:B3:56:B0:85:E2:49:9F:2E:7C:64:4B:62:BB
            X509v3 Authority Key Identifier:
                keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:df:9c:31:9e:74:36:66:94:60:59:76:c0:7f:78:5d:38:
         2c:0b:83:cc:c8:3d:3e:5a:74:04:9c:7c:e5:48:9d:b3:a3:d1:
         66:9c:b2:25:99:d3:45:48:15:60:73:29:da:5f:fe:1a:15:50:
         6a:c5:78:df:c3:59:db:58:87:1e:05:f7:83:f4:1c:a4:f8:46:
         34:12:73:4c:2d:11:16:dc:f2:9e:7c:1c:57:ea:6f:ec:ef:3d:
         55:70:1a:d4:93:a6:ff:ce:1c:71:8f:d6:47:d3:c2:92:a2:ae:
         41:86:bf:ee:03:62:a2:7d:6e:9a:eb:f1:69:36:10:b5:a1:70:
         d5:5b:f6:ae:50:23:92:5c:2e:ad:0c:2a:d2:e6:ce:23:95:12:
         62:b2:7c:32:c4:a7:d8:78:78:b5:2b:04:a2:b6:67:c6:67:bc:
         b9:3e:de:7d:6f:a6:00:d4:a2:6d:c6:ea:7e:03:b5:6f:02:2c:
         45:d2:b0:1c:38:8b:8a:d0:65:d1:13:e6:f7:bf:07:d6:73:21:
         ca:27:dc:e7:0e:3d:77:a4:58:e1:49:87:ff:85:bb:a9:a5:a6:
         2e:78:5d:1c:75:e7:db:59:40:2c:3a:96:30:d7:85:28:5f:e7:
         c9:3c:5c:a9:87:01:ef:da:17:2f:72:2b:3b:14:a7:0a:4f:89:
         c8:16:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:11:11 2025 by rpki-client