This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File:                     QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier:          DJtTYmvrQKiCzQvBKAPQ5L5XTrfNCBY6d9f3447kB48=
Subject key identifier:   B5:17:67:94:53:B6:7C:D7:52:FC:8A:9B:2D:56:74:9B:D6:F1:AD:B8
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer:       /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial:       019AF164847612CFE4446C28510F090BE9ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number:          0B92
Signing time:             Sat 06 Dec 2025 02:01:27 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:27 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:27 +0000
Files and hashes:         1: NNtuOH7Ss0GK2NCY4ASxIdJwy5M.roa (hash: XEhO+BECYJy48qc1PZIYHLHaFzNgbkvhwIUjzz8UOEI=)
                          2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: 2G/mKIZ7rVqoGcEM4yNRC4lcUy8Y+MHG/m/VkTpcycg=)
                          3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:84:76:12:cf:e4:44:6c:28:51:0f:09:0b:e9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
        Validity
            Not Before: Dec  6 02:01:27 2025 GMT
            Not After : Dec  7 02:01:27 2025 GMT
        Subject: CN=b517679453b67cd752fc8a9b2d56749bd6f1adb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:52:1b:1e:e4:f6:50:7a:33:2d:79:13:5c:
                    bc:35:b3:6a:17:8d:67:89:81:7b:e8:14:fc:65:e5:
                    35:45:18:13:66:4f:35:60:b2:c6:ef:75:25:f7:d6:
                    e2:6b:ae:6a:83:d4:47:71:f7:04:d9:15:f3:29:47:
                    18:62:06:72:12:e4:2c:22:da:d0:48:e9:2d:34:52:
                    f4:9b:c7:67:af:a8:e2:f5:a1:a2:43:89:d1:1c:4f:
                    00:6a:fa:1c:bb:18:ff:fa:a6:f8:47:0f:1c:fa:02:
                    c9:a6:27:b5:ee:49:22:5d:b7:2d:4c:b4:0d:d1:ef:
                    b8:6c:84:c1:b5:57:5e:90:f9:cf:9e:4c:0c:02:29:
                    5a:0b:ad:fe:57:b7:19:94:85:d4:76:5e:d2:3d:57:
                    ab:9f:da:a7:a5:68:98:bc:2d:28:f5:da:5b:7c:e1:
                    3b:5c:b1:37:3c:8d:4a:26:07:40:79:8f:10:3e:19:
                    33:9b:44:80:28:bc:dd:37:f0:52:6f:56:bd:e3:01:
                    19:1d:d9:2c:f9:ba:7c:de:71:e0:7a:30:77:61:93:
                    a0:e4:06:da:4d:15:96:3e:09:1d:a8:24:11:2c:78:
                    03:d5:c2:fe:ba:25:cf:e7:d2:84:2d:d4:9b:a1:ce:
                    68:62:33:f9:3a:c2:41:a6:88:f0:80:d9:83:a2:e7:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:17:67:94:53:B6:7C:D7:52:FC:8A:9B:2D:56:74:9B:D6:F1:AD:B8
            X509v3 Authority Key Identifier:
                keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:30:7d:16:66:02:cb:e2:cc:f4:e2:a0:e3:9a:38:d0:8d:4b:
         03:46:68:a9:e8:00:ac:22:9b:81:25:0f:dc:cb:fd:1c:2e:57:
         9b:f8:cf:15:1f:b1:02:d2:16:16:1f:01:d4:d3:cc:15:fd:74:
         2b:b4:39:b4:4c:e1:7b:78:83:03:13:df:e5:e9:42:99:5c:19:
         2b:44:5f:b3:17:66:31:9e:44:bf:24:2f:fd:13:bb:20:30:0c:
         a7:d5:bf:06:27:b0:3e:c6:bb:dc:42:39:49:e8:00:21:1b:10:
         28:db:f2:39:4a:c9:19:c8:4a:fc:f9:27:98:1f:ec:54:13:16:
         83:ba:57:d9:f0:d1:c9:fb:2c:38:4b:e8:73:78:bf:41:e5:29:
         5a:5b:de:52:02:b1:20:a1:52:06:02:5f:4f:b2:78:7f:f8:38:
         75:ab:eb:6f:88:69:a7:f9:fa:d8:a4:0b:42:78:2f:aa:d3:b0:
         2d:f8:fa:ee:ea:3b:61:ee:21:1d:ab:e9:24:79:bc:9a:54:06:
         f4:e5:50:c0:ce:2a:ff:78:92:12:c8:48:82:18:e6:60:db:c3:
         93:ab:e2:4a:54:c9:87:c4:1d:23:48:83:c5:ee:19:cf:2c:7d:
         68:c2:e2:7e:9a:65:1a:27:af:50:0b:97:16:8a:20:79:f0:f8:
         e4:fb:37:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZIR2Es/kRGwoUQ8JC+ntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj
ZWFjNzgwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD
EyhiNTE3Njc5NDUzYjY3Y2Q3NTJmYzhhOWIyZDU2NzQ5YmQ2ZjFhZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BJSGx7k9lB6My15E1y8NbNqF41n
iYF76BT8ZeU1RRgTZk81YLLG73Ul99bia65qg9RHcfcE2RXzKUcYYgZyEuQsItrQ
SOktNFL0m8dnr6ji9aGiQ4nRHE8Aavocuxj/+qb4Rw8c+gLJpie17kkiXbctTLQN
0e+4bITBtVdekPnPnkwMAilaC63+V7cZlIXUdl7SPVern9qnpWiYvC0o9dpbfOE7
XLE3PI1KJgdAeY8QPhkzm0SAKLzdN/BSb1a94wEZHdks+bp83nHgejB3YZOg5Aba
TRWWPgkdqCQRLHgD1cL+uiXP59KELdSboc5oYjP5OsJBpojwgNmDoudoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUXZ5RTtnzXUvyKmy1WdJvW8a24MB8GA1UdIwQY
MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt
OWJiYjQyZmE4Y2VkLzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk
LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDB9FmYC
y+LM9OKg45o40I1LA0ZoqegArCKbgSUP3Mv9HC5Xm/jPFR+xAtIWFh8B1NPMFf10
K7Q5tEzhe3iDAxPf5elCmVwZK0RfsxdmMZ5EvyQv/RO7IDAMp9W/BiewPsa73EI5
SegAIRsQKNvyOUrJGchK/PknmB/sVBMWg7pX2fDRyfssOEvoc3i/QeUpWlveUgKx
IKFSBgJfT7J4f/g4davrb4hpp/n62KQLQngvqtOwLfj67uo7Ye4hHavpJHm8mlQG
9OVQwM4q/3iSEshIghjmYNvDk6viSlTJh8QdI0iDxe4Zzyx9aMLifpplGievUAuX
FoogefD45Ps34g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:35:36 2025 by rpki-client