This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File:                     Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier:          l0z++KdFtH0hRZjHG+7vXwgR/vTu2jsCm47aB/Ke91k=
Subject key identifier:   DB:2A:E1:2E:32:B1:FE:63:BD:41:18:4F:D3:B1:09:E5:92:F7:EF:5C
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer:       /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial:       019B27ADD9AA3D1EF48B56D49A34F6A3EC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number:          1782
Signing time:             Tue 16 Dec 2025 15:01:03 +0000
Manifest this update:     Tue 16 Dec 2025 15:01:03 +0000
Manifest next update:     Wed 17 Dec 2025 15:01:03 +0000
Files and hashes:         1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
                          2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: jBMJ/tcBGu1TGrNpVGYHB/mWkS3jK+vXHgZIkIz22QI=)
                          3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:ad:d9:aa:3d:1e:f4:8b:56:d4:9a:34:f6:a3:ec:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
        Validity
            Not Before: Dec 16 15:01:03 2025 GMT
            Not After : Dec 17 15:01:03 2025 GMT
        Subject: CN=db2ae12e32b1fe63bd41184fd3b109e592f7ef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:70:b2:14:da:45:09:6b:44:85:4e:48:0b:
                    02:aa:42:2f:9c:70:74:3d:53:0d:7b:44:20:bf:fe:
                    96:6d:54:df:49:be:e8:53:6a:a3:51:d2:7c:09:2f:
                    4d:b3:d9:95:26:40:52:e2:02:9c:77:b6:9c:21:33:
                    41:cb:88:24:f7:cc:a1:3d:3b:cb:9d:d4:67:0e:84:
                    2b:42:7e:60:f5:11:d1:1e:27:fc:f5:6f:e0:31:18:
                    ce:38:c6:ca:1c:f7:6a:29:70:e5:dc:d7:c3:9e:23:
                    80:ed:7a:9f:5d:44:95:c5:ab:c7:15:be:18:55:9a:
                    93:70:dd:1e:de:87:36:49:2f:69:14:ba:c7:94:34:
                    28:ba:f3:6a:b3:a9:e3:72:4b:bb:38:72:38:ab:34:
                    60:5d:f0:23:b6:76:3c:e2:6a:f0:c0:fe:e5:70:c8:
                    59:b2:60:c2:5f:1b:2f:ff:2d:cc:84:ab:64:d7:a6:
                    bd:0b:7e:c1:af:aa:26:c6:2c:f1:63:81:51:1a:31:
                    05:bf:0e:9c:79:55:10:e5:4e:0a:7e:a1:9a:35:a4:
                    6f:7f:99:84:aa:44:c7:55:c0:e0:e1:1c:af:f3:91:
                    e4:8a:a0:18:37:64:f5:2b:88:c2:55:4d:14:37:98:
                    55:02:7d:e9:53:f0:f0:e4:5e:44:23:df:0f:1c:ca:
                    15:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:E1:2E:32:B1:FE:63:BD:41:18:4F:D3:B1:09:E5:92:F7:EF:5C
            X509v3 Authority Key Identifier:
                keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e2:c2:67:d2:89:f1:3e:5b:b3:10:7e:1b:af:37:78:b8:5f:
         1d:0e:a7:68:9d:ca:a6:e5:b7:c6:01:8e:2b:67:74:eb:a3:05:
         93:08:a0:dc:97:49:9d:df:c5:78:21:c2:03:03:5e:73:ed:68:
         b4:bd:c1:c6:a7:db:50:06:75:d9:c4:8e:c9:08:c5:71:e9:82:
         3b:63:98:8c:49:eb:3e:e5:90:b4:4e:0b:29:6b:db:0b:f4:c2:
         22:56:a6:12:9a:7a:85:f9:3a:43:4f:d0:23:da:7d:eb:f9:42:
         fa:81:d6:69:9e:aa:2d:d8:e4:d9:91:e8:25:30:50:01:68:99:
         ce:f8:dc:a4:58:43:77:71:6c:f9:b6:9b:7e:a0:09:c2:8f:ba:
         08:7f:24:62:6c:3f:70:b7:ac:15:31:fb:84:4b:e9:de:4d:f7:
         9a:67:9d:61:b7:85:df:f1:ff:0c:ea:2a:e3:13:b8:a3:80:b9:
         de:6a:eb:22:da:ea:cc:3c:2c:a1:f9:4a:ba:52:75:fb:99:b6:
         f0:4d:bc:55:20:da:99:0a:ca:cf:2a:35:15:d3:77:8a:cb:85:
         cf:67:34:43:2c:0b:51:ec:49:48:78:59:5a:be:d7:b8:47:8b:
         f6:ac:57:87:7a:07:51:e1:ba:48:af:9b:7e:82:40:1c:f4:fd:
         84:34:7f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsnrdmqPR70i1bUmjT2o+wyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjRmZTczNDE5YmM4NmQ1ZjJlNzJiNDE0YjZiNGQ0Mzc5
ZDViZjUwHhcNMjUxMjE2MTUwMTAzWhcNMjUxMjE3MTUwMTAzWjAzMTEwLwYDVQQD
EyhkYjJhZTEyZTMyYjFmZTYzYmQ0MTE4NGZkM2IxMDllNTkyZjdlZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIBwshTaRQlrRIVOSAsCqkIvnHB0
PVMNe0Qgv/6WbVTfSb7oU2qjUdJ8CS9Ns9mVJkBS4gKcd7acITNBy4gk98yhPTvL
ndRnDoQrQn5g9RHRHif89W/gMRjOOMbKHPdqKXDl3NfDniOA7XqfXUSVxavHFb4Y
VZqTcN0e3oc2SS9pFLrHlDQouvNqs6njcku7OHI4qzRgXfAjtnY84mrwwP7lcMhZ
smDCXxsv/y3MhKtk16a9C37Br6omxizxY4FRGjEFvw6ceVUQ5U4KfqGaNaRvf5mE
qkTHVcDg4Ryv85HkiqAYN2T1K4jCVU0UN5hVAn3pU/Dw5F5EI98PHMoVzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsq4S4ysf5jvUEYT9OxCeWS9+9cMB8GA1UdIwQY
MBaAFENk/nNBm8htXy5ytBS2tNQ3nVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQt
NjcwMzA4ZDFlYzlkLzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQtNjcwMzA4ZDFlYzlk
LzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOLCZ9KJ
8T5bsxB+G683eLhfHQ6naJ3KpuW3xgGOK2d066MFkwig3JdJnd/FeCHCAwNec+1o
tL3BxqfbUAZ12cSOyQjFcemCO2OYjEnrPuWQtE4LKWvbC/TCIlamEpp6hfk6Q0/Q
I9p96/lC+oHWaZ6qLdjk2ZHoJTBQAWiZzvjcpFhDd3Fs+babfqAJwo+6CH8kYmw/
cLesFTH7hEvp3k33mmedYbeF3/H/DOoq4xO4o4C53mrrItrqzDwsoflKulJ1+5m2
8E28VSDamQrKzyo1FdN3isuFz2c0QywLUexJSHhZWr7XuEeL9qxXh3oHUeG6SK+b
foJAHPT9hDR/TQ==
-----END CERTIFICATE-----
Generated at Tue Dec 16 19:15:40 2025 by rpki-client