This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File:                     Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier:          E6q70Xkcfp/IAzTUnopDSiOceJDirphUC4f/GiFNYLA=
Subject key identifier:   D3:4F:F8:81:01:F2:0A:80:AB:9C:CD:0C:78:65:61:70:1E:CF:C9:6B
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer:       /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial:       019AF19BB4918EBE17AD05BB7E71F4BB85A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 03:01:44 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:44 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:44 +0000
Files and hashes:         1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
                          2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: Gjh7lEM6zot6E3gZj0Z9+ABpAH8VVj9BBAWuKZB1Y/g=)
                          3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:b4:91:8e:be:17:ad:05:bb:7e:71:f4:bb:85:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
        Validity
            Not Before: Dec  6 03:01:44 2025 GMT
            Not After : Dec  7 03:01:44 2025 GMT
        Subject: CN=d34ff88101f20a80ab9ccd0c786561701ecfc96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:28:1d:73:29:fb:9e:1b:4e:6f:08:30:df:
                    91:95:93:3d:3d:9d:c0:ac:37:4f:26:04:37:7c:a1:
                    c7:c9:ee:77:0c:6a:cc:65:9f:cf:74:7d:40:31:4e:
                    70:13:ba:1f:01:ea:d5:1f:8e:f1:9f:a9:43:73:19:
                    d6:6a:66:5f:e0:d1:4d:69:54:87:34:a4:c2:1e:0c:
                    c3:eb:ba:15:4a:8a:8f:d0:de:71:2a:7c:00:a5:86:
                    58:1b:96:8c:c6:8e:0f:63:ca:80:e2:08:88:74:e2:
                    1b:18:ac:cb:64:d3:01:30:72:e6:2b:87:46:76:4d:
                    3d:e6:3e:e0:ec:8a:cc:06:f8:b2:a9:e2:c1:c0:e1:
                    af:71:ab:c1:21:49:64:c1:d5:73:b1:01:aa:c7:19:
                    2c:f2:8a:8f:5f:06:00:9d:f2:3d:06:77:45:a1:a1:
                    97:b2:bd:0f:11:40:92:97:c8:91:d0:25:c1:9c:1f:
                    9f:29:e8:53:50:43:4f:1a:31:06:b4:b7:de:ce:66:
                    31:2b:68:80:ab:86:0e:17:0c:8d:02:c4:98:0d:9e:
                    e0:ce:1d:1f:7f:9e:2e:1f:e5:de:b6:b6:b4:cc:c6:
                    73:51:28:8a:37:84:86:1f:16:9f:cf:e1:18:57:40:
                    b0:55:a4:53:ed:ee:63:1f:1e:fd:6b:d1:8e:ec:98:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4F:F8:81:01:F2:0A:80:AB:9C:CD:0C:78:65:61:70:1E:CF:C9:6B
            X509v3 Authority Key Identifier:
                keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:21:21:c4:56:39:e1:f7:f9:3b:89:07:e2:81:95:83:cb:
         df:06:0d:fc:47:00:da:2e:60:22:62:6a:b5:51:f2:cd:2e:d1:
         a3:49:a0:1f:29:ee:c0:15:fb:29:da:10:b0:b6:0d:4e:2e:4e:
         1b:2d:7a:2d:00:7b:d5:2d:fb:7b:93:1c:40:ba:eb:86:3d:fb:
         af:cf:d6:85:74:e3:c6:4a:41:11:9a:ca:08:0e:1e:60:2f:dd:
         51:3d:25:ec:e6:2b:db:b8:03:a6:69:3f:64:2f:76:e5:25:e6:
         16:b3:c7:81:d6:cd:4d:89:97:10:51:51:55:76:b0:12:ce:1c:
         0a:b0:ab:0e:0e:be:87:77:b6:b4:35:cc:53:bf:7b:4c:f9:c0:
         2f:df:d1:a4:42:4b:a6:64:7d:be:2f:d6:32:f0:e1:8c:5a:38:
         a5:f2:d0:64:d5:f1:4b:8a:0b:f8:95:0f:2f:a2:03:8f:31:ed:
         de:7d:b0:13:6f:67:2b:a8:e7:6f:ee:ae:aa:3d:0f:a3:69:8e:
         5a:f7:23:cd:47:ff:96:8c:89:f0:9e:6f:2f:9c:89:f4:d0:8a:
         fa:79:00:99:c3:be:dc:67:28:e6:14:48:93:3c:df:a0:90:15:
         49:3f:8d:05:22:10:75:9e:6f:c5:29:a7:14:7c:2a:84:0d:95:
         d5:79:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:12 2025 by rpki-client