This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          7SvQjfvkjvtxyOtxoHKXTkUUXNcdOJ8+E2SGGHu77no=
Subject key identifier:   17:55:85:DA:A4:6A:CF:59:77:6A:8D:D4:AF:98:A4:80:C6:FA:D1:EA
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       019AF2AD4F49628043B98C01DE417D7C97B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 08:00:35 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:35 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:35 +0000
Files and hashes:         1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
                          2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
                          3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: iu4h5esddjwYVne5lfJ0h4Crgd+lldPS5HNxpgAOZ8k=)
                          4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
                          5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
                          6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:4f:49:62:80:43:b9:8c:01:de:41:7d:7c:97:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Dec  6 08:00:35 2025 GMT
            Not After : Dec  7 08:00:35 2025 GMT
        Subject: CN=175585daa46acf59776a8dd4af98a480c6fad1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:62:b9:56:bc:73:8e:d1:7d:36:3b:5a:c1:
                    c8:d6:a4:38:33:f4:8b:26:a2:c7:18:95:25:f6:51:
                    d4:f9:a9:78:df:9c:93:cf:09:3b:a9:d5:47:0a:f1:
                    2d:46:77:35:47:99:e0:e2:19:44:7b:ab:43:33:79:
                    c8:14:db:66:1f:c1:d5:5c:93:67:66:b0:9b:d7:26:
                    c8:d8:64:93:26:31:54:4c:66:82:65:70:1b:27:1d:
                    d9:10:35:06:87:e1:87:98:4c:ba:d4:e2:8c:d9:6e:
                    f0:1e:6b:0d:28:91:43:5b:bd:f5:73:e5:c3:02:c1:
                    70:7a:78:a9:1b:4f:ec:e2:f9:8f:86:1e:ab:0f:b9:
                    fa:b1:99:2c:f7:cd:92:cb:17:a4:4e:f9:cc:c9:49:
                    fd:0f:e1:05:25:ae:97:92:55:04:d6:9e:ce:f2:b0:
                    28:98:6f:f2:b5:ea:48:af:33:ae:d5:7b:10:fa:ea:
                    fa:88:88:59:36:24:ce:11:53:61:a4:1b:50:36:85:
                    66:6f:e9:a9:07:33:ad:98:df:65:83:99:b9:90:61:
                    e7:db:4d:ce:40:62:40:6d:46:c1:f8:24:01:34:24:
                    ea:3f:90:7d:36:45:62:24:19:fc:ac:3d:26:52:5b:
                    81:11:42:0c:0f:cc:84:fb:af:9a:c5:31:17:2c:4d:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:85:DA:A4:6A:CF:59:77:6A:8D:D4:AF:98:A4:80:C6:FA:D1:EA
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:55:f4:b6:b2:cb:e1:dd:e3:20:e8:c9:d7:e6:86:08:84:
         3b:a6:e2:a5:f6:63:4f:02:fb:d7:ea:79:fe:5f:3e:2d:76:68:
         3e:47:16:db:5e:7d:53:bf:ce:25:0b:70:e8:e9:59:80:52:b5:
         9c:63:ad:db:76:5c:77:2c:32:76:86:ac:ff:0f:ef:d9:8d:26:
         ac:fb:8d:ad:5f:c1:99:32:af:b3:a5:5b:59:43:75:73:5f:6a:
         58:cc:cd:f1:06:4c:82:49:9a:16:d5:9f:b9:d5:8f:62:1d:d4:
         c8:a9:26:e0:fc:bd:65:e5:0a:bc:52:8d:90:36:b0:8d:16:39:
         45:a0:34:50:e5:df:4a:6b:de:e2:51:a0:97:e3:94:65:35:26:
         32:af:a9:f6:87:0d:1c:be:4c:ba:ff:f7:ae:f3:42:7c:e8:13:
         fb:c1:f1:59:2c:a3:b2:1f:88:fd:a6:bb:ea:2c:a0:70:66:71:
         63:54:0a:54:8e:12:19:f9:7f:65:23:a4:f6:c0:8a:20:5b:c6:
         c5:7d:65:70:9b:55:e8:fa:41:75:d6:27:bd:09:4a:79:a1:6f:
         3e:1c:38:7d:6c:02:eb:c8:17:6b:0e:a5:8f:55:4f:90:ed:d1:
         24:75:5c:10:d6:d6:60:89:a0:de:f4:d7:49:8a:86:c8:32:17:
         0b:f4:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:14:11 2025 by rpki-client