This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File:                     QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier:          7KzoofFV7WFQTEoDivPkiyCqNvIXs6zfuCQlsUwnAbQ=
Subject key identifier:   23:51:F7:9E:7C:AC:1B:D3:7F:CA:6F:2D:C8:18:2E:68:97:67:CF:BC
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer:       /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial:       019AF276E16161F12817F9D40F68532BAF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number:          0CBE
Signing time:             Sat 06 Dec 2025 07:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:08 +0000
Files and hashes:         1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: a68Nm9Ls/8XN5FLMLURzTKSU5PzL7hKO4S53jxDIJbQ=)
                          2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
                          3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:e1:61:61:f1:28:17:f9:d4:0f:68:53:2b:af:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
        Validity
            Not Before: Dec  6 07:01:08 2025 GMT
            Not After : Dec  7 07:01:08 2025 GMT
        Subject: CN=2351f79e7cac1bd37fca6f2dc8182e689767cfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:ba:b6:f2:a5:1f:34:2a:b7:c8:4b:df:18:
                    95:0a:10:3c:9c:1f:35:49:17:5c:aa:2a:01:cc:7e:
                    0f:b8:65:2a:aa:fc:53:f6:2e:59:e7:95:ef:2e:96:
                    b4:2c:b7:35:33:91:70:d7:d5:69:41:2a:49:95:b0:
                    3b:04:83:9d:d8:80:84:07:43:e9:23:54:14:f3:19:
                    da:1e:d4:83:aa:7c:cb:b9:d9:a7:c6:eb:c3:9e:33:
                    d5:f2:ad:58:7e:b5:64:ca:16:d4:a1:27:df:17:48:
                    49:bf:06:01:20:a9:fc:51:75:cf:54:83:fc:c3:bd:
                    70:58:ee:59:c1:80:63:56:89:da:60:f6:5a:cb:f5:
                    2f:f6:97:99:c3:20:0d:c1:d9:be:cb:07:35:2c:ed:
                    be:1c:42:0b:6e:55:d8:b6:45:f6:4e:c2:e3:87:8d:
                    a8:9b:f5:64:ec:8d:d9:33:2b:8b:5b:83:13:29:13:
                    95:a0:58:4b:fd:e1:e4:df:99:65:34:e3:db:95:7d:
                    cb:c3:5f:a0:01:dc:82:24:55:26:36:33:7c:fe:92:
                    47:7d:fc:aa:b4:47:d5:e8:ee:24:bb:21:88:1a:b4:
                    c9:3b:c2:f2:22:cb:52:ad:49:90:af:41:ca:4a:53:
                    86:4b:3c:07:b5:ba:e7:34:33:f0:29:ec:35:d1:c3:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:51:F7:9E:7C:AC:1B:D3:7F:CA:6F:2D:C8:18:2E:68:97:67:CF:BC
            X509v3 Authority Key Identifier:
                keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:6f:01:b6:9e:66:21:99:82:ed:b4:3d:c5:8e:3a:97:92:
         0f:80:02:4b:b8:54:e5:e5:7c:a2:42:b1:26:bf:1b:fe:d5:3d:
         2b:c5:2a:71:02:f2:a7:e6:c4:2a:33:fe:1f:dc:2f:97:b1:60:
         ee:2a:a6:9d:45:84:44:3a:4c:ab:bc:f8:63:60:6c:c0:82:db:
         66:d1:f4:3c:3e:f9:a2:b2:4a:13:60:0e:64:92:cc:95:79:61:
         aa:e5:be:ad:b2:10:47:4c:90:86:74:74:49:2a:3f:03:ab:63:
         d5:b5:d8:3d:b2:dc:72:5c:62:66:df:8c:e5:62:9d:b5:e8:50:
         63:ee:11:30:81:d0:32:00:e4:c9:11:e7:85:43:51:8b:6d:52:
         24:28:29:e3:6a:56:3f:92:e6:91:cc:22:cf:bd:ba:47:8e:be:
         5a:06:e9:ac:bf:7a:1f:85:73:5e:4c:5c:15:95:c0:0d:c7:5a:
         33:6c:f8:83:3b:0c:f5:f0:73:dc:22:7e:f0:36:c2:d4:80:7f:
         1e:21:69:66:3a:c3:2f:6a:e0:8e:27:a2:ed:a1:dd:e1:7f:2b:
         a2:30:86:9e:b5:71:62:64:74:94:43:17:0a:0a:b1:b3:26:93:
         11:86:04:01:6b:4c:ce:c2:43:1f:ab:1c:73:0d:5c:75:90:1f:
         9f:cb:86:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryduFhYfEoF/nUD2hTK69zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTE5NjMxMGE3ZjdkZDk5OTllYzQzZTkzOGZkOTA2OTg1
YTNmODcwHhcNMjUxMjA2MDcwMTA4WhcNMjUxMjA3MDcwMTA4WjAzMTEwLwYDVQQD
EygyMzUxZjc5ZTdjYWMxYmQzN2ZjYTZmMmRjODE4MmU2ODk3NjdjZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR26tvKlHzQqt8hL3xiVChA8nB81
SRdcqioBzH4PuGUqqvxT9i5Z55XvLpa0LLc1M5Fw19VpQSpJlbA7BIOd2ICEB0Pp
I1QU8xnaHtSDqnzLudmnxuvDnjPV8q1YfrVkyhbUoSffF0hJvwYBIKn8UXXPVIP8
w71wWO5ZwYBjVonaYPZay/Uv9peZwyANwdm+ywc1LO2+HEILblXYtkX2TsLjh42o
m/Vk7I3ZMyuLW4MTKROVoFhL/eHk35llNOPblX3Lw1+gAdyCJFUmNjN8/pJHffyq
tEfV6O4kuyGIGrTJO8LyIstSrUmQr0HKSlOGSzwHtbrnNDPwKew10cPOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNR9558rBvTf8pvLcgYLmiXZ8+8MB8GA1UdIwQY
MBaAFEKRljEKf33ZmZ7EPpOP2QaYWj+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQt
MGFhOWQ5N2M4Yzk4LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQtMGFhOWQ5N2M4Yzk4
LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAhvAbae
ZiGZgu20PcWOOpeSD4ACS7hU5eV8okKxJr8b/tU9K8UqcQLyp+bEKjP+H9wvl7Fg
7iqmnUWERDpMq7z4Y2BswILbZtH0PD75orJKE2AOZJLMlXlhquW+rbIQR0yQhnR0
SSo/A6tj1bXYPbLcclxiZt+M5WKdtehQY+4RMIHQMgDkyRHnhUNRi21SJCgp42pW
P5Lmkcwiz726R46+WgbprL96H4VzXkxcFZXADcdaM2z4gzsM9fBz3CJ+8DbC1IB/
HiFpZjrDL2rgjiei7aHd4X8rojCGnrVxYmR0lEMXCgqxsyaTEYYEAWtMzsJDH6sc
cw1cdZAfn8uGZw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:37 2025 by rpki-client