This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File:                     qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier:          3eTNwceHqarzb52CsFpGsRinE/BgH5BfYYpVHaksG24=
Subject key identifier:   A4:75:48:84:CE:71:C8:D4:86:D4:9F:1F:70:4D:4F:3F:DE:78:A4:69
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer:       /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial:       019AF68A4597B47C00B75991B1A881AAB319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number:          176C
Signing time:             Sun 07 Dec 2025 02:00:48 +0000
Manifest this update:     Sun 07 Dec 2025 02:00:48 +0000
Manifest next update:     Mon 08 Dec 2025 02:00:48 +0000
Files and hashes:         1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
                          2: PHGv-iP3-GV5PUVRHcEuKvBjePw.roa (hash: 7jlPPnbCBHtnfInB0g3T4zwfv1LlUHpXKaShvtDGxfY=)
                          3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: Y+oC6ubXzQcYQBI0PIAnq/Nu37zOuZ/KCNdj9P6xQTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:8a:45:97:b4:7c:00:b7:59:91:b1:a8:81:aa:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
        Validity
            Not Before: Dec  7 02:00:48 2025 GMT
            Not After : Dec  8 02:00:48 2025 GMT
        Subject: CN=a4754884ce71c8d486d49f1f704d4f3fde78a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:43:1a:7d:2d:8c:7c:17:e9:e1:16:84:b9:
                    64:f9:f5:75:00:e1:a8:d3:f9:8d:58:b4:9f:94:98:
                    3b:0a:bb:aa:a5:ab:8f:9d:5d:b9:bc:7b:d1:dd:3d:
                    55:7f:94:ef:56:6a:1f:93:02:ab:96:ed:33:ec:aa:
                    57:9f:9d:b1:9e:ff:49:e9:3f:c3:95:74:52:b5:4c:
                    1c:15:92:23:fb:62:ba:7b:9d:ec:fc:e2:bb:bc:35:
                    72:45:56:64:d3:df:89:38:98:df:37:8a:36:f4:39:
                    73:d3:36:87:35:4a:ca:70:b0:19:7f:28:8b:26:95:
                    9c:d1:e4:6e:ce:10:db:af:7b:08:4c:de:39:fe:78:
                    29:33:76:27:eb:68:ba:2b:97:5c:7d:81:d6:19:b5:
                    39:a7:62:9f:c8:d2:f9:e2:67:b8:cd:7a:3d:b3:d7:
                    bd:23:1d:76:1f:3d:24:df:68:a8:91:0b:2f:2a:a2:
                    29:67:29:c4:53:34:94:e5:a0:c1:d3:a4:cc:44:e7:
                    49:09:93:ea:7b:79:b6:5b:af:25:d2:cd:b8:e4:a7:
                    15:32:79:f0:9a:75:30:7f:68:32:29:f0:6a:ff:01:
                    ae:21:a5:90:f8:7b:1c:67:4e:c9:c4:e7:a3:1a:77:
                    ae:4e:94:3b:6a:36:b2:6f:cf:03:ed:3c:df:a4:6c:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:75:48:84:CE:71:C8:D4:86:D4:9F:1F:70:4D:4F:3F:DE:78:A4:69
            X509v3 Authority Key Identifier:
                keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:88:bf:97:7d:7d:1f:60:14:af:b7:d5:96:3f:4b:68:27:
         5f:52:3a:92:80:c6:b4:83:25:fb:6a:d0:ec:63:50:1e:b9:91:
         73:51:a6:db:6b:63:75:92:14:7b:0b:13:35:9b:e0:dc:85:3b:
         13:ea:56:5d:99:3f:4c:66:ea:ce:f4:fd:c5:f5:5d:40:43:75:
         f2:0a:3e:02:b0:70:43:31:01:7c:3c:69:dc:9e:a4:b5:1c:25:
         9e:35:b3:c5:34:d7:53:7a:43:1d:72:9f:bb:92:dc:56:e2:29:
         98:60:7b:0b:01:10:52:69:12:c9:ab:5a:b6:49:65:e7:ad:2c:
         fe:d7:03:2e:15:79:49:31:f4:c6:df:b1:a6:43:4d:55:f9:88:
         5b:20:f2:c3:6d:00:94:67:6e:f4:7e:1a:fc:1d:bc:c2:3f:9f:
         56:43:77:ad:53:94:33:cf:be:8a:cf:e3:e2:67:3c:4d:18:3d:
         11:49:ad:75:71:a0:de:4b:2e:26:6f:90:8f:d2:75:16:72:28:
         47:7e:60:3a:85:37:e2:b8:ce:17:0e:72:20:9e:29:e9:a8:7d:
         72:1f:d6:ec:c6:21:9c:09:f1:68:24:08:75:3d:77:da:93:e2:
         88:31:63:64:e7:24:25:cc:7d:d8:0b:35:19:ef:5d:7e:aa:16:
         0d:b9:4d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2ikWXtHwAt1mRsaiBqrMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjUxMjA3MDIwMDQ4WhcNMjUxMjA4MDIwMDQ4WjAzMTEwLwYDVQQD
EyhhNDc1NDg4NGNlNzFjOGQ0ODZkNDlmMWY3MDRkNGYzZmRlNzhhNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YpDGn0tjHwX6eEWhLlk+fV1AOGo
0/mNWLSflJg7CruqpauPnV25vHvR3T1Vf5TvVmofkwKrlu0z7KpXn52xnv9J6T/D
lXRStUwcFZIj+2K6e53s/OK7vDVyRVZk09+JOJjfN4o29Dlz0zaHNUrKcLAZfyiL
JpWc0eRuzhDbr3sITN45/ngpM3Yn62i6K5dcfYHWGbU5p2KfyNL54me4zXo9s9e9
Ix12Hz0k32iokQsvKqIpZynEUzSU5aDB06TMROdJCZPqe3m2W68l0s245KcVMnnw
mnUwf2gyKfBq/wGuIaWQ+HscZ07JxOejGneuTpQ7ajayb88D7TzfpGxSKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR1SITOccjUhtSfH3BNTz/eeKRpMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIyIv5d9
fR9gFK+31ZY/S2gnX1I6koDGtIMl+2rQ7GNQHrmRc1Gm22tjdZIUewsTNZvg3IU7
E+pWXZk/TGbqzvT9xfVdQEN18go+ArBwQzEBfDxp3J6ktRwlnjWzxTTXU3pDHXKf
u5LcVuIpmGB7CwEQUmkSyatatkll560s/tcDLhV5STH0xt+xpkNNVfmIWyDyw20A
lGdu9H4a/B28wj+fVkN3rVOUM8++is/j4mc8TRg9EUmtdXGg3ksuJm+Qj9J1FnIo
R35gOoU34rjOFw5yIJ4p6ah9ch/W7MYhnAnxaCQIdT132pPiiDFjZOckJcx92As1
Ge9dfqoWDblNKg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:34 2025 by rpki-client