This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File:                     qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier:          RCkZIRgeF6pvcEABqgeiNIAUADySZ5phWg/fMBZGjCA=
Subject key identifier:   54:35:E0:F4:04:1D:ED:9C:EB:B5:EE:59:4E:00:D7:84:09:5D:AF:3A
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer:       /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial:       019AF23FFE8BAE46527819A5239B5E8BD206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 06:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:11 +0000
Files and hashes:         1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
                          2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
                          3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: /oll1tF8yct6vypYPC2MwSz01+6N6ZFRnY4eSYPdw1A=)
                          4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:fe:8b:ae:46:52:78:19:a5:23:9b:5e:8b:d2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
        Validity
            Not Before: Dec  6 06:01:11 2025 GMT
            Not After : Dec  7 06:01:11 2025 GMT
        Subject: CN=5435e0f4041ded9cebb5ee594e00d784095daf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:bb:c4:79:1f:19:48:60:37:4f:6e:f0:e8:
                    18:42:8f:fc:f9:4e:92:bb:3d:9c:a6:92:c8:b2:18:
                    5b:1e:d9:cc:25:63:4a:36:80:43:af:bd:66:6b:f0:
                    41:36:e6:9c:aa:f7:6d:6c:7c:d4:48:24:bb:48:40:
                    00:88:cb:46:b9:03:2a:9d:2a:d1:95:b3:c7:94:7f:
                    97:75:80:79:d1:24:5a:b1:6f:f7:9d:48:34:b2:cf:
                    dc:e8:ac:13:c9:a2:99:b2:08:4c:1b:db:1f:99:b6:
                    72:8b:e1:88:65:79:ca:b9:1f:bc:22:69:8c:34:c7:
                    13:52:af:30:a0:da:25:65:38:08:97:f5:b3:6f:a1:
                    93:23:c4:17:ef:ac:5d:33:fa:94:c3:1d:51:79:3c:
                    f4:44:21:1d:3f:78:5f:25:35:60:94:61:4a:3f:98:
                    84:ce:03:3e:e9:2c:66:37:f3:80:23:a2:97:ea:a8:
                    69:3c:0d:ad:b2:ad:ca:e3:7b:a8:f0:89:87:0b:6a:
                    21:45:12:83:16:32:c6:1a:5f:e5:e1:e4:a3:e2:0f:
                    64:93:bc:71:bf:d5:4e:a2:93:e3:51:4b:83:2a:29:
                    fa:1b:3b:16:7a:85:82:06:09:09:92:a2:0a:28:55:
                    42:a3:22:89:23:06:29:39:56:6c:2c:9f:93:3a:55:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:E0:F4:04:1D:ED:9C:EB:B5:EE:59:4E:00:D7:84:09:5D:AF:3A
            X509v3 Authority Key Identifier:
                keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:6e:3b:11:b9:f0:37:63:51:9c:d1:28:cb:23:6e:7b:b2:
         f7:0b:cc:1f:28:4a:cc:b8:9d:0e:17:29:27:5f:ef:a0:8a:5c:
         14:5f:53:62:43:23:c3:92:af:c8:9a:6f:94:a9:e1:06:88:22:
         dc:2a:a3:0b:11:e4:f3:d7:44:d3:d8:a7:2f:21:94:8a:71:77:
         2c:03:69:1a:83:67:0c:82:26:a0:a1:ec:b9:30:b9:b9:57:c8:
         fc:87:25:c6:90:cd:99:9f:32:c8:fe:cb:6a:e6:d0:38:19:fc:
         f2:36:80:0f:7c:14:0b:9b:40:27:b4:71:2a:47:03:f2:02:98:
         54:18:0a:f4:e7:9d:cb:33:fb:3f:45:1b:9f:12:5e:fe:91:f8:
         76:1c:37:fa:a3:ff:55:93:c2:47:71:ec:f2:8e:20:3a:46:87:
         5b:48:e5:9e:a9:29:84:e6:66:72:cf:64:56:90:41:26:f5:46:
         e3:dd:b1:f8:24:94:0f:0e:e8:fd:50:00:a7:7b:40:7b:ea:27:
         0c:d2:06:e3:10:91:23:39:bc:8c:ff:87:79:6c:48:3f:4a:70:
         1d:7d:8c:6d:5d:98:c7:ed:8d:09:ab:1b:ce:91:f0:ae:93:14:
         01:43:0d:67:b2:57:8b:25:a2:b5:53:20:b8:8c:5e:15:86:75:
         05:02:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:14:47 2025 by rpki-client