This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File:                     qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier:          CGuqMm0ZwymXUR1MyTJnfa0WVSrJ51SznrqshryB04g=
Subject key identifier:   70:65:C7:8F:61:E5:73:69:EF:EB:0D:76:11:F6:55:F7:98:D3:76:84
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer:       /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial:       019AF12F485F62EEFE60B66C9EE21AF3CBB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 01:03:19 +0000
Manifest this update:     Sat 06 Dec 2025 01:03:19 +0000
Manifest next update:     Sun 07 Dec 2025 01:03:19 +0000
Files and hashes:         1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
                          2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
                          3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: wi3fjHO/qTBfJ5RFW4zUG3j0nNGUsRonCpHjsZqpfIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2f:48:5f:62:ee:fe:60:b6:6c:9e:e2:1a:f3:cb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
        Validity
            Not Before: Dec  6 01:03:19 2025 GMT
            Not After : Dec  7 01:03:19 2025 GMT
        Subject: CN=7065c78f61e57369efeb0d7611f655f798d37684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:f9:12:86:38:9d:df:f1:34:15:27:b9:d4:
                    0d:b6:71:10:6d:fa:24:24:b6:f5:66:b5:15:83:97:
                    23:2b:3c:ff:ee:41:8e:8c:12:65:97:b2:84:0c:4a:
                    b7:cd:67:88:11:2c:88:51:99:4d:ab:3a:bc:53:ff:
                    6d:2e:d2:f8:08:8e:c0:0d:66:8c:d5:6b:b3:6c:bb:
                    da:a7:77:8f:f1:40:28:a4:03:d4:15:cf:97:1d:f3:
                    fa:4f:2c:18:a4:eb:64:26:90:7b:96:d5:a2:16:62:
                    c5:76:a1:c1:51:2e:12:ed:15:0e:74:af:d8:39:8c:
                    e3:47:85:7f:f2:c6:c4:2f:45:72:dd:8b:cc:99:13:
                    f8:b5:0d:c0:e9:73:f5:a1:a5:1c:c4:8a:f7:01:6f:
                    45:b6:ab:06:5e:18:f3:c2:74:00:57:a3:59:e4:17:
                    92:95:42:fb:40:9c:9b:9c:c1:07:7e:70:cb:5b:be:
                    5a:52:6b:bb:c7:83:3a:eb:fb:92:05:bc:c6:be:58:
                    aa:91:85:8a:12:1e:11:37:f4:c0:ea:da:66:ac:df:
                    e0:48:65:9e:8e:b5:b0:de:67:ec:c5:42:b6:f6:41:
                    59:7b:19:16:c3:40:12:48:a9:04:f4:89:a0:c1:46:
                    ad:a8:94:2b:6a:92:cd:37:37:d5:6e:c4:11:ad:21:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:C7:8F:61:E5:73:69:EF:EB:0D:76:11:F6:55:F7:98:D3:76:84
            X509v3 Authority Key Identifier:
                keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:e5:40:73:94:1c:ec:54:78:76:e4:f1:a7:82:ac:e4:12:
         ff:2c:ba:a1:ba:a3:2f:95:32:1c:23:fe:80:12:5c:9a:fc:40:
         d3:38:7f:7e:c0:dd:f1:ae:31:fe:2e:7d:72:14:51:47:1e:1f:
         61:c2:cf:27:14:e0:7a:ac:2a:cb:9f:b7:fa:b2:8f:eb:43:a2:
         60:f9:f2:45:82:32:41:9b:37:49:29:41:fe:64:b9:3d:3b:7d:
         30:cf:c5:e1:71:3c:9a:04:b4:17:cb:7f:bc:b8:86:5c:ab:e1:
         25:63:17:5c:1e:fd:28:78:ba:c2:f7:2e:e7:16:65:39:11:7e:
         b0:89:36:78:0c:89:22:b1:22:a8:88:d1:bf:57:04:b6:d3:a5:
         40:9c:8e:e4:03:d5:67:0f:a9:6f:a8:88:8e:e1:21:e6:19:91:
         28:4d:b9:9d:1b:e6:b1:72:23:d9:3b:41:3f:27:73:8e:c2:1c:
         2c:02:5c:72:d4:06:ea:4b:2f:62:4b:c1:fe:44:51:ac:b2:38:
         e3:73:0e:f4:59:a1:f7:df:92:8c:d8:ce:aa:6c:9c:77:79:1a:
         24:8b:07:39:98:bf:51:98:af:fa:0c:c7:d4:cd:b1:f9:5a:0c:
         be:59:50:76:b0:5f:d5:0f:10:06:4d:cc:c6:59:5e:fe:8c:1e:
         b5:a5:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:31 2025 by rpki-client