This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          LSQpYwYebAVLSwfO1m02/TTwnKSxerXON4jywqepWdE=
Subject key identifier:   91:DD:8C:3A:4F:E5:F5:46:89:8E:B6:78:A2:E4:5F:10:95:DB:F3:01
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       019B544F5C695E7A7BD340D59070F3D9EE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          1798
Signing time:             Thu 25 Dec 2025 07:00:45 +0000
Manifest this update:     Thu 25 Dec 2025 07:00:45 +0000
Manifest next update:     Fri 26 Dec 2025 07:00:45 +0000
Files and hashes:         1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
                          2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
                          3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
                          4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
                          5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: 6D3vxtY8fzsbLXTQMCJQg1KsyR999vStSGjOpYtQl8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:54:4f:5c:69:5e:7a:7b:d3:40:d5:90:70:f3:d9:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Dec 25 07:00:45 2025 GMT
            Not After : Dec 26 07:00:45 2025 GMT
        Subject: CN=91dd8c3a4fe5f546898eb678a2e45f1095dbf301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:44:b4:9b:ae:62:e6:ac:31:30:56:0f:d1:
                    2a:d2:38:e6:1c:a4:be:8e:91:14:15:27:5a:c6:e5:
                    13:be:cd:6c:df:fb:37:72:07:e6:3e:0d:d8:35:a5:
                    d7:d2:43:fe:8d:2d:71:fe:cb:4f:6a:a7:4a:76:84:
                    60:dd:6f:f7:29:44:12:07:48:9e:6a:66:91:6c:d1:
                    6c:c3:83:0b:4f:11:78:5f:dd:92:d7:1f:e8:e5:7a:
                    25:8a:6c:56:54:4f:c0:07:79:88:b0:f1:39:94:91:
                    01:aa:77:a6:18:3e:1e:04:4d:3a:b6:50:64:f0:59:
                    fc:45:94:21:0a:e3:dd:6b:00:5e:3f:1b:ad:20:86:
                    9e:4d:56:92:4e:1a:21:85:f0:88:73:b0:b6:cc:b0:
                    23:e2:ba:a7:59:ed:88:01:03:b0:d5:7a:7a:03:82:
                    97:b6:c4:72:53:0f:e7:73:57:6e:99:fd:4c:38:2e:
                    29:36:fc:21:ac:4c:4c:b2:2a:a3:1f:6f:bd:40:c6:
                    31:02:41:98:d1:fe:4c:c3:ef:a8:7a:d8:e4:32:14:
                    11:d4:ed:f8:78:e4:96:d7:5b:5f:6a:e4:43:92:19:
                    44:b1:f3:87:68:3d:80:92:43:c4:a0:0d:ca:00:3d:
                    77:d9:fd:f4:d0:fa:6c:9f:e3:a5:d7:00:f2:05:f2:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:8C:3A:4F:E5:F5:46:89:8E:B6:78:A2:E4:5F:10:95:DB:F3:01
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:fa:47:15:d2:1d:96:7b:54:1f:d9:c0:a5:22:03:7c:f5:
         54:3c:7e:d2:48:93:8e:b2:32:1c:27:bd:2d:18:89:8e:e7:47:
         a5:e7:1d:39:ba:e1:97:73:21:86:3d:94:47:19:f0:73:c2:15:
         0a:63:87:51:2c:5f:7f:c5:1d:31:d3:ed:d7:56:21:23:95:4f:
         e6:34:60:68:2c:d8:d1:f4:dc:cb:29:9f:b5:25:19:fd:1f:c6:
         79:4f:a6:42:71:e5:d8:b8:f6:ee:52:54:7f:4a:4c:04:ba:37:
         c2:d8:56:46:ab:26:57:45:a5:14:3c:8e:dd:56:8e:c4:9a:bf:
         f6:ae:a1:ed:81:f5:59:43:aa:cc:f8:b9:30:a2:aa:00:90:44:
         05:8a:c7:65:b5:00:b3:7a:4e:4c:e4:99:75:14:fb:7f:fe:25:
         f5:24:23:4b:e8:e0:40:c8:01:46:f2:46:05:f2:26:ad:6e:76:
         86:17:ea:9d:80:7c:47:e8:6a:02:ea:56:94:12:6d:5d:a6:22:
         5c:dc:dd:29:cc:dd:08:70:f9:eb:86:a6:ab:c3:e0:ca:a0:cc:
         72:d3:e0:cd:ad:b4:f6:ff:10:e6:ee:fb:e9:67:66:9a:06:43:
         f3:81:89:58:e7:d2:63:8d:5c:6c:6c:58:6e:0d:12:00:15:10:
         e0:71:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 08:24:32 2025 by rpki-client