This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File:                     Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier:          9idRYEVyOkFZIohcTDhpcr/UmkPnt1nfrfcAHGEvWN0=
Subject key identifier:   03:7F:6B:4F:1C:4A:7E:21:23:F5:4A:99:F6:01:23:58:49:D7:F1:19
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer:       /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial:       019B3A901F2D7912DA0F307EFFB16FCC0330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number:          0630
Signing time:             Sat 20 Dec 2025 07:01:22 +0000
Manifest this update:     Sat 20 Dec 2025 07:01:22 +0000
Manifest next update:     Sun 21 Dec 2025 07:01:22 +0000
Files and hashes:         1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: 6Hw4/k3L3gZKMljB/ECl6xJCzK75h07FPqymuZNDMRo=)
                          2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
                          3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:90:1f:2d:79:12:da:0f:30:7e:ff:b1:6f:cc:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
        Validity
            Not Before: Dec 20 07:01:22 2025 GMT
            Not After : Dec 21 07:01:22 2025 GMT
        Subject: CN=037f6b4f1c4a7e2123f54a99f601235849d7f119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:af:ac:2d:f3:80:1d:e5:32:f2:05:4c:71:
                    58:71:e8:07:49:da:6c:63:40:62:79:4f:21:0d:6b:
                    96:c6:21:f4:c3:89:41:f2:22:ee:a5:7b:ea:93:3f:
                    a2:4a:a2:38:73:8d:ce:45:ea:5b:87:6a:9e:b1:7d:
                    91:8e:41:23:df:b2:f9:5b:af:fa:f1:73:80:97:18:
                    04:5c:41:5c:fe:b2:38:21:1a:79:53:f9:76:02:68:
                    b1:91:69:52:53:78:d9:4e:ba:c3:91:2c:2f:3e:5f:
                    a8:be:7b:17:16:8f:f7:c1:3b:9f:c7:7d:76:b6:4e:
                    b3:7a:b7:9e:8c:ec:ca:cd:8f:4e:91:4f:9e:12:e4:
                    e1:41:73:ae:fb:b7:1d:0f:52:4f:77:40:c9:28:06:
                    23:e6:b7:64:d6:6d:65:e3:3f:3b:e0:7c:66:ac:d7:
                    94:36:31:08:20:25:66:38:a7:9b:1b:66:77:c7:44:
                    93:73:02:02:d2:f8:bc:f4:c6:0f:9c:7e:75:3a:e7:
                    50:ab:d2:cf:a6:83:52:5f:37:cb:ad:e3:94:67:19:
                    59:13:aa:13:60:10:e4:35:62:8d:f6:cb:6c:c9:2d:
                    61:df:05:2d:9f:c8:25:bb:c8:60:0b:2b:3d:27:0b:
                    49:88:db:b0:f1:20:03:df:9a:27:e8:1d:ef:c3:e2:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7F:6B:4F:1C:4A:7E:21:23:F5:4A:99:F6:01:23:58:49:D7:F1:19
            X509v3 Authority Key Identifier:
                keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:22:b7:5e:fe:c0:ec:ab:67:66:66:c4:a3:3a:90:60:9b:72:
         a1:cc:17:d4:9e:d1:25:e7:66:2d:8c:ae:b6:8a:92:56:01:79:
         1c:b4:be:08:21:f4:fd:ad:86:b8:89:69:9a:09:a3:c1:49:a6:
         01:46:23:fc:8e:5a:d2:dd:a1:c1:84:f0:51:c4:47:7c:bd:7a:
         3b:fc:bd:ea:5a:08:89:4c:db:d8:26:94:22:cb:16:56:be:6a:
         c8:30:cd:06:90:e4:f7:25:8e:44:26:4b:cf:5f:9d:e4:ed:3a:
         e7:c0:01:79:9b:8a:5e:43:9e:91:20:f3:a3:f2:92:4e:c7:23:
         f4:47:cb:11:d2:c0:aa:a2:74:ab:9b:a4:cb:50:fa:4c:c5:17:
         d2:32:3e:b7:39:90:87:ad:44:b9:18:15:5e:05:69:48:c6:1b:
         bd:38:2e:8f:33:8e:05:21:38:74:70:c8:fb:b2:aa:b3:bf:ad:
         9e:4b:56:cb:8d:ea:5e:9a:c0:95:3f:46:1b:3a:be:36:c4:0e:
         64:f4:18:05:b6:9e:eb:e2:d1:45:b2:a6:5a:84:7c:d3:26:19:
         7a:d8:aa:8f:1b:9c:b7:b9:a6:b8:33:3d:85:8b:b6:f6:b2:c6:
         33:68:b6:4d:fe:e5:2b:f6:ef:6f:11:61:70:c5:fe:c2:03:71:
         99:28:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:17:57 2025 by rpki-client