This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          0+9TxuUT/eeFJ/WfHnbu5kCBywZ0JbCujA/asUWp24s=
Subject key identifier:   0D:D5:95:9B:0C:18:86:A6:FA:9A:64:34:90:DF:1F:E2:BE:02:4B:87
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019B5D89ABF2419CCCF545CAB0224CBC7E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          0826
Signing time:             Sat 27 Dec 2025 02:01:02 +0000
Manifest this update:     Sat 27 Dec 2025 02:01:02 +0000
Manifest next update:     Sun 28 Dec 2025 02:01:02 +0000
Files and hashes:         1: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
                          2: Maws8YEyVdxee1opqOJPhKHDaJ0.roa (hash: 3jkVCEMHgMdZz+Rg+q0J0AY3s0nEsB/sIVXEup5uCBU=)
                          3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: qM1l7/xMhyxyZPZn0wU/ZEa0EBvtuCaAhetGCkbTPNU=)
                          5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:89:ab:f2:41:9c:cc:f5:45:ca:b0:22:4c:bc:7e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Dec 27 02:01:02 2025 GMT
            Not After : Dec 28 02:01:02 2025 GMT
        Subject: CN=0dd5959b0c1886a6fa9a643490df1fe2be024b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:60:28:fc:e4:16:1c:d7:bf:a3:de:b0:f2:
                    ce:f9:f4:fd:68:98:f3:68:32:a9:3b:38:78:69:f5:
                    93:e9:56:7c:db:95:88:2a:da:a8:c0:55:7e:8c:44:
                    00:bb:ac:8c:d0:67:3e:59:37:ae:74:d6:e0:77:74:
                    3a:a2:e4:11:b6:be:ae:e1:43:eb:8b:68:a4:2e:23:
                    b6:37:bd:08:c6:14:02:d4:af:a8:61:3e:04:b3:98:
                    ba:bb:7b:ab:66:fc:ee:91:fe:a6:85:89:36:c0:24:
                    94:99:da:02:e6:ca:ec:17:3b:cf:7d:8c:30:3b:c7:
                    e0:c7:6e:20:39:48:18:5b:c2:65:d3:09:d0:68:c5:
                    cc:04:e9:fa:46:60:72:21:be:95:f7:84:a8:cc:8c:
                    5d:5d:9a:3a:e6:76:d0:af:58:91:3f:f9:89:7d:a9:
                    22:2e:b8:bf:ef:57:32:11:d0:3c:c6:9d:75:7f:e1:
                    c4:a0:a3:25:b4:11:00:4d:97:f0:68:a5:d9:ed:b7:
                    59:37:ef:5e:e2:85:67:3e:19:37:2d:a8:a7:62:17:
                    ac:18:ce:84:e3:14:88:56:a0:ea:a2:cf:4f:7f:24:
                    1d:db:52:05:df:e5:56:69:45:1a:45:af:fa:85:36:
                    44:cb:2e:34:bf:15:9c:81:84:36:3e:a4:6d:e5:f7:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:95:9B:0C:18:86:A6:FA:9A:64:34:90:DF:1F:E2:BE:02:4B:87
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:5b:dd:fb:53:7d:83:f9:e7:1b:b6:4b:01:d1:2d:c8:c8:
         85:76:fb:f2:62:03:ef:28:91:62:c8:87:86:fc:36:7d:95:1f:
         e4:17:f8:e1:29:ea:6b:1e:b2:75:a7:d2:b1:8e:1f:60:f4:98:
         eb:93:6f:2e:58:5f:42:b0:24:ab:f9:85:a6:1f:e2:2d:1b:a0:
         fa:f8:81:99:fa:02:ac:cf:73:16:ac:96:c8:4d:f6:2b:4a:a5:
         b7:5c:d8:f9:be:8b:38:fd:e0:8d:43:c9:bb:19:37:f2:0b:87:
         f0:d4:38:30:0e:3e:39:1f:c9:9e:10:90:d1:6a:eb:4d:b7:e1:
         62:f6:7c:9b:02:47:73:7a:6b:6b:60:39:b5:93:d4:23:17:5e:
         21:29:f6:77:46:9b:5f:f9:f5:c6:09:46:4d:3e:ca:9e:e8:a0:
         44:8f:24:9f:d6:1d:c9:0b:f0:e5:b3:4c:a5:0a:90:2f:fa:f0:
         16:25:d8:4c:b2:ac:a6:89:d3:1c:32:af:28:81:a8:cc:db:39:
         67:1b:2f:2a:83:54:c7:cf:a8:59:81:23:92:9b:21:4b:b2:64:
         f3:9a:95:23:8e:11:a7:51:e5:0f:db:9a:0a:bf:a5:a6:62:37:
         de:4a:8c:12:68:25:0c:92:48:ff:7b:1e:50:32:4f:03:e3:e8:
         b2:5b:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:15:43 2025 by rpki-client