This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          jJoP3Z032FvKzIw3EnBoKiLVY+rG7IIkY0p1cBmyoss=
Subject key identifier:   45:3B:31:E6:FE:D1:3A:E2:EB:F4:A0:B2:BC:07:2D:4A:92:B6:44:B3
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019B36E9FC62E336E480D19C4BBF57576116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          0812
Signing time:             Fri 19 Dec 2025 14:01:02 +0000
Manifest this update:     Fri 19 Dec 2025 14:01:02 +0000
Manifest next update:     Sat 20 Dec 2025 14:01:02 +0000
Files and hashes:         1: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
                          2: Maws8YEyVdxee1opqOJPhKHDaJ0.roa (hash: 3jkVCEMHgMdZz+Rg+q0J0AY3s0nEsB/sIVXEup5uCBU=)
                          3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: yb/THMhU8qJzO2q2I2zkCjn51RdrCXKbdyuQ0WaSCjU=)
                          5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:e9:fc:62:e3:36:e4:80:d1:9c:4b:bf:57:57:61:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Dec 19 14:01:02 2025 GMT
            Not After : Dec 20 14:01:02 2025 GMT
        Subject: CN=453b31e6fed13ae2ebf4a0b2bc072d4a92b644b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:87:e9:b8:78:2e:bf:4f:b5:3a:38:18:37:
                    e3:a5:18:8c:57:2d:ec:ae:c9:0e:59:ef:b5:f6:da:
                    56:e8:15:d7:8b:34:61:fe:56:10:29:e1:d8:14:42:
                    85:90:b9:73:38:c0:98:e7:b4:56:78:db:b3:09:9e:
                    35:9d:d0:b2:b9:e0:dd:22:69:ca:ae:5d:c9:f2:28:
                    94:75:37:0d:d5:d5:03:09:84:b3:1a:da:e5:b5:48:
                    df:a9:89:d9:57:c0:f8:5e:32:92:9c:bc:e2:5f:d7:
                    19:75:a7:a7:9f:ee:78:db:9a:48:53:2a:d1:95:c0:
                    0b:00:d4:a4:42:57:9a:5a:c7:89:ba:5c:78:6b:d1:
                    6a:88:02:c6:f6:0c:f3:ba:32:32:b9:42:42:a9:7d:
                    36:90:73:be:d3:08:28:ff:5d:78:ae:4b:c9:6c:2b:
                    48:7e:f8:43:7a:d4:da:9c:5d:b4:59:94:0b:0a:e2:
                    01:cc:54:f2:59:72:a2:7b:ea:de:2f:f4:b2:ad:43:
                    d3:31:b5:8a:33:01:7a:f3:ba:a3:c4:22:bc:f9:5e:
                    1b:08:0d:b6:c5:7e:fa:f9:e6:8c:a6:b3:1d:5d:a3:
                    5f:14:55:10:ad:64:32:45:66:7e:0b:7d:85:cd:b1:
                    51:c6:07:25:92:a0:9d:b2:30:f6:b6:ae:54:51:ce:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:31:E6:FE:D1:3A:E2:EB:F4:A0:B2:BC:07:2D:4A:92:B6:44:B3
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:48:8f:2a:a4:54:28:61:d4:01:3e:45:87:ee:1f:30:3f:
         ac:73:6a:d7:c8:d5:9a:e4:bf:58:f0:4e:a5:af:fa:15:a1:1f:
         4b:50:0f:1f:ef:69:35:69:bf:6a:ed:91:1c:5f:ee:ae:d9:e7:
         4d:cc:7b:ea:53:41:fa:b3:99:26:8b:80:55:c9:bc:73:ef:03:
         c4:85:98:8b:0e:18:fd:50:2c:4b:b9:50:99:de:5e:03:35:38:
         b4:8c:83:8f:96:7b:c4:4e:3a:02:25:ef:a7:9c:e0:5b:03:e6:
         27:90:fd:b2:c5:7c:04:2a:19:ed:4e:e1:8c:dc:5b:d8:16:93:
         d2:8d:bc:77:dc:34:00:e6:d4:c9:37:62:05:7f:47:35:99:64:
         8d:ab:0f:71:8e:fe:2e:af:63:43:ac:0f:74:e9:a5:ae:6e:9a:
         d9:80:06:4a:a4:8f:23:90:9d:0a:16:74:f8:28:ef:34:ed:37:
         16:88:47:09:dc:b3:6b:a7:4e:61:df:eb:04:df:dc:0e:db:a9:
         63:c6:bd:c3:0a:90:52:0e:fc:53:7d:f5:8c:f4:d7:7f:27:c0:
         bd:aa:b9:69:8b:ec:8c:cd:12:fc:2e:03:ff:88:77:f3:5b:cc:
         43:a0:ce:68:5a:ee:a9:8c:cd:80:cb:0e:5c:e1:92:27:c9:30:
         fa:e3:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:59:52 2025 by rpki-client