This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          c5alAA/gnvNUV7SqZgXn2RlS14PqjhLZnVP3JvfL3eo=
Subject key identifier:   71:60:EC:EE:91:EB:5C:28:0C:9D:DD:6D:DC:56:13:A7:E8:F0:36:69
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019B2EF97732A6A8018CDDACA8AA016C64F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0E57
Signing time:             Thu 18 Dec 2025 01:00:59 +0000
Manifest this update:     Thu 18 Dec 2025 01:00:59 +0000
Manifest next update:     Fri 19 Dec 2025 01:00:59 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: ePV8TrG4Od84CZz8Wrn7hJLMpBMbQb95nrZxODY5Is8=)
                          2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:f9:77:32:a6:a8:01:8c:dd:ac:a8:aa:01:6c:64:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Dec 18 01:00:59 2025 GMT
            Not After : Dec 19 01:00:59 2025 GMT
        Subject: CN=7160ecee91eb5c280c9ddd6ddc5613a7e8f03669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:d3:fb:71:4b:3a:4e:4a:02:67:ff:3a:4d:
                    9f:7e:f7:25:db:e4:1b:97:9c:56:58:9b:69:ee:0c:
                    0d:66:e1:f0:08:a6:88:09:ea:90:82:8a:60:d7:77:
                    83:31:d4:47:23:39:6f:81:84:77:9a:9b:50:eb:02:
                    e8:fc:d7:75:8a:fa:e3:87:bc:4b:e9:90:b1:48:12:
                    c6:e9:e8:b1:68:61:ff:28:9c:6c:2c:76:1e:f7:67:
                    11:ad:ff:39:18:21:57:81:fb:a5:27:10:eb:e9:d8:
                    73:0b:d1:c4:93:f8:13:19:dd:88:cb:31:fd:5b:06:
                    52:9a:3f:5b:5c:61:01:03:b6:7e:56:21:b3:9e:7a:
                    f9:58:e3:23:4a:fe:b3:17:ac:ed:84:6a:8d:ca:8f:
                    54:85:76:4b:c3:26:31:13:7f:28:ff:ff:0c:7b:52:
                    a6:7b:9a:65:89:96:c6:6f:28:fc:af:c3:40:0d:b0:
                    18:80:60:2d:1b:c4:3e:41:ef:97:7d:e0:e6:b9:1a:
                    a5:d1:01:c0:0b:89:a4:0a:ed:32:34:d5:9f:c5:9b:
                    e3:99:fe:a1:41:c4:8f:ea:80:87:bf:1c:7b:f2:52:
                    7d:96:32:b9:12:92:b8:72:d6:6a:f3:de:e4:76:84:
                    cb:73:4a:cc:af:f2:37:ea:e4:d8:77:16:34:94:9c:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:EC:EE:91:EB:5C:28:0C:9D:DD:6D:DC:56:13:A7:E8:F0:36:69
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:70:73:ed:0c:28:81:ab:38:a4:70:4d:03:55:0a:87:30:
         02:14:c3:59:12:c2:da:61:c2:4b:22:96:e1:76:a3:ce:1d:3b:
         7b:4f:dd:e4:32:21:56:c6:a8:45:03:4a:33:76:0f:c5:60:58:
         d1:f8:2b:2a:97:18:a3:6c:e4:04:64:3c:9c:49:47:ee:b4:c2:
         e3:e4:ab:c3:a2:08:81:8c:13:2d:d2:09:77:87:7c:75:c8:9c:
         ea:00:ae:59:bd:89:0e:3f:a1:21:b6:3d:92:16:28:cf:0f:43:
         49:18:52:8d:ff:62:f1:46:08:26:6d:ea:5b:4a:86:d9:9b:7d:
         b2:6a:1e:64:50:2f:96:61:9d:22:bb:0c:71:1f:9b:01:23:09:
         34:3c:f0:54:45:f1:bd:a2:b2:9a:d5:9c:1e:df:00:68:b6:26:
         c7:13:ce:6e:c1:28:e1:f8:e1:61:78:f3:b1:38:91:22:6c:06:
         0e:e9:45:0c:98:fd:fd:ad:78:82:dc:89:30:dd:9d:73:31:9d:
         0c:e8:e9:ce:f1:ed:84:f7:b4:69:34:53:69:a2:6a:ab:80:d3:
         fe:a1:51:a7:aa:d1:04:65:dd:74:27:e9:85:8c:2b:62:dc:0a:
         5b:99:de:31:de:b3:ce:48:4f:10:da:6f:aa:28:65:dc:8c:62:
         a8:0a:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:04:28 2025 by rpki-client