This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File:                     qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier:          Qbb6djhv38kOSDiWWNnLrzJIkHBDR5aUWNaPay6vh3A=
Subject key identifier:   C8:55:45:47:A5:A4:CB:D8:CD:13:EB:37:36:61:FB:FC:CB:C5:73:A5
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer:       /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial:       019B30E799CEE062AAF974B5FEF1DD23C53F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number:          0286
Signing time:             Thu 18 Dec 2025 10:00:43 +0000
Manifest this update:     Thu 18 Dec 2025 10:00:43 +0000
Manifest next update:     Fri 19 Dec 2025 10:00:43 +0000
Files and hashes:         1: Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa (hash: nTo01f8ApBndo/Q3i+Hin7sdaSsD+w4jDKQkdIBQYN8=)
                          2: VQTERXSGwf3PUhsSzRfJoMTCwIY.roa (hash: lyGgo91yoGwj1wHvWPvFSRN7NQx8IOKDi7RMWMy4Vw0=)
                          3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: 8paRS0c0zILVuagGhLq2A//RQmOsOPdTHoq0DSzTtb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e7:99:ce:e0:62:aa:f9:74:b5:fe:f1:dd:23:c5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
        Validity
            Not Before: Dec 18 10:00:43 2025 GMT
            Not After : Dec 19 10:00:43 2025 GMT
        Subject: CN=c8554547a5a4cbd8cd13eb373661fbfccbc573a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:da:67:fe:e3:ff:1f:dd:54:08:b6:ea:bf:
                    8c:8e:9e:c8:e8:bc:93:9d:99:54:d3:fe:b9:4d:11:
                    6e:08:fd:10:56:5d:70:4a:55:2d:bf:e8:f8:ec:9a:
                    2c:34:90:56:f5:e7:59:99:94:7c:37:8e:44:72:e8:
                    41:62:df:b9:13:c0:0a:49:8e:cb:08:7c:ef:2c:c7:
                    f9:00:60:29:7c:e1:b5:9e:83:1e:d3:30:a2:7c:f3:
                    8e:16:5c:cb:d9:3b:d1:13:d5:df:0b:4b:b2:4f:48:
                    24:9d:92:1e:b7:0e:75:40:d6:4d:10:05:ad:4a:b2:
                    9b:db:e6:78:38:e4:65:bc:64:8c:22:7f:1d:56:75:
                    39:d7:fd:73:d9:33:80:5d:4d:5b:3c:6e:87:89:c5:
                    12:be:83:22:ad:26:ef:72:68:b6:3d:8b:0c:75:b5:
                    27:e0:67:88:3f:73:3b:02:2b:ae:b5:a2:b7:f9:f4:
                    c3:ae:9c:65:a5:ab:79:90:4a:56:92:09:21:2c:11:
                    e0:75:9d:60:18:2b:a0:3e:36:56:80:f4:96:68:09:
                    62:1d:0e:91:ac:75:c7:29:dc:13:e8:24:32:29:f0:
                    9a:5c:eb:9c:ec:fb:6d:51:77:74:d7:e3:66:36:45:
                    c8:4f:a6:c3:05:ee:36:5b:a7:8c:5f:a3:fc:cd:29:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:55:45:47:A5:A4:CB:D8:CD:13:EB:37:36:61:FB:FC:CB:C5:73:A5
            X509v3 Authority Key Identifier:
                keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:f8:07:22:ff:44:bc:60:bf:ba:73:63:24:be:22:0d:5d:
         7a:24:b5:3d:12:ae:c5:35:13:8e:bc:2f:18:82:ad:77:9b:1c:
         9e:c7:bc:7f:b6:07:97:8b:8e:fb:cc:76:60:c4:2a:ac:15:2e:
         ba:e7:eb:f1:34:a6:54:48:09:99:90:7e:34:e3:80:6c:78:61:
         ad:19:5e:4a:01:8a:24:f5:67:7c:07:66:84:46:bc:4d:87:0d:
         da:22:85:54:18:5e:68:10:26:81:63:e1:30:ef:b8:2e:80:59:
         da:08:35:8e:e0:85:42:14:3e:03:3a:d2:cf:4f:8f:f7:e8:22:
         c8:1b:07:12:bf:91:3e:8d:ec:77:63:38:f9:f7:d6:fc:02:07:
         8b:63:1a:6d:e1:06:e0:44:d0:15:62:bd:12:ea:e8:fb:af:71:
         3e:46:9a:b4:77:2d:d7:1f:d3:2d:67:9e:8f:18:7e:da:9c:6a:
         89:0a:b2:2a:a4:99:f7:a7:33:47:5b:19:56:f2:86:21:65:7c:
         bf:a6:36:66:bd:8d:87:a6:aa:f6:56:ec:f2:5e:c0:39:a9:a4:
         0f:5e:60:6e:00:43:ec:de:dc:ba:fa:34:39:49:dd:fe:e2:9e:
         d2:3f:37:1f:a9:bf:f1:bc:43:83:94:93:de:7d:18:d6:fa:b1:
         02:22:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:32:01 2025 by rpki-client