This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          cdyVZsojQt5FwqBviPvn9uR3ba+skMajFGGCqdEKRHI=
Subject key identifier:   B2:40:1A:43:B3:A0:19:A5:0D:0A:3C:E7:8F:2E:4C:75:CE:16:59:06
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       019B4D3ACDB5F14E8FE8E6D4EE6ABF986566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          1793
Signing time:             Tue 23 Dec 2025 22:00:57 +0000
Manifest this update:     Tue 23 Dec 2025 22:00:57 +0000
Manifest next update:     Wed 24 Dec 2025 22:00:57 +0000
Files and hashes:         1: LQ0UyMo_r23ofQXV0yOGIa-qTpo.roa (hash: X9yChjYALTQXRzmOEi06/C9TIxnvZMLcDXd49hI5SlU=)
                          2: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: 9Bg1HpliXWjZs+EqngbmJb+mD7vSDGhUC2zYDtliimI=)
                          3: V4NStAxIHPoKlH9zYaeCMnj4Ybs.roa (hash: zru3fwuo+uqUUUD/Tt2lqSQeSGF743mnPFfJFNfb2jE=)
                          4: jGS8snyePsO074NpCXFdKhJggqU.roa (hash: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=)
                          5: ozDjJHd9lXLwxWrh2-jEN6PSQCE.roa (hash: XvQpiFDaAcngQACRfFy22wGd5bIod9LIooAabJeDAzg=)
                          6: wOE4JPTIGJlAFi9Bt4Todp1oTNs.roa (hash: XvGJnBOc7q3iGCoEZmt4SjrH7do6eadl4QVxex68LpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4d:3a:cd:b5:f1:4e:8f:e8:e6:d4:ee:6a:bf:98:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Dec 23 22:00:57 2025 GMT
            Not After : Dec 24 22:00:57 2025 GMT
        Subject: CN=b2401a43b3a019a50d0a3ce78f2e4c75ce165906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:24:56:80:72:49:71:db:f2:2f:c4:cf:28:
                    9a:58:c6:1f:67:a2:8b:7c:54:68:06:a5:7c:84:3d:
                    e9:f1:91:b2:b5:8f:32:90:29:9f:7a:08:c5:ef:db:
                    8e:68:1c:1b:25:66:70:bb:54:82:cf:05:96:8d:cc:
                    7f:1d:44:84:5a:61:a7:50:4d:3a:ff:c9:8a:ff:9b:
                    6b:33:49:f2:b9:74:02:09:d3:14:9d:74:ab:39:db:
                    5f:b8:68:9a:bd:05:44:17:ea:bc:11:bb:c3:08:c4:
                    70:10:b2:47:d0:2a:ec:a8:cc:3b:1f:60:25:86:51:
                    62:af:ff:3f:a0:42:ea:65:4d:5a:35:e5:e5:eb:5f:
                    f5:84:14:bc:8d:80:ff:1a:56:05:c6:69:bd:fa:81:
                    bb:32:97:d1:6d:b1:9f:8f:7a:0e:e6:71:2b:6e:64:
                    86:0e:c1:43:6f:22:b9:87:28:16:da:03:14:7a:e5:
                    0b:5d:26:09:4a:46:d5:c7:8a:7d:1a:9f:9c:17:73:
                    d5:e6:5b:d2:27:89:af:a7:03:76:15:61:a2:71:7e:
                    21:43:ec:fd:7b:ed:22:72:7b:3d:82:fe:ff:bc:68:
                    cb:32:d8:0d:a1:d3:73:92:df:76:34:8f:b1:20:a9:
                    d8:33:7b:55:6c:fe:35:d8:04:ae:77:91:03:73:57:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:40:1A:43:B3:A0:19:A5:0D:0A:3C:E7:8F:2E:4C:75:CE:16:59:06
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:6a:22:e6:fe:c6:fd:bf:80:30:9f:7a:e0:22:40:5c:83:
         d1:ec:f9:16:95:87:66:00:84:ed:c4:c9:51:a0:57:13:36:ec:
         d8:c4:71:66:d8:b6:bb:1e:9b:cc:e5:ac:8f:56:6d:ca:2b:c9:
         2e:03:44:5d:c8:06:01:d4:6a:55:a3:12:91:78:1d:45:05:c9:
         5a:de:ef:a5:4f:03:41:08:59:8c:fe:e2:81:a8:55:c3:da:98:
         2b:2b:a1:d1:27:41:5e:43:69:14:42:77:c9:69:2f:a6:51:36:
         26:45:a7:a0:2b:40:06:5f:4f:6b:57:3f:de:b7:86:43:1d:08:
         9a:d8:80:57:99:49:e7:94:82:4a:08:74:42:12:30:72:d0:d2:
         a2:cf:32:c5:5a:ba:40:7b:3a:a1:04:cb:81:ae:cc:b2:58:25:
         40:ec:cb:fa:ba:12:5b:49:cb:89:70:75:7f:cc:e8:e0:46:17:
         21:52:fb:77:57:ea:bd:27:a3:d9:f0:86:bf:f7:39:32:3a:09:
         f6:8f:22:5b:29:12:9b:38:37:22:b5:c8:07:b6:e0:38:a4:b3:
         cf:9a:b4:7e:a8:78:4b:6b:d9:8e:2c:0b:9c:86:c4:8e:e6:f4:
         ad:96:db:fd:56:a4:6d:a1:83:f8:e7:0d:f6:b6:c2:31:46:f8:
         95:ca:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:58:25 2025 by rpki-client