This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File:                     SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier:          C/Z6wQuD76mta6r6HanNzUCg4LtW0/NGtzfgyodAVic=
Subject key identifier:   24:25:93:64:32:9B:1E:6F:53:F9:69:65:13:FF:23:DF:7D:82:0C:3F
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer:       /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial:       019B3EDAF41BFBA5CB5B07A96DAB65998B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number:          178F
Signing time:             Sun 21 Dec 2025 03:01:35 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:35 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:35 +0000
Files and hashes:         1: 1-fO1x-zi8QWRbmjkH4DjBKGyJ98.roa (hash: mvfK7I5z/jAXOStg+IEHlWFuIOiBRl1nmXGrXHhSqtY=)
                          2: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
                          3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: oqgn8i3iEnBubvTahuN1+Y0L9hyUpzA62mKXQEGGDWI=)
                          4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
                          5: jHd0BQzN011_cMoKuI7iRsLMJu8.roa (hash: JjmkBCaZsliO1zFW0zpJ5sroTsscOQWZvCVDg8ArSY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:f4:1b:fb:a5:cb:5b:07:a9:6d:ab:65:99:8b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
        Validity
            Not Before: Dec 21 03:01:35 2025 GMT
            Not After : Dec 22 03:01:35 2025 GMT
        Subject: CN=24259364329b1e6f53f9696513ff23df7d820c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:d4:bc:e4:ca:25:4f:2e:d5:c3:af:4f:11:
                    81:1b:b3:bb:33:36:cb:c2:71:0d:2f:2c:f8:df:e7:
                    5e:85:c8:ab:97:83:67:92:32:46:b1:f2:b9:ee:16:
                    f4:f7:29:fe:48:30:52:6b:31:74:c5:6d:9e:28:4b:
                    7b:31:04:c5:07:f4:93:32:e2:8a:a5:70:d2:ce:86:
                    a1:20:15:2c:74:d1:b3:11:52:97:fc:29:3c:25:32:
                    85:1e:fa:1f:9f:c3:35:01:fa:ae:6f:8f:e8:55:a4:
                    6d:52:2b:d6:54:a5:d0:3b:27:48:ba:74:31:8b:16:
                    40:3c:b6:a8:6e:8d:13:e2:be:6f:99:db:5b:dc:e6:
                    0a:49:0a:55:fb:34:ab:4b:66:6e:c3:eb:2e:49:d4:
                    4a:7f:ac:c1:23:09:e2:e7:a0:e9:03:45:0c:6a:1c:
                    77:49:89:53:06:4b:e2:f5:76:9a:75:0d:9d:17:03:
                    6b:a6:7b:74:03:87:17:2b:bd:ff:fd:09:05:40:0a:
                    8d:7f:29:c6:25:96:30:33:69:d4:ac:e4:ba:5d:10:
                    dc:54:41:21:3f:98:80:53:77:fb:4b:7b:4f:7a:8d:
                    80:12:88:f7:c4:6d:b8:c6:6e:18:0b:2e:02:e8:3f:
                    b4:c6:02:dc:15:a6:27:f4:0b:c7:7f:bb:ad:90:3c:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:93:64:32:9B:1E:6F:53:F9:69:65:13:FF:23:DF:7D:82:0C:3F
            X509v3 Authority Key Identifier:
                keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:99:08:a1:6f:09:09:50:57:50:6c:65:48:ad:23:44:3d:
         9e:a8:7e:d7:16:11:89:fa:44:c2:23:6f:44:ee:7e:64:9a:53:
         7f:36:32:11:ea:e6:82:6d:c9:8d:f4:5e:04:24:14:40:36:2f:
         0b:6d:9d:7c:25:74:7f:ac:43:8e:55:40:33:e0:ed:ab:a9:2a:
         6c:6e:0d:c2:aa:be:60:7c:b1:35:fe:5c:4a:33:9a:4e:ae:d7:
         e3:ad:8b:ee:6f:a7:e3:4b:4e:e4:f9:ba:47:bc:7f:28:d9:48:
         bb:8a:43:8e:65:21:fa:12:b6:19:d9:e4:64:ef:12:9f:fd:b7:
         55:eb:52:59:d1:82:5c:e8:cd:63:be:ac:77:c3:5f:78:7a:00:
         89:98:ef:a6:d3:12:a9:15:f9:63:aa:be:6e:9f:5c:f2:66:f6:
         ad:07:8f:20:6e:94:ee:d8:05:f7:1b:e0:b3:4b:f4:8f:bf:b8:
         da:86:28:ce:7e:6d:9e:74:34:46:b3:81:79:44:5c:c6:d7:50:
         ff:58:61:62:05:34:05:1e:4e:39:37:57:b2:7b:04:17:fd:3e:
         40:a4:ff:95:01:81:fc:e9:f1:87:7a:af:b1:88:7e:1e:35:76:
         d5:19:b4:1d:cb:67:0d:bf:1e:1d:ce:81:04:75:18:3e:72:16:
         c4:ce:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:06:22 2025 by rpki-client