This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File:                     QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier:          Japafw0ThXEEYBx2IZb68Eg4v0Svxm/0pQQH3o2oEZ0=
Subject key identifier:   B3:D6:C0:F7:4D:74:E2:C9:F3:D1:29:1C:B4:02:F9:BB:0D:3F:BD:4E
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer:       /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial:       019B2C6618C6A8200DDC79489AA5C7E779AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number:          1552
Signing time:             Wed 17 Dec 2025 13:00:47 +0000
Manifest this update:     Wed 17 Dec 2025 13:00:47 +0000
Manifest next update:     Thu 18 Dec 2025 13:00:47 +0000
Files and hashes:         1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
                          2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: 4GBAIAE12yup4xkKsv9exNTkUV8Ms7MX5b/QjvtgjOA=)
                          3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:66:18:c6:a8:20:0d:dc:79:48:9a:a5:c7:e7:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40254d4a767ad099606e442e092f91241a363670
        Validity
            Not Before: Dec 17 13:00:47 2025 GMT
            Not After : Dec 18 13:00:47 2025 GMT
        Subject: CN=b3d6c0f74d74e2c9f3d1291cb402f9bb0d3fbd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:b1:3c:98:3e:1d:33:60:8b:7d:67:19:e5:
                    c3:f5:15:f1:fa:31:52:66:d5:97:c6:0e:eb:b6:77:
                    f0:1a:bd:3e:0c:23:88:d8:ea:ac:29:d1:1b:94:dd:
                    41:17:66:4b:0f:5f:c5:68:02:4e:4a:d2:ea:6f:b1:
                    4f:67:52:7f:89:2f:34:fa:d1:87:e5:8e:f6:e7:24:
                    54:24:bd:71:6d:0f:8e:22:9b:31:ed:54:b9:d1:29:
                    5a:a7:ca:9f:af:98:0d:c5:0d:cc:60:62:53:72:8b:
                    fb:d6:d8:ae:93:79:6e:a6:c7:90:b9:33:e7:66:98:
                    c8:2b:e1:4f:6f:13:84:93:76:49:05:ee:bf:01:64:
                    57:3e:bb:53:76:66:68:05:aa:47:fa:a5:54:77:48:
                    be:50:3f:38:8b:fb:8e:50:2c:00:74:29:14:28:40:
                    cb:bb:fc:8c:79:9e:ac:96:23:91:16:f9:4d:68:20:
                    77:c9:f9:a9:1e:aa:c9:23:56:a6:0c:cb:a6:0b:0c:
                    10:9f:d7:cf:38:9d:c2:f3:30:39:21:45:39:d3:ca:
                    33:9e:67:f7:aa:19:be:38:a6:9d:ce:28:27:6e:56:
                    5c:e3:df:c4:d4:3f:69:c2:f6:e3:e3:f3:49:9c:47:
                    5e:6d:cf:f7:df:ea:0a:3b:de:58:9a:48:10:8e:ad:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D6:C0:F7:4D:74:E2:C9:F3:D1:29:1C:B4:02:F9:BB:0D:3F:BD:4E
            X509v3 Authority Key Identifier:
                keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:68:f8:04:32:14:b2:a4:82:66:91:22:aa:55:5c:f7:ef:
         04:8f:cf:25:24:8b:33:83:2e:8d:89:1d:63:8d:2c:5d:55:de:
         4d:50:3d:9c:66:88:12:8f:34:dd:69:60:b1:2b:ee:df:9f:5b:
         0c:21:0d:f1:22:60:cc:17:f2:7e:0c:63:9c:1f:00:37:e5:52:
         2d:ed:4a:e8:d9:b8:3e:99:bc:62:97:a8:ba:aa:f4:3f:db:2d:
         4f:fe:af:07:64:c3:0a:45:54:73:90:cd:f2:a3:18:de:fe:f0:
         01:b1:64:7a:cb:f2:29:c6:86:51:70:8a:42:2e:fe:77:7e:99:
         b8:6d:7b:44:ae:fd:f1:1e:8c:17:c1:c8:76:03:fc:42:bf:78:
         bb:a2:b4:d5:2c:73:8f:36:b3:50:92:a2:d6:03:38:55:2a:c1:
         29:07:66:d5:e9:16:bb:54:0e:59:7c:db:f8:03:e4:5e:02:cb:
         b3:d6:48:c4:1a:47:57:23:84:33:94:42:df:b3:b8:06:51:45:
         50:2f:be:2a:6a:d2:f1:86:fc:4c:33:20:52:53:1e:99:4d:72:
         0e:3b:d2:05:10:49:d9:90:29:56:40:35:5e:58:fc:10:c6:d5:
         8c:f3:23:6e:70:f0:5a:0d:1d:db:f2:60:90:d4:96:1d:b4:61:
         54:36:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:07:11 2025 by rpki-client