This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File:                     qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier:          XPONU7ooPIrnZd05pIv0N4i++BoZfwU/GxAhByPk49o=
Subject key identifier:   62:08:27:A9:1D:31:41:0D:CA:04:A0:79:F5:2C:19:D8:F0:55:A8:78
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer:       /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial:       019B39EB0751746A9D78489C714B78ACE5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number:          1787
Signing time:             Sat 20 Dec 2025 04:01:02 +0000
Manifest this update:     Sat 20 Dec 2025 04:01:02 +0000
Manifest next update:     Sun 21 Dec 2025 04:01:02 +0000
Files and hashes:         1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
                          2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: a25VlwxZYR5lDHaVN1g3qDLurIz233JB4a2dz295wRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:eb:07:51:74:6a:9d:78:48:9c:71:4b:78:ac:e5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
        Validity
            Not Before: Dec 20 04:01:02 2025 GMT
            Not After : Dec 21 04:01:02 2025 GMT
        Subject: CN=620827a91d31410dca04a079f52c19d8f055a878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:b2:44:cd:0f:26:95:43:77:f1:ac:93:b6:
                    06:55:2b:63:88:d9:bc:75:9d:75:de:81:00:9c:cf:
                    c9:fb:9d:6b:d3:db:c0:b8:94:e8:08:d3:74:d6:b1:
                    e8:bc:fa:e2:06:4e:21:cc:d6:6a:1c:a4:60:88:82:
                    83:7b:39:cb:bc:4c:c8:ef:6c:2e:65:02:dc:dc:e2:
                    a4:17:68:17:d2:74:ef:d6:b4:b2:a9:42:dc:44:64:
                    0d:37:a5:0c:09:cf:c1:90:0e:f1:ef:fd:cf:7d:1a:
                    c8:b5:68:2b:57:94:46:5c:62:c0:3c:74:74:c7:25:
                    17:72:c9:97:35:a6:cf:fe:66:22:5c:8d:73:2a:a6:
                    70:12:5a:ff:24:c1:8e:e4:aa:87:6f:1e:9e:57:e8:
                    63:4a:d3:1d:03:e7:4c:90:83:5c:b2:7d:72:f6:7b:
                    5c:ef:f3:07:3f:d2:6a:4a:1d:2e:df:2c:fd:5b:f0:
                    ff:d1:9f:75:6c:0d:d2:3b:ae:db:b1:b4:e8:ff:63:
                    ff:d3:9b:8d:07:90:91:d7:2f:2f:af:6c:99:0c:e4:
                    d9:0d:a6:84:6a:f5:b9:0e:de:22:0a:92:63:09:64:
                    8b:14:89:22:e2:3b:76:f7:17:6c:df:dd:50:64:5e:
                    f0:8e:2d:89:59:d2:a9:73:47:42:5d:d5:f4:6f:5c:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:27:A9:1D:31:41:0D:CA:04:A0:79:F5:2C:19:D8:F0:55:A8:78
            X509v3 Authority Key Identifier:
                keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:71:9e:c3:26:10:41:13:37:91:bd:9b:c5:05:1f:dc:54:73:
         84:fe:a3:d9:49:a7:f4:bf:2c:46:f7:1b:91:05:84:86:b9:9f:
         f2:8c:23:06:45:fb:7d:26:17:2f:5e:62:72:db:0e:6b:74:c4:
         27:aa:58:ee:57:c9:9d:ee:12:93:18:11:9f:61:d5:58:dc:7d:
         cb:ab:ac:fb:42:91:a8:c8:0a:bd:da:f5:2c:6d:a2:3d:f5:88:
         dd:e5:10:c0:3d:e3:f6:15:70:c7:02:35:19:17:ce:f0:43:a1:
         cf:6b:89:9c:1b:7e:98:03:47:11:5b:37:25:34:c4:6c:99:1b:
         17:20:c3:26:d6:ec:92:9c:9e:cb:ed:30:25:17:d8:b2:59:01:
         ed:2d:a4:26:c6:9e:1d:4b:9e:7e:f5:90:cb:b9:0f:6b:87:bd:
         58:2d:aa:4d:4e:ac:0f:48:8c:23:14:88:84:e7:33:d4:19:c3:
         27:6c:86:4b:70:71:0f:22:5d:11:52:51:15:d1:47:28:c6:39:
         82:28:e0:28:5a:93:54:95:8e:d9:e3:d8:06:a2:e1:ea:25:12:
         9e:a6:d9:a6:f9:76:d6:44:1d:eb:6e:91:52:c2:64:4e:64:b2:
         58:aa:e0:55:09:b3:ec:4a:8d:6d:ef:64:2d:c7:54:8a:11:3c:
         f0:33:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:19:46 2025 by rpki-client