This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File:                     QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier:          52KxYD9753YYjGAxXLZaX0AYAJ1tkgOgus2syARsuBo=
Subject key identifier:   D8:D7:1E:80:52:45:16:D1:61:BE:39:84:0F:FF:9D:60:CE:B4:58:57
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer:       /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial:       019B2889E556405D23780030F5232DFE5D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number:          0CDA
Signing time:             Tue 16 Dec 2025 19:01:24 +0000
Manifest this update:     Tue 16 Dec 2025 19:01:24 +0000
Manifest next update:     Wed 17 Dec 2025 19:01:24 +0000
Files and hashes:         1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: alMaBgI+rDNgewBRSJTUXZiJUBFc0gQgXeDSMWjIP1g=)
                          2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
                          3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:89:e5:56:40:5d:23:78:00:30:f5:23:2d:fe:5d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
        Validity
            Not Before: Dec 16 19:01:24 2025 GMT
            Not After : Dec 17 19:01:24 2025 GMT
        Subject: CN=d8d71e80524516d161be39840fff9d60ceb45857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:e7:f8:e1:3b:5f:03:c5:4c:6c:8d:a8:23:
                    46:71:fd:6f:39:b8:81:83:1a:93:f5:cf:a1:c8:27:
                    2a:d6:b1:b2:0e:96:22:e0:02:ad:3b:77:b6:29:05:
                    ce:24:ac:50:fe:7d:9d:84:a6:83:67:7b:cc:c2:06:
                    e7:c9:1b:ad:f6:0f:3d:02:b9:61:c7:63:e8:ef:04:
                    19:0f:35:d8:16:13:c9:a0:cc:d2:80:bd:20:96:18:
                    db:c6:41:e5:03:7e:cf:22:96:7f:62:f6:a1:36:4a:
                    d6:0f:87:6a:dc:64:e0:01:8b:cc:d7:9f:eb:1d:d9:
                    e9:58:d1:8a:65:c6:fb:ec:50:d4:92:35:a4:cf:3b:
                    7a:0b:f1:e8:14:16:0e:e8:68:c5:7d:40:3c:4e:e0:
                    e0:8b:f8:fd:f2:48:cc:c6:c6:0b:f3:9a:fa:b1:35:
                    b2:9e:3d:9e:55:39:37:98:d5:5d:fa:ac:f9:63:7c:
                    b2:24:d0:57:ad:75:51:3a:f3:80:2b:84:a5:62:3c:
                    59:7b:4e:3c:d4:bc:39:83:46:c7:fb:41:7e:de:7a:
                    08:af:f0:c2:6b:54:c6:29:8d:af:ec:88:71:e2:24:
                    76:c5:f3:c9:40:2b:b2:44:8c:a8:b7:2e:93:4c:4a:
                    76:db:e0:a5:d9:42:05:b7:a7:29:20:ce:aa:a4:38:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:1E:80:52:45:16:D1:61:BE:39:84:0F:FF:9D:60:CE:B4:58:57
            X509v3 Authority Key Identifier:
                keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6a:e4:9b:e3:af:02:de:64:d5:a5:1a:03:91:18:ec:04:db:
         3e:22:80:af:a9:d7:7d:aa:74:52:64:2a:cf:6e:29:79:2f:ed:
         95:b0:b9:c2:7a:bb:2d:1f:7d:af:d2:2b:33:06:38:c8:9d:d2:
         26:a7:b9:94:5c:4b:aa:a5:d6:b6:22:75:46:35:f8:e2:a3:9b:
         30:e5:9e:34:56:bc:86:5f:cc:0f:21:75:c5:ab:57:02:b2:9b:
         cc:cc:03:ca:73:4e:4e:96:27:da:b4:5d:dc:d7:dc:95:cd:a2:
         6a:7f:c4:90:07:90:4d:ad:24:7c:a3:ec:e3:6b:09:70:5a:86:
         87:41:a4:c5:2f:3a:d2:80:61:2d:1b:c0:f5:fa:36:21:6e:2e:
         30:7b:9e:05:e5:c3:fe:1f:68:ce:2e:2b:4c:21:cc:bb:39:c4:
         40:3d:43:76:a2:d0:1f:89:90:b9:f9:3f:35:1c:a0:0e:42:60:
         e9:07:05:3b:89:75:c7:1a:bd:7d:1b:12:aa:8d:08:79:11:40:
         d9:88:13:b5:e2:f2:bf:fc:90:ca:74:90:3f:14:2a:6c:16:0f:
         77:6e:a2:d9:b5:8d:fb:d9:69:ca:21:4d:20:b7:e2:3e:51:d6:
         94:31:25:5e:93:15:ed:f1:29:93:8c:a9:08:22:76:df:77:bf:
         f8:00:cb:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsoieVWQF0jeAAw9SMt/l2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTE5NjMxMGE3ZjdkZDk5OTllYzQzZTkzOGZkOTA2OTg1
YTNmODcwHhcNMjUxMjE2MTkwMTI0WhcNMjUxMjE3MTkwMTI0WjAzMTEwLwYDVQQD
EyhkOGQ3MWU4MDUyNDUxNmQxNjFiZTM5ODQwZmZmOWQ2MGNlYjQ1ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynbn+OE7XwPFTGyNqCNGcf1vObiB
gxqT9c+hyCcq1rGyDpYi4AKtO3e2KQXOJKxQ/n2dhKaDZ3vMwgbnyRut9g89Arlh
x2Po7wQZDzXYFhPJoMzSgL0glhjbxkHlA37PIpZ/YvahNkrWD4dq3GTgAYvM15/r
HdnpWNGKZcb77FDUkjWkzzt6C/HoFBYO6GjFfUA8TuDgi/j98kjMxsYL85r6sTWy
nj2eVTk3mNVd+qz5Y3yyJNBXrXVROvOAK4SlYjxZe0481Lw5g0bH+0F+3noIr/DC
a1TGKY2v7Ihx4iR2xfPJQCuyRIyoty6TTEp22+Cl2UIFt6cpIM6qpDh/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjXHoBSRRbRYb45hA//nWDOtFhXMB8GA1UdIwQY
MBaAFEKRljEKf33ZmZ7EPpOP2QaYWj+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQt
MGFhOWQ5N2M4Yzk4LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQtMGFhOWQ5N2M4Yzk4
LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGrkm+Ov
At5k1aUaA5EY7ATbPiKAr6nXfap0UmQqz24peS/tlbC5wnq7LR99r9IrMwY4yJ3S
Jqe5lFxLqqXWtiJ1RjX44qObMOWeNFa8hl/MDyF1xatXArKbzMwDynNOTpYn2rRd
3Nfclc2ian/EkAeQTa0kfKPs42sJcFqGh0GkxS860oBhLRvA9fo2IW4uMHueBeXD
/h9ozi4rTCHMuznEQD1DdqLQH4mQufk/NRygDkJg6QcFO4l1xxq9fRsSqo0IeRFA
2YgTteLyv/yQynSQPxQqbBYPd26i2bWN+9lpyiFNILfiPlHWlDElXpMV7fEpk4yp
CCJ233e/+ADLPA==
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:34:50 2025 by rpki-client