This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File:                     qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier:          8E6HOk0EOEXeu0TpESyzRnygr49uGf1FhU6kvO4vEmU=
Subject key identifier:   4D:3A:83:90:74:77:78:9B:3C:41:76:62:72:21:6B:19:81:CA:3E:2B
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer:       /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial:       019B30E9674978C73053AD644E364E3A24A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number:          1781
Signing time:             Thu 18 Dec 2025 10:02:41 +0000
Manifest this update:     Thu 18 Dec 2025 10:02:41 +0000
Manifest next update:     Fri 19 Dec 2025 10:02:41 +0000
Files and hashes:         1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
                          2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
                          3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: JwrIZDxRtIx+HjYYmsb20c7UgBAXaA61ku1ZTN1p6uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:e9:67:49:78:c7:30:53:ad:64:4e:36:4e:3a:24:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
        Validity
            Not Before: Dec 18 10:02:41 2025 GMT
            Not After : Dec 19 10:02:41 2025 GMT
        Subject: CN=4d3a83907477789b3c41766272216b1981ca3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:53:48:9c:ba:90:47:25:d6:38:aa:f1:a2:
                    29:ba:a2:95:ee:ce:c8:ed:78:51:21:5a:af:49:b8:
                    e1:94:98:f7:14:71:10:9f:48:1f:5a:28:a9:b7:96:
                    70:f8:e8:3e:94:5a:f2:5c:e6:8e:e7:12:33:a7:42:
                    e2:b7:52:65:3a:5d:00:5c:79:ef:71:7e:46:40:c8:
                    30:bc:dc:b8:fc:7f:33:7b:d8:d6:b3:f5:e4:62:e3:
                    97:8e:92:be:3b:2c:8e:9e:f6:4e:2f:3c:a1:e8:d1:
                    fc:b8:0a:0b:1d:5b:48:df:cc:6e:7c:0a:98:11:55:
                    60:bb:2b:1d:29:ad:dc:b8:a2:57:d4:0c:6b:24:a2:
                    04:ec:60:c8:7e:2f:73:4f:f4:ea:5b:b3:1e:04:28:
                    ec:6e:1e:6e:bc:ac:a4:e5:e5:56:f7:38:a3:98:30:
                    7a:ae:03:cc:62:cb:51:5c:ce:26:9b:b8:38:3e:c7:
                    f2:ab:db:c4:4d:66:ed:2d:09:e9:5f:72:6b:54:c3:
                    fb:7d:ca:f6:fd:5f:5b:14:2a:06:e3:b3:9a:f0:20:
                    97:e8:3a:db:0a:f7:c8:bb:65:f9:dd:2d:43:d8:17:
                    3d:e4:3e:7c:a7:cd:06:c7:fd:67:fd:47:26:23:13:
                    9b:9a:8b:25:d9:3e:c7:c1:56:c3:b5:09:78:cb:ab:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:83:90:74:77:78:9B:3C:41:76:62:72:21:6B:19:81:CA:3E:2B
            X509v3 Authority Key Identifier:
                keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:20:0e:9c:4c:06:fa:47:d9:de:b2:28:5d:03:d3:5f:42:
         8e:cc:19:11:78:66:3a:af:3c:71:9c:46:65:0c:99:36:da:f1:
         05:aa:1c:a3:2c:72:68:85:e7:2d:ce:94:ce:67:fe:0d:62:c5:
         b2:a6:dc:60:57:64:46:28:ed:8a:34:05:7e:24:4b:f7:b8:6e:
         53:55:54:df:c8:8d:d8:0a:bc:9a:19:38:f8:3d:78:f2:b8:61:
         2a:0f:ed:cc:88:00:8d:55:00:03:f1:ed:37:98:0e:6d:47:a6:
         d0:35:51:22:da:94:b7:1f:f6:20:6a:08:1d:8e:b1:1b:70:97:
         0f:2e:f8:d8:3f:8f:fc:f0:fe:6a:4e:49:4e:83:17:9c:9e:24:
         20:e2:77:b3:e9:bb:2c:d9:fd:de:cd:d0:84:ae:3f:45:7d:7f:
         bc:03:e3:58:4c:3e:23:f4:66:b6:0e:ae:8c:81:b7:04:07:ec:
         ec:b4:57:f2:5f:61:f6:c4:a5:02:7e:7d:c1:ba:31:a7:41:60:
         81:1a:17:e5:13:35:ae:80:e6:de:2c:ff:e8:33:a5:5e:db:1a:
         be:1b:c9:d9:55:d0:06:ab:ac:82:86:66:f0:10:26:b0:e2:ed:
         de:a6:6b:a0:73:b6:85:0c:31:31:1b:99:68:73:9f:19:53:39:
         ea:bc:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:56:02 2025 by rpki-client