This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File:                     uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier:          vmtkQMNW8v7KlHM1tv2vQVAVYUHNP0/zEn/SRpf4Hy8=
Subject key identifier:   70:13:68:C0:91:56:F5:D2:90:94:31:B3:7C:F0:08:FD:E1:FB:B8:69
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer:       /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial:       019AF19BDC6A5F685550016A52CEA3491320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number:          0FE6
Signing time:             Sat 06 Dec 2025 03:01:54 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:54 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:54 +0000
Files and hashes:         1: Ujha7XxP98D3xulcV7MFKJ2FUK0.roa (hash: fQlcIKdy/eaJbe/2M1GqCZ9CE3CRZB+bKoGJevwXPtw=)
                          2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: xiGoXDH0lt6SuGFbZ+2AfVnz5N9hr36Vm7fxJkpsf1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:dc:6a:5f:68:55:50:01:6a:52:ce:a3:49:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
        Validity
            Not Before: Dec  6 03:01:54 2025 GMT
            Not After : Dec  7 03:01:54 2025 GMT
        Subject: CN=701368c09156f5d2909431b37cf008fde1fbb869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:bb:36:b4:ed:2e:a3:03:fb:5c:29:53:9c:
                    29:99:c9:c3:49:d8:1e:49:2a:e7:28:ab:4f:cd:7e:
                    f5:65:5f:c6:df:d3:21:14:54:84:e1:4b:71:07:52:
                    34:c3:c9:fd:50:6a:dd:59:f0:b1:79:47:df:8e:4f:
                    01:c9:b1:af:94:54:9e:b5:98:02:6d:78:95:af:e7:
                    0d:fe:dd:35:00:97:41:11:c6:ed:ba:b7:d6:a5:cc:
                    5e:45:84:5b:a0:cd:9a:f6:cb:47:d7:ac:48:5c:97:
                    5c:dc:02:6d:a1:4f:cb:e0:98:be:51:8e:cb:27:7f:
                    2a:7e:37:bb:a8:f4:43:00:50:82:a9:ed:2a:45:fe:
                    2a:32:01:f3:dd:7b:50:3c:a0:46:dc:1f:f5:0c:90:
                    89:bb:67:68:03:e6:2a:8e:d4:f1:8f:d1:b8:75:5b:
                    59:81:72:b2:f2:af:a5:a2:0f:c3:ea:03:83:71:7b:
                    fa:db:98:b3:29:82:b2:e1:c2:09:3c:65:01:57:f8:
                    60:7c:74:6f:16:1b:7b:35:25:e8:41:f1:b7:65:96:
                    70:81:41:31:33:8e:62:06:35:c0:36:3c:d1:cf:13:
                    66:13:3d:38:42:51:ac:23:6a:99:e1:ac:88:1b:a1:
                    27:98:8a:96:f8:04:23:c5:b6:0f:bb:c6:c8:b5:5e:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:68:C0:91:56:F5:D2:90:94:31:B3:7C:F0:08:FD:E1:FB:B8:69
            X509v3 Authority Key Identifier:
                keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1d:c3:16:1f:00:6c:08:40:ca:fe:20:17:1f:1d:8e:41:e4:
         b3:b4:b1:da:97:68:9a:19:55:95:ff:89:0a:10:03:19:b7:ac:
         fc:a2:8b:1d:e6:34:bd:90:10:77:41:15:58:4c:f1:ca:a7:cd:
         87:d5:72:a6:e6:4f:ee:d4:f0:2a:33:51:4a:a9:4b:b5:24:05:
         b7:da:6a:cc:dc:6b:b4:96:52:75:46:60:46:33:d1:a5:64:39:
         9d:79:b5:78:1d:7d:a2:0f:1b:71:86:55:0b:38:03:38:c5:6d:
         01:35:8d:e0:f4:6c:5d:ef:32:00:ab:6d:39:6e:d2:6d:04:ab:
         3d:b8:7f:d6:19:4f:6a:6c:82:d2:5c:92:b9:43:58:47:51:8b:
         11:dd:3e:9f:c0:33:9e:ce:9a:60:30:08:16:00:3b:99:05:da:
         c9:2d:2c:81:ea:a9:e9:b0:e7:f0:a2:2d:75:07:a1:89:f9:03:
         78:35:9b:2d:5f:6b:b4:27:c2:86:b0:bc:d2:48:35:97:9e:65:
         97:82:3f:08:54:56:10:38:cd:80:81:77:25:7c:75:d3:e9:65:
         12:60:c0:98:5e:86:3a:36:4f:b4:c5:c1:df:11:70:ff:ad:15:
         1e:d8:49:9b:f7:a0:ae:b6:b3:58:55:ea:f9:6e:5a:f3:94:55:
         d9:2e:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:42 2025 by rpki-client