This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          Splv5AM6Gb1g6CimtsttT00blPoFnegXnLDjawN2osU=
Subject key identifier:   ED:84:A5:9B:21:F0:6D:12:2B:32:59:A8:84:1C:69:DD:E3:CC:CD:70
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       019AF31C8E3935BEE77F487CA1362430FDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 10:02:06 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:06 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:06 +0000
Files and hashes:         1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: UectONVQHv+8Qiv/gyPDvULSKLDeJyzT0O/ydKB5vkc=)
                          2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:8e:39:35:be:e7:7f:48:7c:a1:36:24:30:fd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Dec  6 10:02:06 2025 GMT
            Not After : Dec  7 10:02:06 2025 GMT
        Subject: CN=ed84a59b21f06d122b3259a8841c69dde3cccd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:12:fb:6e:bb:e6:76:34:7a:9a:fe:80:79:
                    1c:e0:16:e2:0c:21:11:f2:62:2f:a7:bc:9e:0d:80:
                    a0:f4:d2:b8:4a:19:5d:00:69:41:67:7d:da:39:62:
                    59:ce:6f:be:d2:ef:b7:34:13:b7:b5:20:59:54:f7:
                    e2:6b:01:31:7b:26:65:f1:f0:e9:2b:20:9b:7f:a4:
                    c7:0b:0e:37:96:09:9a:b7:e5:9c:f5:89:07:e6:39:
                    d1:4a:19:bd:75:e5:ed:d9:e0:03:e5:6a:47:0e:94:
                    cd:c7:c6:a2:e3:97:e1:92:f9:9c:ae:0e:9a:84:64:
                    13:4e:1b:1a:47:fb:80:ec:85:f6:94:01:6f:b3:34:
                    6b:08:6a:f4:ad:16:28:c8:9e:73:f7:f4:39:12:68:
                    8c:ee:30:ba:95:10:64:7d:b2:36:e0:6a:a5:ee:11:
                    4d:b5:a4:bf:b7:e1:f5:b6:a8:c0:37:40:34:51:48:
                    cb:1f:4c:06:fd:a7:20:89:06:d2:b2:5f:81:c6:d3:
                    fc:30:32:38:60:c6:bd:6b:f9:37:42:cb:79:05:80:
                    b1:36:36:f8:89:64:f5:af:65:d5:0d:83:64:28:06:
                    36:f5:2e:26:f0:b9:23:41:57:8a:9c:19:3e:7f:9e:
                    e4:66:5c:be:c8:bc:a8:cb:85:0b:be:ca:32:c1:c1:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:84:A5:9B:21:F0:6D:12:2B:32:59:A8:84:1C:69:DD:E3:CC:CD:70
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:20:28:a0:a1:67:65:69:b1:3d:a4:e0:b9:3d:63:77:03:11:
         f8:0e:07:9c:f6:88:a7:e5:8f:22:bd:5d:69:47:b3:0d:76:26:
         36:9e:6f:9b:5f:f7:4f:8f:25:2c:d7:7c:22:30:a0:4c:98:8a:
         9e:21:32:76:b0:d5:02:6d:98:71:06:e0:ad:a9:70:02:57:b9:
         8b:1c:64:bf:54:bb:86:3e:b5:ed:b4:b4:5c:b4:c3:74:e0:66:
         5e:d7:ab:7a:3c:86:e6:83:e0:36:be:7c:93:d8:96:b4:6e:31:
         3b:4a:09:26:3a:00:b4:3a:af:a2:c9:87:57:d9:23:2c:38:7c:
         c0:a8:23:38:33:a2:21:36:c6:39:b9:c9:b1:d8:24:4c:78:78:
         5b:71:45:ce:c6:d4:b9:b4:6c:0d:5d:3d:19:af:80:a2:73:13:
         38:68:5d:13:3f:9d:1e:93:f2:e7:24:03:9d:34:08:85:e4:db:
         64:ee:2d:1d:fc:7d:48:16:34:72:0d:09:3c:5b:4a:7f:0d:08:
         93:01:ce:cf:2e:09:56:ca:50:e9:19:aa:b5:27:72:64:60:9e:
         69:cd:1f:05:02:f7:21:72:9f:20:ba:48:aa:95:9f:73:57:00:
         c1:a6:d2:f2:95:3e:e8:bb:cd:54:86:51:9a:6f:e1:f7:10:25:
         1a:12:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:38:52 2025 by rpki-client