This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          8lq0OIrS6sG0chZzV4cLGtxI6WITewcXafqudRbgn4s=
Subject key identifier:   06:77:B4:0C:59:94:55:AE:CA:64:6A:68:88:33:D3:D3:55:26:07:58
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       019AF35207FE8DAEE56EA4D682CF41B76DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 11:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:30 +0000
Files and hashes:         1: GvejnjlTXcBw3hFvJDpNgstBnAQ.roa (hash: mGf6PRUxWjZm6nnbhcxXtuiNF2f40d+lyo3uybi/AYg=)
                          2: MchgGg_JuZ_XxVP8EjtZyqSZCSc.roa (hash: JNpBzF/bGBycltANPUKMe/k4nJGYJgbUSLWLk2GhApA=)
                          3: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: gY1OGemg9tfmFuqP1+YW5U6H7G4ci34mrntGGFPLCzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:07:fe:8d:ae:e5:6e:a4:d6:82:cf:41:b7:6d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Dec  6 11:00:30 2025 GMT
            Not After : Dec  7 11:00:30 2025 GMT
        Subject: CN=0677b40c599455aeca646a688833d3d355260758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:26:fa:69:db:d8:c5:09:eb:85:ae:9f:fa:
                    9d:77:c5:c8:0c:d3:53:cc:3d:aa:09:64:9a:51:45:
                    00:92:96:2a:00:c6:f7:6a:d3:fa:c5:b6:2b:dc:6e:
                    da:45:7a:e6:75:65:e9:13:da:30:a6:64:d1:e6:54:
                    ba:20:50:2b:8d:0b:4b:8e:fb:c3:f8:9c:c0:fc:ca:
                    50:0b:0f:3b:6a:ea:47:52:b4:18:d7:39:f1:91:9b:
                    c0:15:48:1e:85:d7:46:bb:8a:7d:34:bd:2c:21:b0:
                    c3:87:64:c0:fc:33:0b:85:cf:f4:61:f5:9e:89:0c:
                    d2:7c:c2:25:45:21:20:9a:f3:e5:bd:0d:d8:1b:b0:
                    17:ae:f2:bd:ed:8a:1d:24:a2:09:b2:c8:c3:57:ae:
                    5a:71:af:fd:27:85:a5:4b:0a:7e:3f:5e:42:69:9e:
                    58:f8:c9:62:e9:ac:6e:69:a0:02:1b:e4:44:fd:0f:
                    0d:dc:a8:42:44:88:ea:d6:e8:41:f4:80:c8:f9:8c:
                    00:f1:d6:ea:d0:60:f4:c5:5f:d2:ef:c2:25:4d:b5:
                    41:af:ab:8b:2c:a8:90:88:d2:eb:f3:24:b3:0d:c0:
                    ed:3b:71:8f:81:c9:02:ee:d2:1f:1f:d7:c4:7f:6f:
                    75:cd:cc:39:a4:55:b8:cf:57:1d:94:05:4c:62:db:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:B4:0C:59:94:55:AE:CA:64:6A:68:88:33:D3:D3:55:26:07:58
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:d1:10:bb:17:e4:71:26:01:6d:bc:e2:7b:25:42:bf:c3:
         56:03:04:e6:7a:d4:96:1b:d8:2f:c6:21:4c:9f:b2:ba:7e:e4:
         6c:50:d8:8c:40:53:fa:6a:3d:88:ee:eb:76:a6:b0:56:98:46:
         1f:09:08:9a:58:02:af:2c:36:8f:73:8a:80:50:46:7b:98:d4:
         ca:96:25:7a:49:5d:65:70:e9:e9:6b:7d:17:8b:87:f4:07:63:
         7a:46:1d:27:86:a4:70:ec:d6:ff:20:c4:82:40:7b:5a:45:12:
         7c:d4:43:08:24:09:02:4e:09:04:e9:ee:6e:95:0e:0a:91:81:
         1b:95:e7:d1:19:e2:f3:52:a7:1e:ef:b5:36:a6:1d:5a:1a:3a:
         7b:dd:8e:76:ad:6c:65:8a:67:1a:67:da:f1:d8:d1:bc:71:2e:
         8d:f3:20:76:25:d2:fc:20:6f:50:3c:6c:cd:4c:3e:3e:a3:ec:
         67:11:7a:48:39:61:a7:3f:92:c7:28:43:2f:92:c0:0c:44:b5:
         66:78:b0:23:c6:7a:d5:30:8d:47:e4:59:42:ac:e8:34:24:18:
         dc:29:02:f2:8a:83:e6:4d:68:eb:f1:12:02:8b:7e:8c:e0:73:
         b4:ca:3b:bf:8e:39:a7:bd:56:b2:56:d8:34:3c:53:d6:11:94:
         00:96:fe:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUgf+ja7lbqTWgs9Bt238MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUxMjA2MTEwMDMwWhcNMjUxMjA3MTEwMDMwWjAzMTEwLwYDVQQD
EygwNjc3YjQwYzU5OTQ1NWFlY2E2NDZhNjg4ODMzZDNkMzU1MjYwNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEm+mnb2MUJ64Wun/qdd8XIDNNT
zD2qCWSaUUUAkpYqAMb3atP6xbYr3G7aRXrmdWXpE9owpmTR5lS6IFArjQtLjvvD
+JzA/MpQCw87aupHUrQY1znxkZvAFUgehddGu4p9NL0sIbDDh2TA/DMLhc/0YfWe
iQzSfMIlRSEgmvPlvQ3YG7AXrvK97YodJKIJssjDV65aca/9J4WlSwp+P15CaZ5Y
+Mli6axuaaACG+RE/Q8N3KhCRIjq1uhB9IDI+YwA8dbq0GD0xV/S78IlTbVBr6uL
LKiQiNLr8ySzDcDtO3GPgckC7tIfH9fEf291zcw5pFW4z1cdlAVMYtsCPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ3tAxZlFWuymRqaIgz09NVJgdYMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNnRELsX
5HEmAW284nslQr/DVgME5nrUlhvYL8YhTJ+yun7kbFDYjEBT+mo9iO7rdqawVphG
HwkImlgCryw2j3OKgFBGe5jUypYlekldZXDp6Wt9F4uH9AdjekYdJ4akcOzW/yDE
gkB7WkUSfNRDCCQJAk4JBOnubpUOCpGBG5Xn0Rni81KnHu+1NqYdWho6e92Odq1s
ZYpnGmfa8djRvHEujfMgdiXS/CBvUDxszUw+PqPsZxF6SDlhpz+SxyhDL5LADES1
ZniwI8Z61TCNR+RZQqzoNCQY3CkC8oqD5k1o6/ESAot+jOBztMo7v445p71WslbY
NDxT1hGUAJb+tA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:24 2025 by rpki-client