This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          5oW+L4dyjEC+Sq7l3FZ45mS+EQoCrILiIQtjq9rMNXY=
Subject key identifier:   8C:44:65:73:B7:51:AB:75:17:B6:76:84:EA:9D:50:1E:26:C4:EB:6F
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       019AF31B87A8409F072F09C12AE2F2610209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          1765
Signing time:             Sat 06 Dec 2025 10:00:58 +0000
Manifest this update:     Sat 06 Dec 2025 10:00:58 +0000
Manifest next update:     Sun 07 Dec 2025 10:00:58 +0000
Files and hashes:         1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
                          2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
                          3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
                          4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: p7xRYZLN3dEkBImf15mtFvmioTifEu6CnYGsNlnU7bI=)
                          5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:87:a8:40:9f:07:2f:09:c1:2a:e2:f2:61:02:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Dec  6 10:00:58 2025 GMT
            Not After : Dec  7 10:00:58 2025 GMT
        Subject: CN=8c446573b751ab7517b67684ea9d501e26c4eb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:f1:2b:21:93:c8:ad:2c:5d:21:c1:71:82:
                    21:bb:2e:ad:bb:5b:19:34:d8:fb:92:c9:53:f5:48:
                    c8:31:8a:8c:59:65:df:3c:2b:ea:25:7d:a2:a3:c3:
                    58:83:f8:1b:5f:e4:4d:68:99:d0:76:84:c5:1c:3d:
                    ee:a8:ad:21:73:5e:ad:61:f5:be:d3:d7:6e:0c:48:
                    36:b6:62:0b:6f:8a:96:bc:af:65:02:55:b8:bf:09:
                    c9:07:99:2d:cf:57:33:d3:0d:e9:ca:c6:18:4f:c6:
                    14:a5:77:61:fd:99:57:6f:74:9a:b1:cd:de:f9:66:
                    8d:e2:6c:cf:ef:ad:76:61:8b:8d:69:1d:3a:3f:51:
                    6a:c8:08:97:30:01:e1:71:33:3d:41:9e:86:58:14:
                    8b:cd:6b:95:5f:b4:55:70:60:5b:72:fd:e6:9e:76:
                    60:e7:76:61:9a:e3:2b:53:49:ba:9e:e2:cc:92:3f:
                    52:2d:f0:b5:ed:8f:a8:76:d3:ad:18:85:83:19:72:
                    26:fb:5b:4b:8a:96:4b:6f:a8:06:32:de:e1:a0:16:
                    f8:56:fe:9a:b4:4e:bc:8a:2e:b4:46:c5:6c:9c:89:
                    1f:8c:19:5c:9a:1b:26:fe:a7:d5:9b:4b:5d:fe:50:
                    17:7d:d7:70:3e:62:be:96:2f:31:99:4d:71:d6:8d:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:65:73:B7:51:AB:75:17:B6:76:84:EA:9D:50:1E:26:C4:EB:6F
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:01:26:06:27:8b:e6:a2:ef:6a:8c:bb:9f:fb:36:52:eb:
         b6:64:60:4f:e0:bf:e3:d9:86:a6:81:a6:1e:3d:44:22:70:41:
         e3:76:b0:36:94:3d:17:d0:f6:78:fd:de:0a:f5:21:57:b7:c1:
         f3:b7:6e:27:24:b7:04:d2:5f:c3:08:66:0a:cf:b5:93:4f:9a:
         f8:4b:9d:02:72:d7:c1:08:01:e2:c6:5a:8d:95:27:1b:07:0b:
         4c:1a:19:6c:a2:b5:e6:06:ea:5e:b2:43:d0:9c:25:a1:f6:9b:
         a2:26:ab:98:a3:73:8c:89:d8:61:19:df:02:f5:13:2b:77:59:
         cc:21:6f:ce:23:f2:ea:59:14:50:0e:96:6b:6b:b2:99:17:0b:
         7c:bf:72:a4:fa:05:37:e1:89:68:c1:5a:96:1c:a5:9c:ef:05:
         50:3e:2e:be:85:e6:f8:e1:10:c3:d1:38:68:ed:49:86:1d:54:
         64:90:4b:64:e0:ca:87:5a:d8:2f:e4:6f:20:2b:35:60:10:52:
         60:a2:eb:a0:b7:06:24:d7:4f:89:c1:14:a9:14:3e:aa:2c:49:
         85:eb:a4:cd:3e:6a:ab:ab:7d:1c:3d:0e:6f:cc:a8:7c:09:f3:
         fc:09:04:7e:49:8b:5a:0a:7a:d9:c6:da:e2:df:09:5c:a4:8c:
         30:14:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:34 2025 by rpki-client