This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File:                     uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier:          yt0Rac5RFv0222+rXz8pxxqOWRxBF7i+eiThNyeLuRc=
Subject key identifier:   3C:9A:69:68:27:8B:C8:99:A7:77:27:38:2C:FC:E4:97:1A:79:6F:30
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer:       /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial:       019AF208A8E7A4D796CA3165BFCCEECC3643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 05:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:44 +0000
Files and hashes:         1: glEOdXhVW21eI1WzkfhB7HXgdWk.roa (hash: NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=)
                          2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: nekoy0c48rxCLE5X+NzmBH44hN+SHoudjjWTL15IKyE=)
                          3: ybYQIpMfde41Tc94ckzGr4yZyvk.roa (hash: o6qsKgPuxOXvm5e0AfBzKvfmoP1y9YyfuSfaRj+weT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:a8:e7:a4:d7:96:ca:31:65:bf:cc:ee:cc:36:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
        Validity
            Not Before: Dec  6 05:00:44 2025 GMT
            Not After : Dec  7 05:00:44 2025 GMT
        Subject: CN=3c9a6968278bc899a77727382cfce4971a796f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:fd:3f:a4:d6:8e:ea:ab:53:59:e7:12:9e:
                    9f:74:90:b5:59:93:5a:89:ae:01:90:d2:22:bb:8a:
                    dd:97:59:96:fb:bf:a2:0a:8c:eb:4c:a4:ac:52:0b:
                    83:6b:80:06:0b:fa:ae:61:d3:51:3c:4b:ac:ed:2c:
                    87:5b:ce:a7:09:b6:b3:ee:4e:b7:16:ba:24:94:0c:
                    e9:79:21:ad:74:8f:c0:90:12:4e:e0:79:fc:eb:52:
                    dd:c1:d3:be:0b:a7:ae:92:9e:98:81:31:a9:2a:53:
                    f7:35:d0:33:fc:0a:81:d9:35:ba:22:85:3c:05:d0:
                    2e:81:a9:24:f4:76:73:b1:25:b1:6c:bf:a3:77:0a:
                    60:49:64:66:91:62:16:18:9e:e1:14:80:7f:28:94:
                    5d:27:79:0c:76:1f:be:f4:bf:e0:d0:ba:c9:7a:bb:
                    db:ab:dd:95:44:6e:7c:07:47:78:a0:30:ac:b4:f5:
                    df:9e:e8:8f:27:91:9a:28:ee:74:b7:57:c3:9e:9c:
                    57:bd:27:94:86:62:79:c2:0d:8a:80:93:e5:dc:3e:
                    78:56:37:c0:bd:8a:72:6e:e8:56:1a:c5:cc:dc:31:
                    ed:a2:58:d0:5d:3e:87:69:d2:34:eb:92:7f:06:81:
                    c9:87:ee:03:a3:05:94:86:a7:9a:d0:ad:cb:5e:4b:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9A:69:68:27:8B:C8:99:A7:77:27:38:2C:FC:E4:97:1A:79:6F:30
            X509v3 Authority Key Identifier:
                keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:06:cd:ef:2b:a4:13:9c:0b:d4:5a:cf:87:d1:23:c6:8d:
         88:93:47:0d:81:83:c2:da:0c:dc:c6:b5:0c:24:b9:9a:f9:ce:
         34:49:3a:fa:8e:58:8a:de:eb:61:b4:6c:04:4c:af:4e:11:4f:
         df:1f:f4:3d:db:40:81:27:08:49:a4:97:67:71:f6:59:d0:4f:
         e8:be:d3:1b:e3:5e:53:24:57:b1:a5:e3:98:c0:60:41:5d:9d:
         a2:14:70:a4:47:84:a9:6a:78:30:04:05:b9:02:e8:78:cd:21:
         57:97:82:62:9c:f6:28:9a:ab:27:b1:ef:99:57:cc:22:94:45:
         c9:88:88:a3:f4:1e:d7:8f:33:0a:f1:4e:90:7e:2a:c1:df:46:
         99:ef:ef:d6:c2:c7:ed:71:de:58:7d:0b:09:a3:8d:4b:6d:05:
         cb:2c:33:b0:24:b0:b9:62:86:66:72:ec:98:c1:9d:4e:59:25:
         35:25:fe:6f:7c:8a:34:4a:9e:68:68:9f:5d:c7:af:dc:88:3e:
         b2:df:b1:70:a1:e1:e0:71:0d:82:bd:2c:45:e9:9d:43:b5:d2:
         94:30:1d:31:04:d9:77:be:1f:e7:0e:cb:34:1d:ca:f2:64:2a:
         80:8c:c5:62:a0:a0:94:7c:7d:82:50:d5:4e:c7:02:a1:47:b8:
         bb:14:e6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:33 2025 by rpki-client