This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          zU32JVGHEyb2RH1hUovCtohyIPXhIYVm4Z5qssXsSSs=
Subject key identifier:   AD:32:A9:8B:1C:6E:CA:BB:B2:B2:A4:46:12:8A:A3:D2:75:80:D2:ED
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       019B2EFA94DA4B97753BDC6A28E5F9767EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          0F04
Signing time:             Thu 18 Dec 2025 01:02:12 +0000
Manifest this update:     Thu 18 Dec 2025 01:02:12 +0000
Manifest next update:     Fri 19 Dec 2025 01:02:12 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: 07jSn3RRi5tSNVS5m/ILWAUYGpgvfbXVKvJpvHoR6ZY=)
                          2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2e:fa:94:da:4b:97:75:3b:dc:6a:28:e5:f9:76:7e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: Dec 18 01:02:12 2025 GMT
            Not After : Dec 19 01:02:12 2025 GMT
        Subject: CN=ad32a98b1c6ecabbb2b2a446128aa3d27580d2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:6d:5e:17:be:7f:d7:f7:4c:27:dd:4e:dc:
                    7f:48:ae:0c:19:0a:e0:b7:2d:2b:52:c8:e9:93:f6:
                    39:19:88:2d:02:ec:32:76:6a:39:01:d3:23:2f:e4:
                    69:81:c9:03:c3:b5:13:a1:20:51:b3:ef:76:d0:9a:
                    bd:f0:94:fe:89:53:74:7c:09:8b:43:fc:09:48:f6:
                    b6:8d:cd:4d:44:91:0a:40:9f:3a:21:1b:4c:6f:1b:
                    d4:e6:69:f3:63:c4:26:02:9e:dd:8f:f9:7a:45:5c:
                    40:ef:ce:96:71:a7:6c:70:1f:94:08:7d:f8:b1:9d:
                    cb:02:ca:aa:1e:b0:ea:d7:b2:08:43:89:c0:26:82:
                    a4:72:55:b0:90:29:9d:ef:75:12:3a:74:5c:e7:23:
                    9c:9d:ca:96:5f:6c:83:6a:36:78:d9:4d:71:70:38:
                    86:7a:8c:a4:74:eb:12:44:d1:39:e3:30:0e:fc:d1:
                    bf:13:4f:d6:0b:f6:19:56:30:a6:75:31:44:25:32:
                    02:8a:0e:c0:3f:a0:27:db:3c:7c:89:e0:3a:0a:14:
                    63:f4:0b:6f:50:ff:27:34:b2:ab:e0:17:1a:83:d1:
                    0a:4a:b4:86:1b:be:33:5d:c3:c6:52:61:14:a3:62:
                    71:ae:05:dc:a9:c7:03:5e:cf:4a:53:ef:70:fc:ec:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:32:A9:8B:1C:6E:CA:BB:B2:B2:A4:46:12:8A:A3:D2:75:80:D2:ED
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:e5:70:dd:88:27:84:81:97:c6:b9:7d:6e:89:37:eb:13:
         08:11:c6:67:f6:81:ac:51:69:65:ea:6e:29:93:bb:de:31:a7:
         70:2b:eb:7d:7b:df:5e:e5:ab:b0:b0:b8:4f:ca:22:cc:6d:78:
         6d:ba:f1:0e:2a:86:76:91:53:34:c4:34:f3:d7:97:27:e3:2c:
         e4:a8:65:ce:09:70:a4:fd:89:1a:be:74:d5:91:41:b0:8a:e8:
         d7:60:d1:a5:d1:30:3f:d7:00:95:c3:d3:bc:52:b5:8c:9a:fd:
         43:da:8f:f8:de:e3:9e:22:c6:af:53:d5:bb:a7:36:27:8e:9d:
         fb:5e:f8:92:97:3d:22:20:c8:d8:6f:36:91:99:ed:6d:f8:84:
         dc:e5:b6:36:94:c0:ea:ce:0f:df:99:cc:ec:ee:1f:42:7f:cf:
         ba:31:20:96:09:7b:54:8d:53:41:8c:ec:f2:56:93:8d:ff:b4:
         29:d6:b4:b6:7b:ba:ab:e9:20:8f:ca:16:d6:ba:a4:c1:78:69:
         92:cc:3d:25:b3:91:48:f9:97:61:d4:e5:27:f4:f2:b8:b8:b1:
         a5:43:b5:95:2b:2c:f3:0e:a5:98:da:d6:9e:b9:0f:94:e9:61:
         69:99:8f:6a:d6:bd:ea:b6:74:03:87:04:f6:5b:bb:62:c5:98:
         21:72:8d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:43:01 2025 by rpki-client