This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File:                     u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier:          Y9LrMIYVSBZhL4WReqvKelNs/9KRnNJZiWBXpakkIKA=
Subject key identifier:   52:88:6D:C5:88:28:B0:EF:9D:73:FD:DE:2D:8D:1A:FD:E0:63:4A:55
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer:       /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial:       019AF540D1C2AE324B4ECE6305354949E664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number:          163F
Signing time:             Sat 06 Dec 2025 20:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 20:00:57 +0000
Files and hashes:         1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
                          2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: NqDzp0oJ5WrnHCD0LFn80hCffYDckkOkENrv7bAUG/k=)
                          3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:d1:c2:ae:32:4b:4e:ce:63:05:35:49:49:e6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
        Validity
            Not Before: Dec  6 20:00:57 2025 GMT
            Not After : Dec  7 20:00:57 2025 GMT
        Subject: CN=52886dc58828b0ef9d73fdde2d8d1afde0634a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:9f:4f:e9:18:ee:40:3e:88:27:d2:bd:5e:
                    d2:dd:11:81:24:57:27:a6:7e:6c:f1:9d:9a:5e:66:
                    c9:08:4d:ee:8a:2c:ba:77:92:2a:60:c7:e1:4b:bd:
                    71:94:63:8e:45:33:a0:55:ca:5b:03:5e:13:a1:d2:
                    76:55:c1:7c:3c:84:31:5e:2b:f4:d9:b3:6c:c8:85:
                    c8:70:3a:d6:8a:96:a6:a5:2f:14:66:70:a5:bd:6b:
                    da:ab:5d:89:9f:69:6c:9b:62:eb:d1:1c:6c:f7:c1:
                    56:14:b3:af:f4:40:d6:b9:8b:84:45:ab:1b:6e:0f:
                    ea:16:0a:c2:16:70:0f:e1:8b:ff:3c:89:c0:7f:53:
                    2c:d4:0f:21:59:3e:a8:d9:d3:22:96:ea:07:ec:c7:
                    d4:05:7b:32:73:f0:98:df:5d:c4:05:40:f1:c5:a2:
                    9c:07:33:53:3a:ba:06:61:92:38:ed:b2:bc:c6:ba:
                    ef:d7:67:7d:85:8a:a3:86:29:ba:cc:c7:c0:82:79:
                    09:7e:64:3c:a9:98:0c:b7:98:0f:f6:3e:a8:59:ad:
                    3d:fa:51:f5:16:26:1c:ae:78:79:fc:e1:64:fb:52:
                    3a:7e:8a:9d:3b:9f:78:6a:4d:cf:39:0a:4e:db:07:
                    51:c6:11:4a:e2:41:4e:b9:44:f5:ba:63:31:14:8f:
                    bf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:6D:C5:88:28:B0:EF:9D:73:FD:DE:2D:8D:1A:FD:E0:63:4A:55
            X509v3 Authority Key Identifier:
                keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:18:f6:25:6f:eb:fd:22:9a:0d:d4:66:a6:52:1b:32:78:
         c6:01:96:1e:aa:21:4a:ab:3b:85:ff:cd:dc:8a:bf:d6:42:ef:
         55:ff:0f:37:34:7d:84:31:ec:64:1a:eb:2e:eb:22:4a:6f:fa:
         a2:92:0a:96:7d:b9:80:73:74:c9:61:bb:55:d3:85:d9:e0:ba:
         59:b3:75:49:57:fa:db:a2:46:55:52:7e:96:87:ec:dd:49:6e:
         0f:04:ae:45:db:dc:b0:52:ff:32:33:50:c7:71:e9:74:5c:a7:
         3c:9c:61:03:2d:28:4e:af:d8:e2:12:6d:5f:c7:d5:7c:73:e9:
         5d:1c:64:12:89:13:b6:34:3c:25:82:b8:30:1f:9c:b1:17:54:
         28:a9:c2:66:f7:e0:13:9b:ba:be:30:c7:bd:46:d0:20:86:bd:
         c6:48:a1:f1:33:af:ea:3b:e8:5f:05:8d:9b:7b:2b:99:3f:89:
         ee:ec:42:6b:dc:71:c0:b7:8c:f8:d6:4d:3a:d1:04:f3:96:da:
         b9:b1:8f:33:59:20:74:e6:53:72:7e:0b:b1:e5:34:2a:7c:f7:
         36:2f:47:a3:8f:2b:90:6d:f8:23:4f:33:38:7c:10:a3:59:05:
         3d:0e:6c:b7:8a:5e:9b:c9:c4:d9:28:62:38:1b:6a:9a:9b:f7:
         46:53:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:36:52 2025 by rpki-client