This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File:                     uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier:          M3V5qNtBJA/cuXCGnJCwCqC4v2RIjRcgXisvScmhFLc=
Subject key identifier:   68:AC:93:89:31:F3:F9:B5:46:AA:FE:BD:DC:3C:98:5A:14:8C:F6:2C
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer:       /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial:       019AF19B26765891CDD76AE19BE763924A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number:          137F
Signing time:             Sat 06 Dec 2025 03:01:08 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:08 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:08 +0000
Files and hashes:         1: hx_fLybZMd0bewVXBVAM7S3L-GQ.roa (hash: sK9kED5NHQV+ZF0/R5VnMBtuYFGBIVWRa2IGw5jpGTA=)
                          2: oZEDClQI5mUeR-tun2SMB8BFO6g.roa (hash: aVZk36h9DNYmGpwbSUsBXNwd3910rjsUnxEvjedXyHo=)
                          3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: B47/pU6zpMsXDkl//YAWlES1Hzewwe3T+kik3lr9Yjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:26:76:58:91:cd:d7:6a:e1:9b:e7:63:92:4a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
        Validity
            Not Before: Dec  6 03:01:08 2025 GMT
            Not After : Dec  7 03:01:08 2025 GMT
        Subject: CN=68ac938931f3f9b546aafebddc3c985a148cf62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:d7:36:d3:d4:2b:35:bd:5f:3e:fb:22:81:
                    6e:ab:48:43:58:eb:2d:80:ed:2e:f7:4f:bd:ad:a0:
                    b0:00:a9:01:1d:4f:66:de:72:4d:49:87:96:06:39:
                    e3:cf:f6:e9:ab:bd:d4:da:e5:28:a9:35:e9:5f:66:
                    a5:1c:97:e0:67:15:81:9a:09:b3:91:b9:1c:ff:e7:
                    06:bd:e9:37:f7:86:fc:90:c4:12:69:39:1e:a0:88:
                    b7:03:e6:55:3e:f5:4c:4c:49:92:a8:fb:b5:66:11:
                    5f:8f:69:27:9d:4a:fd:eb:d4:dc:ca:04:c6:ae:90:
                    d8:49:6c:ac:0c:5b:9e:4c:c5:f6:49:64:ca:77:a2:
                    46:e6:cd:f0:25:61:86:84:56:92:cf:64:5d:d3:91:
                    90:9c:78:a1:e2:6e:bb:c1:38:8c:c9:3b:cb:94:db:
                    68:d6:53:53:88:78:7c:65:87:15:b3:4d:a3:84:ed:
                    c9:b8:4b:e2:78:c4:f2:c1:17:98:f1:b0:0b:37:ba:
                    bb:27:fc:2b:0c:13:56:f6:89:17:ec:73:b3:a8:71:
                    8c:b6:2c:0b:10:c0:5c:bf:ac:f1:c2:b3:cc:69:82:
                    8a:92:28:7d:d1:b2:54:8b:9d:85:8e:77:42:df:1a:
                    f3:39:c7:46:34:19:fd:0f:c5:9d:92:2f:9d:0d:09:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:93:89:31:F3:F9:B5:46:AA:FE:BD:DC:3C:98:5A:14:8C:F6:2C
            X509v3 Authority Key Identifier:
                keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:23:b6:27:61:31:56:38:e6:ac:d8:12:61:c3:c0:40:16:
         a9:5a:7f:95:1f:47:cc:d6:4c:6c:51:08:8a:d3:57:02:07:e7:
         8d:f3:18:fd:cf:26:60:1a:a9:40:16:57:0d:cc:a2:8b:9d:bc:
         08:94:66:c8:6b:09:57:03:bf:05:e0:0e:7e:ce:0b:bf:12:ba:
         31:af:de:3a:23:59:70:96:c0:0d:04:27:e5:2d:9a:35:7b:d2:
         fd:92:a1:9c:16:c9:71:05:23:b2:a7:7f:aa:9b:b8:4e:6d:3f:
         b0:9b:b1:81:c0:2e:4d:87:08:9c:44:76:0a:ea:ba:11:bb:d8:
         33:2e:b9:64:61:dc:3b:38:0d:75:8f:0b:0d:bb:60:3a:02:5f:
         a4:62:2e:bb:53:0d:3c:c5:82:6f:46:a0:7a:cc:a2:90:0e:1c:
         c9:74:57:e4:0d:dd:9f:24:d6:64:22:3f:63:b2:7d:50:9d:f4:
         d4:fd:7d:21:f9:e7:fd:bc:8e:e1:d8:8b:9e:ad:5b:f1:21:77:
         0e:47:9c:87:cc:fc:e6:a3:50:58:f7:b0:49:d8:5f:42:75:4d:
         33:ed:11:0f:9e:4e:6c:3b:77:76:26:6c:91:97:c0:7f:99:a8:
         57:7a:8e:20:35:16:68:b5:35:d0:c9:fc:06:28:93:84:8f:08:
         f8:87:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:24 2025 by rpki-client