This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File:                     UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier:          58UTzUEvKwJOUz5rTZDGkkE3eVDrrWoB21aLUU6K4BE=
Subject key identifier:   D9:C8:F9:70:05:8B:07:F7:06:CB:01:19:44:B0:F7:49:A1:50:6D:D3
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer:       /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial:       019AF20969F64B45228B45DBDCFCB6B7CF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number:          0207
Signing time:             Sat 06 Dec 2025 05:01:34 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:34 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:34 +0000
Files and hashes:         1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
                          2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
                          3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: 9B2fW3NDfNoLhnhiePaVb3zEC2V92LACmYBlmc2ZBzU=)
                          4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:69:f6:4b:45:22:8b:45:db:dc:fc:b6:b7:cf:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
        Validity
            Not Before: Dec  6 05:01:34 2025 GMT
            Not After : Dec  7 05:01:34 2025 GMT
        Subject: CN=d9c8f970058b07f706cb011944b0f749a1506dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:0c:21:1e:61:89:b4:b9:45:8b:f9:23:00:
                    9e:e0:5e:8d:6b:66:a5:67:34:7b:be:28:34:07:91:
                    4e:58:3a:66:35:0f:e4:a9:7c:82:5c:b6:90:b2:71:
                    92:e8:13:50:64:8d:6e:f3:21:8c:be:e9:54:d0:41:
                    33:03:9f:02:13:ff:8b:a8:37:ad:93:95:43:fa:3f:
                    96:33:3b:db:d9:3f:f8:d5:1d:eb:bb:ae:0c:0f:ef:
                    75:08:4c:e5:ea:a0:9c:ea:67:1c:1a:08:37:3e:4f:
                    68:77:32:cc:d7:85:22:fc:9e:a4:50:dd:20:3f:62:
                    fe:03:b4:70:21:8d:cd:1c:65:5d:1c:09:2a:9b:af:
                    5e:c8:fb:6e:b9:74:27:29:84:22:6c:70:19:c2:07:
                    ba:67:3e:f8:f0:62:63:7b:f5:af:59:b3:74:c1:fa:
                    9b:2e:c5:4e:ec:50:51:5b:4e:85:16:1b:c8:6a:11:
                    9a:03:2d:61:b9:3d:1b:1a:61:1f:cc:e3:70:52:f0:
                    95:69:a8:7c:23:ae:c2:cd:10:6d:dc:21:f1:f0:2f:
                    a7:3f:18:d7:c1:bc:c6:1f:cb:1b:04:8c:de:5c:97:
                    0a:66:5f:3a:44:20:02:3e:a6:a5:c9:e7:6c:84:b8:
                    af:18:3b:1f:51:6f:2b:a9:09:c9:07:28:d7:5a:9a:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C8:F9:70:05:8B:07:F7:06:CB:01:19:44:B0:F7:49:A1:50:6D:D3
            X509v3 Authority Key Identifier:
                keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:9d:08:bc:af:02:05:c0:51:a5:f4:d0:aa:dc:a6:80:b6:
         08:d3:71:97:89:ac:8f:f9:0f:b1:5a:e9:92:4c:c7:80:d6:eb:
         73:72:a3:89:6b:fc:8f:f7:ff:42:ec:1b:4c:1e:25:4d:78:01:
         fa:7c:2e:2b:10:88:e5:78:64:46:8f:1d:30:6d:d1:5e:44:1a:
         25:7c:2e:33:aa:fe:86:ee:15:44:96:4b:53:62:d9:1f:86:80:
         6c:d1:ca:05:ad:66:44:97:13:94:b1:e3:a2:d9:37:49:04:54:
         a1:48:a3:02:6d:bc:10:50:d2:57:ce:b7:8d:66:8e:a6:f2:11:
         11:12:d8:c7:4d:c0:54:c0:0b:a9:af:4a:fb:19:f7:eb:1d:64:
         d3:b9:1a:27:d7:7c:81:a7:11:93:42:29:5a:5c:e6:69:ab:8f:
         41:80:e0:f3:db:9b:e6:49:71:60:2e:80:84:c1:56:ee:d7:5e:
         55:d1:9c:11:db:35:23:b5:5e:a0:6d:98:19:9a:79:75:41:12:
         c9:80:2f:84:80:09:de:08:55:d4:f3:7f:72:5b:91:fb:9b:3d:
         ac:b1:b9:d4:55:ff:52:94:37:f3:74:35:5c:b3:a5:da:3e:0d:
         93:e6:7e:b7:ae:91:83:15:e8:ae:69:97:e2:30:e2:f2:d5:a7:
         b0:55:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:01:46 2025 by rpki-client