This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
File:                     uBVaw0tuwV8iaumRPWrs_KenhNQ.mft (raw, json)
Hash identifier:          2btCp6Nn0c5xrmslhRMCKi2ivC9vkc63vV/rJ8LUmvg=
Subject key identifier:   F8:E6:43:38:2D:C7:BF:87:8C:CB:1D:F3:98:41:6C:FB:58:A1:22:DC
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Certificate issuer:       /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial:       019AF208A6CC85DFD386F838791FF834A9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 05:00:44 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:44 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:44 +0000
Files and hashes:         1: Bd62smJ1C-edCl13IR0Hb5ZPh3I.roa (hash: D8e7F2pk9nxCBOMnmY0ESYCk1Qvc2+eZhlAJre7/lXk=)
                          2: glpdHMRUe--_MG3TqcToADTZm2g.roa (hash: nYyFnTdPiSLG8Bu+HPTjJb4kOHlPj2DnjVnWwqRkp6Y=)
                          3: uBVaw0tuwV8iaumRPWrs_KenhNQ.crl (hash: IGWZaoKBo4hGE6tCaqOOfTwt1HeU8WJLpZbbPxHHKrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:a6:cc:85:df:d3:86:f8:38:79:1f:f8:34:a9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
        Validity
            Not Before: Dec  6 05:00:44 2025 GMT
            Not After : Dec  7 05:00:44 2025 GMT
        Subject: CN=f8e643382dc7bf878ccb1df398416cfb58a122dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:71:2c:4d:cc:03:0f:cd:19:11:c0:83:21:
                    77:c7:51:4f:9d:93:b1:30:2f:d2:6f:f0:19:42:d5:
                    13:40:97:ef:91:1e:a8:6d:f3:bc:dc:55:4b:65:21:
                    6c:71:51:40:32:be:39:d0:fa:8a:13:c9:c6:9b:4f:
                    e8:9f:fe:28:60:e9:3e:3f:c5:34:df:88:d5:be:e0:
                    58:8c:e9:0d:22:fb:4d:20:7f:b9:48:b2:a1:e2:49:
                    c0:1c:19:8b:7b:55:90:73:04:da:28:5c:00:46:8c:
                    a2:a1:38:83:80:2d:e1:9d:cb:af:08:65:74:5a:93:
                    48:8b:28:e9:ce:87:a4:90:9d:f7:a3:2b:fc:de:49:
                    c1:fa:6a:f2:f4:14:9c:36:4a:5a:cb:47:c6:f9:e9:
                    51:a6:45:78:f4:5f:9b:d0:eb:bd:cb:9e:e3:6a:ce:
                    2c:f1:a6:38:83:78:9c:19:a6:c2:7a:0e:12:13:04:
                    09:3a:ca:80:2d:9a:49:6f:33:a3:c8:9a:4e:a9:62:
                    ef:73:05:8f:52:df:50:67:d7:d5:d2:72:1f:ef:90:
                    df:82:45:de:3f:d5:43:58:74:71:41:b2:52:0d:f1:
                    3f:31:9e:0a:f1:70:9d:58:19:9d:8f:27:65:38:51:
                    70:89:62:39:86:97:d2:c2:7b:01:59:05:cb:0f:2d:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:43:38:2D:C7:BF:87:8C:CB:1D:F3:98:41:6C:FB:58:A1:22:DC
            X509v3 Authority Key Identifier:
                keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:40:19:b6:41:2b:09:65:d1:3c:02:85:61:bc:95:bb:47:
         60:c2:97:fe:12:7f:50:e9:5c:7c:92:d7:23:6d:25:36:a8:f2:
         a2:fc:92:e0:a7:d9:26:b4:c2:51:79:a8:03:c0:29:0a:d1:8d:
         d6:d9:0b:37:0e:a6:97:32:e7:c0:a9:7f:93:5d:9c:ca:2d:1f:
         a0:3f:7f:21:c8:a5:3f:a7:a1:d3:b5:35:bb:ee:59:da:e8:6e:
         22:56:6e:89:f6:e5:4d:09:18:94:81:79:53:56:ca:d6:8a:7b:
         b3:95:76:c0:b3:5b:f0:28:c5:1e:31:b1:8d:cf:eb:bf:e1:f3:
         3b:32:1a:af:47:85:23:69:02:38:16:dc:5c:35:9b:b5:9f:28:
         69:5a:ad:31:4d:2a:72:a0:43:d6:ca:d6:98:88:1f:35:a5:fd:
         c8:48:87:f0:9b:05:9d:75:a4:ec:cd:69:b4:cf:b2:71:25:7f:
         31:8f:f1:5f:4d:71:2b:04:76:55:13:2d:fe:8e:6e:bf:28:b8:
         f0:08:11:2a:53:53:76:36:26:4a:fe:92:81:56:79:a1:cd:29:
         75:1c:4c:99:fd:a9:9a:3b:26:87:a1:fe:57:e5:e2:5e:b8:3e:
         a6:44:8f:a3:59:28:22:eb:25:8e:dc:c8:ce:c9:15:47:5d:15:
         30:0f:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:58:35 2025 by rpki-client