This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File:                     uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier:          li9+KwnX6p2lQC2YX6bIPm9Xjhy8tSZ+/BdV9MBSolg=
Subject key identifier:   5F:97:76:07:5D:96:67:7E:E1:37:41:6F:10:4D:DF:F8:97:0B:A7:E0
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer:       /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial:       019AF3C0A7D807026A84A4CC59541AFFCDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 13:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 13:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 13:01:20 +0000
Files and hashes:         1: kLOHs2aUXUatQyKVPIEe-1d92MQ.roa (hash: B5tdEXGniW22KjPp3AjVEy2zyRZTbkwM1WWA2qg8bSc=)
                          2: kqDek8H-nDrW1Zbe8JT5Vc5TRHo.roa (hash: nO5OjxTeZircSn1tyTNcEKWJ6F7KhmQpyf8WHUeT9FU=)
                          3: oUOtRV7pUYw15-5AdTCHfTFJYmA.roa (hash: 6WpA5rDmOxSR5I+UxNUiJzVqMhIhP9GYpFZRnnoMCmg=)
                          4: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: G8KKRlysDNLPoMXem8VUTDi/eMJVTg1y156/6vULRKk=)
                          5: v7faT88h9FQXwmd6ooV79XLEuDc.roa (hash: CNgJmJnrj1ZC4LjfHCAq1xid9gV3zArUgelpQMRzNq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:c0:a7:d8:07:02:6a:84:a4:cc:59:54:1a:ff:cd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
        Validity
            Not Before: Dec  6 13:01:20 2025 GMT
            Not After : Dec  7 13:01:20 2025 GMT
        Subject: CN=5f9776075d96677ee137416f104ddff8970ba7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3f:a7:76:cc:45:4d:d3:0f:aa:ab:3c:49:9d:
                    66:b1:18:44:86:02:75:ce:20:8e:b3:23:8c:c1:e8:
                    f6:20:27:2a:d0:04:da:ce:36:92:ca:4f:b4:fa:bb:
                    76:06:4c:b7:e7:9a:90:8d:dd:70:d8:7e:de:8e:77:
                    f4:17:d3:6d:4a:34:b9:be:10:80:db:ab:ec:cd:87:
                    a8:77:be:85:86:66:53:2c:50:20:0e:0b:b2:c6:64:
                    fb:b6:72:5a:2f:43:e1:48:8b:e2:a5:b9:2d:c5:dc:
                    0c:f0:26:e2:b7:54:77:25:49:22:d7:45:c0:a4:b2:
                    b0:ea:21:d0:f3:52:6c:27:65:52:d3:2b:bf:2f:73:
                    ed:b9:c4:6a:1b:2d:29:14:cb:ca:c5:aa:a4:d0:29:
                    90:b0:81:cf:e5:6a:c7:79:3e:3c:48:f9:9a:71:5d:
                    b7:08:38:96:0a:43:b6:03:9f:dc:2e:86:40:9d:49:
                    a1:5c:10:09:32:e7:af:23:6f:3a:5c:23:27:59:82:
                    46:c7:00:68:97:b5:17:be:fa:f4:0b:62:46:0f:ec:
                    cb:44:d8:b4:56:c0:b3:ec:8d:bd:1b:79:cd:73:e7:
                    38:b9:b4:2a:a0:af:8e:78:06:59:b0:f1:35:04:1c:
                    88:b9:a6:00:3d:b3:7b:3b:eb:80:27:fc:b4:2c:5c:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:76:07:5D:96:67:7E:E1:37:41:6F:10:4D:DF:F8:97:0B:A7:E0
            X509v3 Authority Key Identifier:
                keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9c:10:3f:4b:5f:f5:e8:cf:63:1f:fc:9c:cf:eb:27:d4:01:
         b8:f7:9a:26:17:51:ba:85:02:08:ba:b8:bf:18:69:0b:15:68:
         e6:31:e3:6e:f3:e0:9f:28:6c:3d:5d:0a:17:2c:5a:df:f9:6d:
         e8:f6:49:d2:1b:25:7e:02:26:72:98:09:5a:a5:27:18:7f:2b:
         34:47:81:d3:2c:4f:29:8b:de:2d:65:1d:6b:27:cb:2a:f4:0b:
         e5:4d:1d:8c:f4:fb:b6:31:3f:75:7f:6b:e5:1e:92:6d:ec:c0:
         a6:82:fd:45:dc:92:0b:a6:3e:4d:d0:d2:d2:b5:bf:0d:b3:f1:
         ec:4c:14:12:69:3c:c1:fb:d2:95:87:85:b5:62:cb:c3:3c:db:
         16:2a:32:1f:c3:84:8f:4d:02:bf:33:e0:82:e9:12:25:56:b4:
         94:75:ea:84:d8:eb:27:fe:22:2a:96:d2:ad:64:45:2a:1b:4f:
         87:6a:a7:b2:58:0d:aa:4c:37:ef:80:80:11:a4:d8:f0:0f:24:
         f6:6a:f1:bd:99:69:cf:b8:a3:b5:5d:5a:5a:7b:95:90:f6:ff:
         e1:f9:19:8c:99:25:73:d1:6c:43:96:7f:66:53:cc:0f:83:d3:
         a2:b2:ab:75:34:dd:cd:8f:1e:47:52:34:b6:c5:28:cd:96:8f:
         5f:a0:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:56 2025 by rpki-client