This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          rhdENM7xPEHhi2ky7Ctsyl0PAoycipOW1K92QLs9RQ0=
Subject key identifier:   4A:44:F6:72:96:06:71:85:6E:65:7D:87:30:15:A7:E6:6B:F4:4A:0A
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019AF42E126B2DDD7136918FF2B25A6A5F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          13FD
Signing time:             Sat 06 Dec 2025 15:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:51 +0000
Files and hashes:         1: Qzb63e7PrJpZnvdh_5KRROvhZ1c.roa (hash: NrGLLIb4hN1ItaaNKC1Rm9N6KTQQi8aKbLrok20ftwo=)
                          2: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          3: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 0+XL72eqckCk9VY9y9qiQAiUuLCChqPBGODGNKc94Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:12:6b:2d:dd:71:36:91:8f:f2:b2:5a:6a:5f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Dec  6 15:00:51 2025 GMT
            Not After : Dec  7 15:00:51 2025 GMT
        Subject: CN=4a44f672960671856e657d873015a7e66bf44a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b6:fd:60:5f:b2:ea:88:20:a2:f1:06:10:c8:
                    d5:92:41:be:fc:30:b6:7a:48:60:23:36:56:63:20:
                    19:d8:ff:e2:3f:07:32:9f:73:04:72:89:87:48:5a:
                    93:5d:e0:d3:d9:a1:76:dd:31:c7:37:c4:df:b1:a2:
                    bb:1b:34:6f:33:de:aa:0d:8e:47:14:d7:c5:20:bf:
                    90:e4:0b:2d:b9:97:8a:4f:cb:71:e1:cb:b7:18:4a:
                    54:dd:24:66:24:3a:a3:90:69:7e:9d:ed:74:6e:7c:
                    30:8e:8d:81:e6:53:e5:72:eb:b4:3e:aa:12:cb:9c:
                    f6:3d:0b:ef:e8:e0:58:da:b3:0b:ab:cb:8b:a1:c8:
                    7f:0d:19:26:15:3f:c2:87:fc:63:e4:c3:5e:7b:3b:
                    c4:1a:94:a9:c6:ff:59:eb:7b:c5:67:2d:d0:ff:92:
                    dd:9e:62:a5:95:8c:0a:8a:48:75:a3:26:61:48:f6:
                    d2:bb:bf:e4:8b:54:2d:62:79:59:af:ed:77:1b:d0:
                    aa:6c:3e:52:66:42:68:86:36:db:07:b7:b8:6e:01:
                    43:80:06:08:9f:77:f7:6d:7c:47:0e:11:95:d4:b2:
                    48:52:14:79:a1:01:41:14:7a:5d:f8:fc:39:eb:59:
                    82:ec:35:c4:fb:b4:7c:1c:5b:aa:78:e2:5c:da:47:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:44:F6:72:96:06:71:85:6E:65:7D:87:30:15:A7:E6:6B:F4:4A:0A
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:e1:3e:09:61:cf:71:d8:c9:60:09:65:a6:ac:94:3f:0e:
         03:c9:7c:c8:9d:0f:c0:9e:8a:f3:0a:97:11:97:ad:3f:7d:50:
         0e:a2:90:38:64:df:f0:d3:4f:68:ca:07:9f:0f:b2:1f:c9:e0:
         01:d2:ed:57:87:e9:ec:90:02:3d:af:a2:3e:ba:ae:2e:20:21:
         1f:5a:1c:fe:ad:b3:22:dd:3b:18:10:68:5d:bf:11:d0:f9:e2:
         6c:2d:52:0c:27:59:24:d8:75:b9:8f:e6:b3:61:4c:ce:d9:db:
         e6:4a:0f:c5:a2:51:12:92:a1:6b:3e:5e:f7:c4:79:00:d1:28:
         a6:6c:53:a3:06:57:b8:d8:5d:39:aa:f6:7d:a5:82:cb:8b:48:
         a5:c5:81:d3:ff:86:16:27:79:e6:b7:4d:1c:5b:b6:78:11:51:
         bd:af:55:18:27:3c:d7:b3:dd:9e:0c:29:d0:cf:56:cc:38:65:
         bf:b5:07:28:c0:f4:83:2e:32:f2:78:dc:1f:e0:16:5a:7b:b3:
         c7:1b:88:4d:13:db:e2:26:11:13:77:52:52:bd:06:d7:89:2a:
         9a:f6:61:5c:cc:2d:81:8f:04:76:e3:a0:83:57:0f:6d:75:ca:
         db:ab:1f:2a:ac:55:b6:24:9f:61:b5:ff:dd:db:1f:07:69:f0:
         05:f0:d0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LhJrLd1xNpGP8rJaal9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUxMjA2MTUwMDUxWhcNMjUxMjA3MTUwMDUxWjAzMTEwLwYDVQQD
Eyg0YTQ0ZjY3Mjk2MDY3MTg1NmU2NTdkODczMDE1YTdlNjZiZjQ0YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67b9YF+y6oggovEGEMjVkkG+/DC2
ekhgIzZWYyAZ2P/iPwcyn3MEcomHSFqTXeDT2aF23THHN8TfsaK7GzRvM96qDY5H
FNfFIL+Q5AstuZeKT8tx4cu3GEpU3SRmJDqjkGl+ne10bnwwjo2B5lPlcuu0PqoS
y5z2PQvv6OBY2rMLq8uLoch/DRkmFT/Ch/xj5MNeezvEGpSpxv9Z63vFZy3Q/5Ld
nmKllYwKikh1oyZhSPbSu7/ki1QtYnlZr+13G9CqbD5SZkJohjbbB7e4bgFDgAYI
n3f3bXxHDhGV1LJIUhR5oQFBFHpd+Pw561mC7DXE+7R8HFuqeOJc2kd0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpE9nKWBnGFbmV9hzAVp+Zr9EoKMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz7hPglh
z3HYyWAJZaaslD8OA8l8yJ0PwJ6K8wqXEZetP31QDqKQOGTf8NNPaMoHnw+yH8ng
AdLtV4fp7JACPa+iPrquLiAhH1oc/q2zIt07GBBoXb8R0PnibC1SDCdZJNh1uY/m
s2FMztnb5koPxaJREpKhaz5e98R5ANEopmxTowZXuNhdOar2faWCy4tIpcWB0/+G
Fid55rdNHFu2eBFRva9VGCc817Pdngwp0M9WzDhlv7UHKMD0gy4y8njcH+AWWnuz
xxuITRPb4iYRE3dSUr0G14kqmvZhXMwtgY8EduOgg1cPbXXK26sfKqxVtiSfYbX/
3dsfB2nwBfDQWw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:34 2025 by rpki-client