This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
File:                     Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft (raw, json)
Hash identifier:          uoOWy4JILvzA/4vcxSJS53ec/9/l5vwo13X7yvpEK9A=
Subject key identifier:   4C:D4:0C:6B:C5:2E:6D:09:1A:67:50:02:B3:7E:C1:EB:8B:0C:5B:CB
Authority key identifier: 52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
Certificate issuer:       /CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Certificate serial:       019AF61CE3674BBB4A328C8B9176A620CEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
Manifest number:          1762
Signing time:             Sun 07 Dec 2025 00:01:19 +0000
Manifest this update:     Sun 07 Dec 2025 00:01:19 +0000
Manifest next update:     Mon 08 Dec 2025 00:01:19 +0000
Files and hashes:         1: 5Hag6P9QZzNJGQQPElsAvDoZXrY.roa (hash: sbCnjoQN/zwpc81NILJvfLGG8eJWgqQYFOcEqkbBNRk=)
                          2: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl (hash: w0gWn+4ZVj3X7RKEYjcHBwF8LOcmMRrtggSFpLWKMg8=)
                          3: lQnsuSPRzwbhpl5HgEOQpZDD34k.roa (hash: IPjYSRDjQRK4ZxgGrRlNzR9WIDEqNLvDqZwGEGyoqM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:1c:e3:67:4b:bb:4a:32:8c:8b:91:76:a6:20:ce:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
        Validity
            Not Before: Dec  7 00:01:19 2025 GMT
            Not After : Dec  8 00:01:19 2025 GMT
        Subject: CN=4cd40c6bc52e6d091a675002b37ec1eb8b0c5bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:ca:3d:13:a8:95:b6:c4:ae:cb:7a:ef:b1:
                    3b:d8:d1:53:31:c1:33:be:f1:d1:bc:71:81:37:ce:
                    43:7a:f2:30:0b:1b:76:9f:72:9d:bc:f8:8a:64:a5:
                    8a:e1:cc:45:6d:00:e6:ec:32:3e:e3:78:d4:54:78:
                    ad:5d:54:5e:46:f7:93:66:8e:5d:f7:db:bd:34:f9:
                    df:2e:9c:86:47:95:35:59:14:3e:36:f9:13:f2:21:
                    81:9c:56:43:46:39:9e:97:2b:e4:df:cf:71:7a:f6:
                    62:95:cc:62:20:20:50:71:89:94:ee:3b:4d:0f:64:
                    41:7a:6b:ee:21:a0:94:dd:01:5b:4c:c9:97:fd:2e:
                    0c:a8:e7:0e:da:18:3a:26:50:51:2f:a5:3a:9c:51:
                    49:7e:c3:f2:49:a7:df:f7:65:de:d4:1c:9f:7c:5a:
                    02:af:9b:71:54:d0:ed:85:40:be:45:3e:e9:c7:47:
                    b3:81:12:b7:47:96:63:32:98:af:b0:7d:00:39:5f:
                    90:bc:1a:ba:95:c1:88:e6:50:3e:a2:d6:c9:57:d7:
                    03:56:b9:c7:f5:93:62:69:94:8f:9f:bd:8a:1b:fa:
                    30:e8:b0:c1:b9:77:9f:ad:e8:80:bb:b3:e4:e0:dc:
                    18:2e:da:70:cd:17:7e:cb:f8:05:eb:51:48:81:02:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D4:0C:6B:C5:2E:6D:09:1A:67:50:02:B3:7E:C1:EB:8B:0C:5B:CB
            X509v3 Authority Key Identifier:
                keyid:52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:af:c3:e2:80:b4:71:f9:8c:f2:48:6e:c7:b9:a3:90:ac:4d:
         6d:8c:b8:b5:2d:21:69:cf:a6:7d:d6:15:82:4e:70:90:84:43:
         40:8c:7c:87:2d:fc:1f:0c:ba:5d:bb:58:04:83:12:bb:6f:18:
         2e:37:95:42:b0:43:d8:98:cd:8b:d7:73:c8:90:7c:b3:de:54:
         aa:73:92:9d:7c:32:55:e4:0e:f2:8d:01:17:8b:c0:d2:a7:73:
         fb:f8:97:93:7f:c9:38:ac:c4:b7:76:c5:62:29:84:65:a9:8d:
         71:96:4a:30:d5:5b:7f:64:0f:ac:04:9c:8c:6a:a6:ea:b6:40:
         1e:ed:e0:a4:91:d4:6b:5d:b6:ce:0b:22:5e:1e:a3:67:2a:ec:
         49:2d:be:2a:20:1c:cc:4a:0d:d4:0d:db:92:ec:d4:fa:43:85:
         e7:43:0d:a6:3b:b1:60:8d:6d:cb:b7:db:78:e2:ae:88:82:37:
         d8:ad:70:d5:d1:ec:2e:b0:a5:7d:86:64:18:b5:14:46:c6:ae:
         7c:e7:cb:f1:b1:aa:35:43:47:79:b6:8b:2f:b8:f0:39:0e:e2:
         5f:8d:09:7e:54:6d:a9:7f:de:31:c6:41:84:94:29:9a:70:44:
         ef:65:5a:e3:22:3b:ba:44:d7:d1:5c:c8:1e:94:81:c3:57:c0:
         cf:3f:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:03:53 2025 by rpki-client