This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File:                     3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier:          AGO5AQn1LTAxduq0sqQCVkrGYzjc8o5LEDWqZIF7LmI=
Subject key identifier:   A5:64:B8:D5:F6:E2:53:45:9E:FC:CD:1A:8C:02:E4:69:09:89:7C:67
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer:       /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial:       019B318D1E69032BD16B403434F3FF5BF0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number:          0E10
Signing time:             Thu 18 Dec 2025 13:01:30 +0000
Manifest this update:     Thu 18 Dec 2025 13:01:30 +0000
Manifest next update:     Fri 19 Dec 2025 13:01:30 +0000
Files and hashes:         1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: 5DGI9l54fuUHh/Q1ds1bEQ8OXXYY4/TfEN1h5Nuc8oU=)
                          2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
                          3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:8d:1e:69:03:2b:d1:6b:40:34:34:f3:ff:5b:f0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
        Validity
            Not Before: Dec 18 13:01:30 2025 GMT
            Not After : Dec 19 13:01:30 2025 GMT
        Subject: CN=a564b8d5f6e253459efccd1a8c02e46909897c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:ba:2a:45:da:9a:49:ce:a4:2d:74:ba:e1:
                    08:a6:28:70:69:bc:01:c4:a4:92:c7:6a:64:d2:62:
                    fa:78:47:5f:80:0b:43:d9:c1:6e:f1:2e:fd:bb:31:
                    5b:64:0f:d5:86:05:4a:f9:c0:cd:5c:73:d4:73:3c:
                    44:d9:91:c4:45:cd:7d:87:0a:28:8c:96:fd:4a:ff:
                    b3:bc:4c:fb:62:40:1d:be:f1:a0:f4:8f:ff:94:b7:
                    2f:78:7e:2e:30:f6:15:69:a9:a8:09:02:31:09:cf:
                    63:70:9c:4c:b3:47:c5:ce:50:ae:f9:e5:ad:ec:a7:
                    67:4f:7c:09:92:89:20:82:a9:02:d6:a6:10:91:8e:
                    12:f3:3b:c3:da:eb:09:64:0e:79:24:10:a9:67:4a:
                    86:a7:a1:ab:b6:3f:04:c6:9b:6c:45:96:57:f6:e9:
                    88:7d:35:01:fd:1e:cd:fc:70:69:41:30:76:9f:d8:
                    64:11:0a:c7:cb:53:fd:27:0e:9b:e6:51:73:fa:4d:
                    ef:74:20:c3:8a:6f:b5:20:fa:c1:57:79:84:2b:82:
                    fd:2e:ae:38:aa:e4:28:37:31:15:ff:af:1b:70:f9:
                    58:e5:97:9a:7b:8d:9f:f2:6b:fb:72:0f:fd:ef:ad:
                    c6:aa:a8:fd:05:fa:a8:b6:b4:a2:76:f6:8b:d2:28:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:B8:D5:F6:E2:53:45:9E:FC:CD:1A:8C:02:E4:69:09:89:7C:67
            X509v3 Authority Key Identifier:
                keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:cb:89:af:2d:28:6c:fa:06:65:51:e2:32:aa:0f:49:db:59:
         3a:1b:0f:67:1c:6a:ae:bb:99:13:d4:44:57:df:d3:7f:47:c5:
         90:93:86:ba:a2:47:bf:bf:ac:c7:dd:2e:f5:0b:5f:26:30:e9:
         0b:e1:1f:c4:0f:40:35:56:8d:11:ae:29:c3:7e:ac:6f:9b:63:
         dc:03:f3:38:1b:b1:25:d6:e1:23:b4:bc:1d:10:e4:a3:2b:9f:
         5c:c2:2c:a1:ce:8a:7f:f0:b8:24:56:76:ed:2b:02:4a:09:d6:
         cb:4c:1b:1d:a4:f7:fd:de:c2:06:ea:e2:4a:25:49:f8:82:fe:
         cf:87:88:c1:98:03:37:a0:0a:21:64:ba:87:6b:63:72:62:c6:
         ee:9b:db:ea:bf:9e:ab:f7:6e:ed:55:71:e5:14:be:42:fb:54:
         57:6f:ed:3c:b6:23:d0:34:9b:cf:10:6d:0b:c2:bb:08:6d:61:
         6e:ff:14:9c:c5:98:43:aa:4d:3e:34:63:15:88:8f:af:b5:02:
         53:c4:7b:04:00:26:d1:71:29:c8:42:17:78:ca:ee:db:8e:e1:
         10:24:9f:9e:3b:8c:3c:17:6f:2e:e4:2c:62:e8:3b:5c:ad:7a:
         53:4e:c2:15:1a:d1:da:27:3a:6c:f3:fd:fe:61:17:44:15:15:
         68:b5:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:46:06 2025 by rpki-client