This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File:                     Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier:          sNl/AkjFmiQnR9mgCXX7WkBMUVG5jHiowuvLAcgy/7M=
Subject key identifier:   19:8E:75:BD:BE:7F:E4:5F:84:38:8C:9D:C7:74:0E:E5:68:E0:4D:77
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer:       /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial:       019AF1D1E89D23456ECBDA9FABBA2BDEA261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number:          1602
Signing time:             Sat 06 Dec 2025 04:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:56 +0000
Files and hashes:         1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
                          2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: F0C2MxUaHV+R6NCMhOVaG9mdoh8oT373nBt3QEDuqUY=)
                          3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e8:9d:23:45:6e:cb:da:9f:ab:ba:2b:de:a2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
        Validity
            Not Before: Dec  6 04:00:56 2025 GMT
            Not After : Dec  7 04:00:56 2025 GMT
        Subject: CN=198e75bdbe7fe45f84388c9dc7740ee568e04d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:fc:99:42:db:db:78:b2:17:e4:23:94:1d:
                    2f:b6:07:47:36:d1:01:39:3a:cf:85:8a:12:26:0f:
                    0a:c1:e1:e3:d8:ae:74:48:4e:6e:3f:ba:77:d6:8c:
                    d2:d0:45:67:94:d9:dd:a5:82:d3:b6:a2:f0:e1:2f:
                    e2:55:c5:9b:23:ff:bf:4f:b2:38:e9:8b:d8:a5:11:
                    bf:bb:b2:56:e8:cf:0b:8d:35:99:8d:42:76:31:95:
                    2e:67:7c:a4:b7:cf:30:6d:61:14:aa:e3:27:a7:bd:
                    b7:f2:b7:b1:1b:b2:18:0c:2e:c3:d9:d5:63:b4:77:
                    65:17:7c:25:b6:c2:d0:15:53:68:d5:f7:3e:c9:07:
                    53:c9:79:bf:d4:6a:a1:9e:97:d5:22:47:80:c5:05:
                    f3:cf:ba:ab:93:e5:0b:f1:59:48:ab:e0:0d:ea:67:
                    58:6a:20:a0:65:31:ee:8e:37:be:d6:04:e8:f9:7b:
                    d8:d9:f1:98:b4:c0:27:5b:25:7d:74:03:46:89:76:
                    db:47:e2:45:83:30:bc:09:12:0d:6a:32:68:1c:28:
                    4b:53:ea:20:24:45:83:f5:f1:7c:90:7a:71:71:3a:
                    fc:59:54:f2:68:d6:12:6c:90:0f:d0:0c:fe:ba:10:
                    c4:21:ac:d4:07:c6:63:2f:cc:da:7b:a2:cf:cf:5c:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8E:75:BD:BE:7F:E4:5F:84:38:8C:9D:C7:74:0E:E5:68:E0:4D:77
            X509v3 Authority Key Identifier:
                keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:63:00:9e:a1:26:51:2c:a5:70:27:d3:8b:ee:f6:d8:22:
         7a:2f:d6:e8:54:ef:d0:95:47:b1:f7:bf:c0:54:06:ce:1c:86:
         63:dc:64:54:a1:49:99:fd:1e:5d:19:2a:f0:2e:0b:6b:d5:46:
         d5:81:97:a1:a4:e5:ec:e4:e3:54:a1:0c:09:e0:56:32:cb:d7:
         54:d7:74:0b:78:86:7f:23:4e:56:5a:20:b6:c6:1e:c9:07:0a:
         b4:70:f4:bc:6c:41:0a:df:5e:04:b5:8f:3d:e0:40:ba:02:4b:
         ac:c9:c9:bb:13:92:f8:70:6c:41:52:5d:00:8c:7e:66:66:67:
         04:e6:4b:8b:73:80:a0:3f:29:db:ab:00:a8:2e:a5:87:3b:15:
         ac:7d:97:fe:00:98:ed:d9:ab:fa:e8:02:52:53:75:c3:69:2e:
         51:8d:5c:58:99:72:cf:66:ca:84:b9:c0:03:f2:67:15:30:f9:
         14:5c:bb:e7:2f:92:8f:40:94:51:34:c0:1b:73:35:84:5e:e3:
         4c:54:2e:7f:94:07:da:e5:26:4a:60:35:4d:bd:2a:10:55:29:
         bc:dc:6f:81:47:7e:9c:34:0e:72:88:6a:3d:25:a2:5f:b9:92:
         2f:76:4e:72:ee:63:1e:dd:11:60:f9:9c:01:0b:c2:68:c6:3b:
         1e:c6:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:18:50 2025 by rpki-client