This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          leOqcvrcEJ/k2OAWHuY/Tc+HA+pEhgm6xWLAATygbwQ=
Subject key identifier:   48:41:FA:26:92:EC:4B:9F:5C:97:E7:B7:40:20:44:81:DD:BF:63:20
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       019AF16429FD79F3CC8F35D95F1791884DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          06F7
Signing time:             Sat 06 Dec 2025 02:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:04 +0000
Files and hashes:         1: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (hash: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: 5RyKeywc3mpEDt+KTMvwAY/7aGshIQI94LpGrJfpBsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:29:fd:79:f3:cc:8f:35:d9:5f:17:91:88:4d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: Dec  6 02:01:04 2025 GMT
            Not After : Dec  7 02:01:04 2025 GMT
        Subject: CN=4841fa2692ec4b9f5c97e7b740204481ddbf6320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:a3:16:60:80:2f:42:9b:cf:3a:53:c1:3c:
                    87:22:73:ec:36:98:45:52:5c:8c:ad:0b:b7:85:c0:
                    6a:1b:46:8a:db:7a:f0:c1:3f:b6:02:d3:68:45:d1:
                    07:6c:49:b9:f6:1b:80:41:95:cf:13:1b:55:95:d3:
                    e5:22:0c:40:f5:c7:d1:ef:07:bf:61:b3:dd:3b:4c:
                    7b:94:c9:e0:6b:18:9e:b8:b1:3d:c9:17:c8:42:4c:
                    be:05:b8:3d:0e:85:7d:80:8b:aa:01:24:87:7e:08:
                    df:35:20:c3:c6:e1:3c:83:1a:0b:45:84:63:48:30:
                    0f:81:40:c5:71:86:eb:86:24:81:ad:23:79:14:18:
                    d1:9d:21:18:ed:fe:f1:ec:36:52:64:c7:82:90:08:
                    6c:20:c2:bf:99:f8:2a:b0:db:1d:e0:84:b3:aa:09:
                    a2:48:85:0f:dd:96:79:b2:95:a5:40:f1:99:04:ee:
                    2e:1c:d2:88:f5:82:5f:2a:89:2b:e2:84:bb:f8:35:
                    75:dc:01:8c:4f:b5:b8:44:8b:6f:96:78:00:02:eb:
                    19:3b:31:cb:2a:67:57:4f:c4:d6:2e:96:6c:2e:57:
                    ab:8d:fb:ab:22:02:89:d8:e6:11:8f:ce:e1:e2:23:
                    dc:c9:9f:f8:1e:26:79:17:85:e8:f7:93:c2:1b:de:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:FA:26:92:EC:4B:9F:5C:97:E7:B7:40:20:44:81:DD:BF:63:20
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:56:ab:43:bd:8d:67:1d:3d:b9:58:b1:4a:18:b3:47:df:
         e2:f3:91:7a:f1:ed:2c:6e:83:cc:e4:76:4e:65:fa:69:8e:30:
         fd:a7:f9:c5:e2:2c:3c:d2:4c:76:c6:94:23:58:03:6e:e8:92:
         75:03:87:e1:25:00:17:91:8b:17:5f:74:07:65:55:9c:ee:f7:
         2e:41:44:f2:54:cc:3b:bb:77:1d:67:af:95:8f:bc:13:67:fc:
         27:f5:cf:e1:c1:d2:50:e0:f9:39:2f:61:78:09:2d:ad:0b:fd:
         65:77:72:54:df:9a:db:fa:fd:2c:01:15:4f:be:47:b5:21:6f:
         35:0e:91:a9:13:fc:b3:f1:ea:a0:1d:80:7d:f2:57:f6:61:0a:
         d2:7d:55:a7:54:01:a4:7b:e4:2c:3d:af:ce:5e:54:e7:7b:87:
         02:ca:6c:48:cb:c1:6c:c0:84:f3:4e:5c:8f:47:6c:1d:0c:d1:
         c5:04:8c:50:78:64:11:f9:f0:67:06:8a:3b:b0:d6:90:d2:b8:
         d7:ea:ed:9e:ab:5c:fe:f8:fa:57:a5:19:c8:8a:8d:ce:64:8b:
         23:de:be:b3:09:3f:d7:b0:4f:d4:ad:75:b1:b1:31:5e:51:52:
         0f:dd:27:5b:7d:8b:74:98:7f:2f:68:26:8a:cb:da:75:02:0a:
         9f:4e:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:59 2025 by rpki-client