This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File:                     UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier:          Kvgspvq8H1lVKtEsDQpj3MpP/K/JbrbuijAvpA6L74I=
Subject key identifier:   95:E9:FB:20:A7:FF:32:24:DB:31:37:CB:FE:4F:98:41:49:83:00:35
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer:       /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial:       019AF352459CA171A6AE9151A3597BC47F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number:          103A
Signing time:             Sat 06 Dec 2025 11:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:46 +0000
Files and hashes:         1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: EkbZz88YMFuGH4rzlbOfpSAvn9aSMucc2Kzd/MSPZEw=)
                          2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:45:9c:a1:71:a6:ae:91:51:a3:59:7b:c4:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
        Validity
            Not Before: Dec  6 11:00:46 2025 GMT
            Not After : Dec  7 11:00:46 2025 GMT
        Subject: CN=95e9fb20a7ff3224db3137cbfe4f984149830035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:94:be:94:55:91:5b:ee:71:73:a2:1c:1b:
                    66:64:0c:d2:f0:f8:5d:9c:4b:af:b0:30:62:13:b3:
                    09:2b:0c:ce:1e:a7:db:00:a5:54:f3:94:66:a9:2b:
                    7e:9b:53:1b:83:f6:12:ec:48:77:d5:1a:ed:bf:61:
                    31:5c:ed:f9:37:9b:7d:04:92:b3:10:19:c3:3f:db:
                    7e:d6:af:96:b2:35:c3:12:8f:ad:30:04:fd:52:55:
                    17:90:10:90:8e:8b:54:0f:ed:b6:9f:ca:9d:3a:7b:
                    e5:90:e6:ca:50:19:7f:e6:1b:ce:3b:73:c0:4d:17:
                    ed:9d:db:dc:46:00:1b:ad:4e:45:1a:d5:72:49:6b:
                    13:6b:11:6d:4b:7e:7d:1d:d7:09:6e:20:44:66:c4:
                    c7:4b:4a:d3:41:cc:91:f3:bc:0b:6f:6b:56:97:8a:
                    24:45:a3:07:c6:c4:a3:96:36:e6:d3:48:6c:a0:47:
                    ba:ed:e7:6c:eb:b7:b4:56:93:92:35:d5:73:24:ae:
                    c3:a0:75:f3:16:a3:2c:e4:c9:47:3c:42:a2:10:24:
                    88:9f:73:fe:5d:67:99:06:2d:3b:bd:f5:24:bf:da:
                    9a:8d:54:b2:e6:23:31:69:94:d6:1f:d1:27:8b:bd:
                    f0:3a:e4:3e:eb:50:4f:f4:ef:7c:e8:bb:54:6e:ff:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E9:FB:20:A7:FF:32:24:DB:31:37:CB:FE:4F:98:41:49:83:00:35
            X509v3 Authority Key Identifier:
                keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:de:82:75:83:f7:af:07:fd:bd:87:b1:de:40:8c:3d:1e:5c:
         40:8f:e7:21:d3:ec:db:e9:3d:cf:9a:27:a9:7c:18:35:a5:1f:
         0f:a3:52:06:e7:d8:2d:56:1f:03:bd:b8:ec:b4:72:22:8a:ed:
         f0:19:53:e9:cc:76:73:c9:4b:a2:0d:28:e8:f1:f3:74:da:ea:
         a2:ef:02:83:b1:5a:3f:7d:85:9b:45:61:ec:a9:2e:d6:cd:1c:
         35:5b:54:f8:36:46:71:02:30:1b:a7:0c:ba:95:ea:07:09:e0:
         c4:42:42:0f:90:28:5d:2c:81:8d:d1:1a:e1:da:3b:d7:0a:8a:
         01:0c:09:18:9b:58:55:20:7b:07:ff:7d:46:ff:3c:17:77:4f:
         d7:78:1b:a0:e6:d7:68:7f:03:2e:c0:d9:55:aa:ee:21:ea:e4:
         3f:87:61:ea:6f:2e:ce:17:71:f3:a6:cf:f1:7d:c7:d7:6f:db:
         ed:22:56:c4:3c:33:f4:ee:fe:55:fd:41:55:7b:14:78:a9:8f:
         1d:5b:ab:fb:6d:a4:5d:48:ef:d6:74:4a:c8:9a:8f:d3:0d:f9:
         cb:02:94:6a:f2:b3:7c:ff:8d:d5:0b:4b:45:c2:db:22:56:dd:
         7a:4a:92:63:65:74:aa:0d:12:77:ae:4f:a1:d5:85:81:9e:5e:
         44:8f:53:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzUkWcoXGmrpFRo1l7xH9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWZlN2U4YjlkZTY3NTkxMzEyMWU3ZWJiNDIyNmI2MmQw
M2IxY2IwHhcNMjUxMjA2MTEwMDQ2WhcNMjUxMjA3MTEwMDQ2WjAzMTEwLwYDVQQD
Eyg5NWU5ZmIyMGE3ZmYzMjI0ZGIzMTM3Y2JmZTRmOTg0MTQ5ODMwMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VSUvpRVkVvucXOiHBtmZAzS8Phd
nEuvsDBiE7MJKwzOHqfbAKVU85RmqSt+m1Mbg/YS7Eh31Rrtv2ExXO35N5t9BJKz
EBnDP9t+1q+WsjXDEo+tMAT9UlUXkBCQjotUD+22n8qdOnvlkObKUBl/5hvOO3PA
TRftndvcRgAbrU5FGtVySWsTaxFtS359HdcJbiBEZsTHS0rTQcyR87wLb2tWl4ok
RaMHxsSjljbm00hsoEe67eds67e0VpOSNdVzJK7DoHXzFqMs5MlHPEKiECSIn3P+
XWeZBi07vfUkv9qajVSy5iMxaZTWH9Eni73wOuQ+61BP9O986LtUbv/IhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXp+yCn/zIk2zE3y/5PmEFJgwA1MB8GA1UdIwQY
MBaAFFCf5+i53mdZExIefrtCJrYtA7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMt
MGI0NzdjYTczYWM2LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMtMGI0NzdjYTczYWM2
LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlt6CdYP3
rwf9vYex3kCMPR5cQI/nIdPs2+k9z5onqXwYNaUfD6NSBufYLVYfA7247LRyIort
8BlT6cx2c8lLog0o6PHzdNrqou8Cg7FaP32Fm0Vh7Kku1s0cNVtU+DZGcQIwG6cM
upXqBwngxEJCD5AoXSyBjdEa4do71wqKAQwJGJtYVSB7B/99Rv88F3dP13gboObX
aH8DLsDZVaruIerkP4dh6m8uzhdx86bP8X3H12/b7SJWxDwz9O7+Vf1BVXsUeKmP
HVur+22kXUjv1nRKyJqP0w35ywKUavKzfP+N1QtLRcLbIlbdekqSY2V0qg0Sd65P
odWFgZ5eRI9TVQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:37 2025 by rpki-client