This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File:                     ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier:          MkZJ2n0QIh69B6tMLIIQtqwM6fa/SBVFLHrAOfvBCZU=
Subject key identifier:   23:D5:35:DC:D3:FD:65:D2:00:5D:1E:FD:A1:51:C5:06:A0:38:7F:38
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer:       /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial:       019AF1640F2B21564A8F4F369362CB6736E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number:          1065
Signing time:             Sat 06 Dec 2025 02:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:57 +0000
Files and hashes:         1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
                          2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
                          3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: DQTpBzFJwk9o7LZbuVGUL9HJHqoaYfysMReFcipnwFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:0f:2b:21:56:4a:8f:4f:36:93:62:cb:67:36:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
        Validity
            Not Before: Dec  6 02:00:57 2025 GMT
            Not After : Dec  7 02:00:57 2025 GMT
        Subject: CN=23d535dcd3fd65d2005d1efda151c506a0387f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:ef:ce:2c:a7:cf:a5:ac:17:5d:ce:90:2e:
                    94:21:69:8d:b7:7a:a4:37:2f:f9:7d:11:d7:65:b6:
                    ea:19:10:5f:4a:b4:8f:1a:aa:b0:25:f9:17:f1:93:
                    f9:c1:35:2a:c5:54:05:30:ec:68:3b:6f:28:6b:c4:
                    1b:0b:4c:6e:7a:ed:95:1d:6a:94:31:73:97:e5:32:
                    00:cb:38:6a:27:20:2f:bf:ea:bb:23:89:79:c2:ce:
                    d0:c7:05:d3:66:7a:3d:5f:bf:e6:52:06:e5:ba:d0:
                    2b:75:e6:fa:16:92:cc:33:a7:75:2c:a9:58:69:83:
                    2b:bd:11:7e:91:2f:9e:ca:3a:08:d8:9a:b3:10:d7:
                    ea:d4:9a:30:8a:91:9f:d7:8a:bf:ca:13:c6:d9:4f:
                    02:6a:16:3a:2e:43:a1:b1:0d:7e:66:87:e4:65:f0:
                    0d:08:23:a2:4c:f7:4d:c1:91:99:22:77:0c:e9:81:
                    74:f2:ae:2b:35:67:6d:dd:3d:bd:d1:7b:7c:bf:f6:
                    7e:38:75:4c:72:14:3a:9a:07:0f:96:a4:8a:ec:3a:
                    5e:9d:d9:32:ae:b8:af:8d:55:9c:df:33:43:a4:e7:
                    92:a9:3d:05:79:f5:56:73:33:ee:b0:79:e3:69:76:
                    9a:7e:c8:0b:95:43:a3:b1:89:09:90:26:39:32:47:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:35:DC:D3:FD:65:D2:00:5D:1E:FD:A1:51:C5:06:A0:38:7F:38
            X509v3 Authority Key Identifier:
                keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:ea:81:b4:29:62:96:fe:88:92:d1:ec:4b:15:67:92:f1:
         c4:2b:fa:38:fe:31:ed:e2:f8:f3:71:62:de:76:c3:c4:db:42:
         33:93:76:62:bc:09:db:93:a6:b2:6b:57:0a:9e:17:f6:fd:49:
         6f:40:da:d3:44:15:0b:c5:19:11:f1:31:9f:c2:ef:d4:c0:13:
         3f:26:e9:b8:5e:7a:6e:cc:ef:ba:5a:ac:42:04:c3:e3:e7:b6:
         8c:66:13:75:22:48:49:10:eb:94:78:96:99:a6:7c:1d:e8:84:
         89:bc:bb:95:2b:ce:87:c8:df:f2:db:9b:56:ed:f1:14:96:fe:
         22:0d:d1:54:35:80:28:38:44:cd:f0:e9:3e:67:31:34:65:8d:
         cc:c1:8d:57:b8:7b:ae:9d:40:9e:91:8d:77:6f:e8:e7:45:e4:
         8a:ac:82:38:34:fc:49:dc:4b:dd:a4:c6:5e:35:58:13:a0:a5:
         5d:86:62:3b:3d:d1:17:03:bb:90:76:d2:a2:08:2d:d1:8e:29:
         78:26:21:d0:7f:a4:83:c1:6e:f6:0a:0b:1a:fa:e4:33:56:a4:
         87:4e:f5:0e:75:24:3f:f4:e4:29:b3:b6:46:61:f7:e8:6b:ae:
         94:e1:2e:d3:bf:f7:66:3e:0a:9c:fa:43:a1:4c:88:3b:26:38:
         73:b5:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:30 2025 by rpki-client