This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File:                     _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier:          0opAWFvUBDYJgxoh3Kvarxr+NBzO37XI5uiIivkg+Mo=
Subject key identifier:   D3:5E:BF:9E:51:92:D7:07:1A:65:E0:73:9D:6C:3B:38:55:8E:9D:05
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer:       /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial:       019AF24002794B95B7D0CB9ABB9B4B059123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number:          88
Signing time:             Sat 06 Dec 2025 06:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:12 +0000
Files and hashes:         1: KiaDjTYmq6Nuv_HakZGoHxO1dPQ.roa (hash: zaJBSu3WJ+4GT8UiOKSzXjTxspUORjdQRRXxILtHbuo=)
                          2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: qEuTsb9AGZfDPPfh+ZIq4bIblm2QGyxsR2rDWjNeL6c=)
                          3: uhPMNPhZqA_HAHJGGHQJzVsVHKo.roa (hash: 1sUZfTZAirMWw4gpIHAyzWjKdpLh/vSDHu9mudU6a9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:02:79:4b:95:b7:d0:cb:9a:bb:9b:4b:05:91:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
        Validity
            Not Before: Dec  6 06:01:12 2025 GMT
            Not After : Dec  7 06:01:12 2025 GMT
        Subject: CN=d35ebf9e5192d7071a65e0739d6c3b38558e9d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:aa:06:c7:56:28:5a:01:36:c8:10:95:06:
                    a6:20:1e:b1:ca:ac:39:ce:cc:d8:a1:c2:4e:c6:6b:
                    f1:d1:b7:0a:cd:2b:db:15:32:b3:fb:ab:f9:e4:a7:
                    d5:f1:cf:3d:49:ec:0e:f0:e5:be:9d:af:e0:0e:b3:
                    da:42:55:91:2f:93:26:95:6e:72:19:27:62:04:ef:
                    14:72:94:33:f0:ac:2e:d1:76:05:d1:fd:48:b0:45:
                    a0:b2:6f:21:38:64:e7:31:10:03:50:f5:b4:c2:a7:
                    d5:c4:57:62:89:e7:03:22:9a:14:72:7d:60:18:37:
                    00:81:da:d4:4b:77:cf:ad:e0:9e:a7:f0:62:1a:86:
                    7e:67:a9:3e:29:28:ee:6d:c3:44:63:37:0d:89:cd:
                    fd:fa:f6:61:f6:f0:66:4f:e1:51:a9:6c:c8:ea:40:
                    0a:33:7c:34:3f:2f:a2:99:de:71:5f:a6:e0:f7:9e:
                    3e:e4:a2:b4:af:53:ff:32:ac:b4:92:b6:3c:c7:6c:
                    7b:5b:36:e6:e3:18:6b:87:90:1f:59:c7:05:b4:9d:
                    0d:12:35:36:bd:c4:5f:fc:25:4a:76:9d:a3:cf:26:
                    53:56:05:30:e2:6b:30:d8:72:c7:93:7a:d8:be:b5:
                    00:e9:e5:55:8c:b3:3b:ba:9c:b4:3e:ad:ce:0b:88:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5E:BF:9E:51:92:D7:07:1A:65:E0:73:9D:6C:3B:38:55:8E:9D:05
            X509v3 Authority Key Identifier:
                keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fe:8b:89:9a:d9:6c:07:b8:38:9d:35:56:07:69:11:26:75:
         c9:95:30:ad:f9:b3:4e:7f:90:1e:b3:1e:b6:e4:ee:90:58:57:
         52:de:ee:8d:78:dd:4b:6e:28:4c:31:1d:d6:74:68:51:e2:0e:
         e5:f7:d8:2e:b6:f0:f3:88:34:4f:a6:e8:7e:85:61:b7:19:ee:
         77:b9:bc:92:fd:40:56:a5:1e:15:d8:8c:f9:8d:e8:b3:cc:dd:
         9f:3f:ac:ed:1a:35:7c:5a:6b:74:d2:ce:c4:87:e8:3b:48:e5:
         cd:1b:94:61:2a:63:84:cd:e4:db:3f:f5:64:c1:75:31:26:a5:
         7c:a5:fb:0f:d4:7e:37:01:e2:c6:2f:3d:86:40:03:8d:30:99:
         2a:a1:bb:da:48:c0:ec:3b:b2:8d:b5:b6:21:38:72:af:47:a0:
         db:ac:64:5a:22:03:41:1f:28:96:95:2f:6d:06:b4:bd:51:44:
         02:90:3a:45:42:cf:69:08:74:59:12:79:68:ef:10:88:3f:74:
         6d:11:d4:98:38:11:07:60:40:6b:8b:ca:49:f8:9c:e7:a0:53:
         9b:16:9f:28:39:20:24:03:23:7f:4d:99:a6:ca:50:1f:e5:8a:
         3a:21:5b:d8:c8:c4:d1:08:05:90:8d:55:86:f9:16:9b:23:64:
         9c:92:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:45:12 2025 by rpki-client