This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
File:                     UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json)
Hash identifier:          Mkl2IU0W8R4lwT3Ri9DE1sEYKpQsnugEnLP63O+B5u8=
Subject key identifier:   8C:25:EE:B4:5C:87:94:AC:21:B1:D1:89:CC:87:A3:AD:24:DB:EB:F0
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       019AF2AD78BAE65C51B5D263020E65E92FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
Manifest number:          1841
Signing time:             Sat 06 Dec 2025 08:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:46 +0000
Files and hashes:         1: 1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa (hash: 6l4N9QRRCNsTigbsBNhTvCtVipnXhrnl+qFxr2bq3fo=)
                          2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=)
                          3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=)
                          4: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=)
                          5: Kruvgpwuqm6sINlu2g0UdxGTt40.roa (hash: B1Hb3yrdIOl2N6zpO7c45xw8rxyA6hHtaoJIQXik8Xg=)
                          6: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=)
                          7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=)
                          8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: koDyh3XNvieYQ1VVvdhijYC+r/AAKQwUXzu/YY/CTio=)
                          9: dZ61aXpp_DQ_DeLVDYFP6BdIHXQ.roa (hash: sBhkEWCuGRljaolRSEsc1RfhJZuAvgHQSHKRaUnk170=)
                          10: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=)
                          11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:78:ba:e6:5c:51:b5:d2:63:02:0e:65:e9:2f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Dec  6 08:00:46 2025 GMT
            Not After : Dec  7 08:00:46 2025 GMT
        Subject: CN=8c25eeb45c8794ac21b1d189cc87a3ad24dbebf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:a5:8c:b6:03:bd:82:8b:b9:fe:59:a5:5d:
                    9e:6f:4c:b5:b4:59:55:bc:94:b6:ef:4d:34:35:7f:
                    fc:44:aa:9f:34:a5:b8:1d:96:9d:a9:bf:24:22:69:
                    75:90:b7:86:e6:11:c8:b4:e7:21:b5:2f:05:ca:11:
                    aa:c7:77:73:ce:1d:22:61:ec:e2:a9:44:d8:0d:0c:
                    1f:e4:da:71:26:61:e6:55:e5:d8:5a:05:a9:15:27:
                    72:75:62:81:e2:0e:18:41:73:9c:17:7f:4b:8d:af:
                    22:99:73:5f:a6:31:b4:4e:f3:69:85:3d:73:3a:cd:
                    ef:1c:27:73:62:87:f0:84:88:4f:aa:e6:ef:02:b9:
                    e1:00:13:05:4a:f5:70:ed:bb:33:0a:2e:8a:67:58:
                    7d:7e:f1:06:39:37:fb:83:4d:54:5b:1c:aa:0f:29:
                    6d:bc:02:23:9a:a0:52:38:f4:c8:b9:de:f8:14:cf:
                    f5:32:db:d5:4c:d0:e7:2c:38:4c:3d:37:41:fe:3e:
                    b3:41:60:7f:31:28:6f:a4:9b:fe:59:8e:c5:58:87:
                    01:9a:a5:32:23:04:91:b3:a4:7a:aa:a5:16:a8:72:
                    e7:06:f2:c4:b7:e2:f6:bb:24:e7:a9:59:cc:d8:31:
                    4e:71:3f:90:18:df:09:d3:9e:a3:64:25:31:30:23:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:EE:B4:5C:87:94:AC:21:B1:D1:89:CC:87:A3:AD:24:DB:EB:F0
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:bc:5d:19:f2:85:cc:74:a4:a6:88:2e:fc:28:4e:15:77:
         7d:15:4e:02:9c:2e:e0:68:5f:d0:d0:d1:c7:45:e0:2f:89:d2:
         1b:41:64:2f:28:62:d9:30:60:4b:1f:b4:a2:88:a0:92:1f:d4:
         8b:49:b8:18:a3:8f:ba:ed:d6:22:57:a8:a5:cd:9d:ac:1d:d2:
         d5:40:77:6c:3c:bc:d8:cd:e9:3d:ed:08:67:53:eb:ac:70:7c:
         42:41:0b:e2:6b:d1:63:2b:04:cf:c3:53:28:bf:fe:ac:3a:52:
         dc:d0:af:7f:e8:bf:0c:7f:d5:50:0d:94:df:8b:c5:8e:34:7d:
         ed:19:28:13:91:c8:9c:54:2a:ca:5e:10:27:8b:43:27:43:89:
         04:dd:92:df:34:24:c5:0a:c8:ce:7f:24:25:cb:25:df:da:0d:
         6c:10:08:ea:6d:20:b4:4e:48:fc:93:8e:cd:00:bf:c3:ed:73:
         95:96:42:5a:e5:dd:13:21:f8:73:eb:31:a7:60:81:45:2f:73:
         ba:a6:6b:53:43:85:53:c1:21:8d:86:35:23:19:ee:67:b0:03:
         03:c6:cb:47:bc:83:7f:54:3b:41:f5:cd:f1:76:bf:4e:b0:7d:
         2b:1f:bc:7b:08:84:20:30:89:c9:fa:bc:fd:67:a4:ba:f7:1d:
         ea:db:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:07 2025 by rpki-client