This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File:                     UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier:          k53e2Ok3EVsTYcW4snSYNzzQtzvmfkefu46nwZGF5S0=
Subject key identifier:   3F:9E:7C:AB:77:A2:D3:2D:F9:89:55:C3:A3:B2:58:4D:E9:BA:96:AB
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer:       /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial:       019AF1D238C6BFB6FA6384CD52EC0DD55292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 04:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:17 +0000
Files and hashes:         1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
                          2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
                          3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: 6PR0hxBp9Sp6EpZQGIjEk0KY+JNl+SDGjQhUr0jZQjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:38:c6:bf:b6:fa:63:84:cd:52:ec:0d:d5:52:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
        Validity
            Not Before: Dec  6 04:01:17 2025 GMT
            Not After : Dec  7 04:01:17 2025 GMT
        Subject: CN=3f9e7cab77a2d32df98955c3a3b2584de9ba96ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e2:48:7e:c1:0f:9d:88:d7:31:6c:35:dd:41:
                    fb:00:d5:d1:81:76:a2:fe:1e:02:9c:58:b4:60:77:
                    19:f1:69:5a:9a:7f:cf:eb:ff:be:62:a3:e5:50:ab:
                    95:d1:52:cb:c6:5b:31:b2:51:13:ee:4d:9b:4d:13:
                    cd:42:7e:e6:58:91:c3:f9:60:b4:96:5a:b5:44:5b:
                    14:b5:cd:ae:51:1d:cc:ef:63:75:0a:af:36:6f:9b:
                    7f:99:a5:ec:13:ab:ca:16:80:0f:82:f6:41:c1:24:
                    15:fd:bf:49:19:2e:90:0d:d5:a3:4f:42:1a:2c:f0:
                    25:7a:53:cb:c9:b8:b3:5a:4e:d9:a4:6e:31:3e:88:
                    c1:09:6f:4b:1a:f6:85:bf:5f:0a:96:55:72:8e:a5:
                    0c:bd:2f:f5:f5:4f:92:6a:20:fb:f4:89:ba:cf:47:
                    cc:1b:51:1a:6f:dc:44:9f:13:41:e0:21:11:48:e0:
                    a8:85:bd:7c:9d:02:28:64:51:ed:76:62:92:94:8c:
                    d7:92:68:b1:a1:85:c7:2f:f4:88:07:6b:1a:52:10:
                    31:ea:69:f4:58:7c:7e:c7:27:8f:2a:86:cd:13:2e:
                    2a:44:fe:ad:22:3b:d4:bc:40:ff:72:e0:41:14:be:
                    f9:42:6e:25:5c:b8:1a:5d:29:66:67:d5:c6:a6:6d:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9E:7C:AB:77:A2:D3:2D:F9:89:55:C3:A3:B2:58:4D:E9:BA:96:AB
            X509v3 Authority Key Identifier:
                keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:af:1b:c6:a2:8b:e8:66:39:28:f3:50:10:47:12:e6:a8:
         b1:4b:32:65:40:46:ed:e4:0a:cf:64:28:5e:d7:76:0f:f3:f5:
         8c:e4:41:e2:43:81:60:47:53:f6:69:33:82:17:17:f5:35:13:
         0c:dc:81:0d:55:33:41:24:f0:e3:ac:b5:01:00:f2:0e:3b:be:
         f4:2b:fc:41:54:5a:92:e9:bd:16:0a:92:83:df:b9:23:9e:4a:
         de:6c:e8:c6:e7:d6:c8:5d:df:3e:3b:49:e8:15:3b:cc:8d:e4:
         2e:ec:cd:0c:3d:5c:3b:36:ef:6a:3d:93:16:be:3a:39:e7:b4:
         16:08:d6:68:de:e6:a2:28:18:47:a4:9e:22:c7:e7:26:8b:1b:
         77:15:b1:7c:9f:ec:0c:65:dd:ef:76:a6:15:63:ab:fd:95:4c:
         3f:56:27:c6:dc:17:f4:06:10:3e:31:53:24:af:74:be:1b:8f:
         d0:35:8c:bc:d4:e6:7f:e0:8d:ab:53:57:ee:33:2e:d0:12:7a:
         2f:45:c1:5c:c8:63:0c:31:47:1c:bf:98:d1:e9:a9:2f:ef:00:
         68:28:f3:4f:8f:dd:d4:7f:4f:f3:95:45:01:8e:32:66:94:3e:
         83:17:dc:c9:48:c7:26:26:f5:be:96:6a:83:d0:cc:b8:41:f9:
         d2:ae:46:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0jjGv7b6Y4TNUuwN1VKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjg4ZTA1Yzg5ODc5NmM4MmZmMDE0NzU2ODgxNmU5MzM0
MjBlMTgwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD
EygzZjllN2NhYjc3YTJkMzJkZjk4OTU1YzNhM2IyNTg0ZGU5YmE5NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eJIfsEPnYjXMWw13UH7ANXRgXai
/h4CnFi0YHcZ8Wlamn/P6/++YqPlUKuV0VLLxlsxslET7k2bTRPNQn7mWJHD+WC0
llq1RFsUtc2uUR3M72N1Cq82b5t/maXsE6vKFoAPgvZBwSQV/b9JGS6QDdWjT0Ia
LPAlelPLybizWk7ZpG4xPojBCW9LGvaFv18KllVyjqUMvS/19U+SaiD79Im6z0fM
G1Eab9xEnxNB4CERSOCohb18nQIoZFHtdmKSlIzXkmixoYXHL/SIB2saUhAx6mn0
WHx+xyePKobNEy4qRP6tIjvUvED/cuBBFL75Qm4lXLgaXSlmZ9XGpm3YxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+efKt3otMt+YlVw6OyWE3puparMB8GA1UdIwQY
MBaAFFD4jgXImHlsgv8BR1aIFukzQg4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYt
ZmVkYmQ0YzY2YTBlLzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYtZmVkYmQ0YzY2YTBl
LzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzqvG8ai
i+hmOSjzUBBHEuaosUsyZUBG7eQKz2QoXtd2D/P1jORB4kOBYEdT9mkzghcX9TUT
DNyBDVUzQSTw46y1AQDyDju+9Cv8QVRakum9FgqSg9+5I55K3mzoxufWyF3fPjtJ
6BU7zI3kLuzNDD1cOzbvaj2TFr46Oee0FgjWaN7moigYR6SeIsfnJosbdxWxfJ/s
DGXd73amFWOr/ZVMP1YnxtwX9AYQPjFTJK90vhuP0DWMvNTmf+CNq1NX7jMu0BJ6
L0XBXMhjDDFHHL+Y0empL+8AaCjzT4/d1H9P85VFAY4yZpQ+gxfcyUjHJib1vpZq
g9DMuEH50q5GCg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:50 2025 by rpki-client