This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File:                     u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier:          BhRa2IUoy9ACvfD7r8ROCheXhWy1fusQn1FvCrmztPo=
Subject key identifier:   A5:B3:B7:0F:D3:96:B8:41:70:44:15:CD:E4:7F:F8:9A:C6:E9:83:8F
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer:       /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial:       019AF540F9A34CEE307327EC6116D0CDC2CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number:          1482
Signing time:             Sat 06 Dec 2025 20:01:07 +0000
Manifest this update:     Sat 06 Dec 2025 20:01:07 +0000
Manifest next update:     Sun 07 Dec 2025 20:01:07 +0000
Files and hashes:         1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
                          2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
                          3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: nnec667xKoMk3KidKqZr7Ob0fCSwkeNBFq5W3X55idI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:f9:a3:4c:ee:30:73:27:ec:61:16:d0:cd:c2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
        Validity
            Not Before: Dec  6 20:01:07 2025 GMT
            Not After : Dec  7 20:01:07 2025 GMT
        Subject: CN=a5b3b70fd396b841704415cde47ff89ac6e9838f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:eb:17:c4:96:b4:9a:56:ad:7d:d6:b7:e6:
                    1e:d6:61:fd:9e:fa:80:41:91:9f:c7:14:42:a2:c5:
                    dd:b7:18:46:90:20:18:22:4f:12:8a:f2:bb:b9:d2:
                    22:e3:ff:48:3a:21:9b:81:cd:4a:56:0d:86:b7:c6:
                    37:cc:26:03:07:3d:8b:c6:02:c2:67:4a:b7:01:f3:
                    60:ca:80:dd:fb:43:82:69:b7:76:b3:a0:96:73:d1:
                    66:93:ff:5a:f0:c3:61:fe:82:c9:75:a6:d5:2c:ec:
                    1d:7c:53:56:5e:2f:d0:b0:7e:d3:6c:2a:8a:41:2b:
                    63:7b:fe:2a:31:52:a0:b9:5e:bb:b1:d8:00:9c:93:
                    3c:3d:68:5c:3f:61:0d:23:77:22:27:ff:68:c0:36:
                    4f:92:c1:b7:27:4d:5c:02:a1:dc:4e:a4:6b:6e:79:
                    4c:e3:a3:bd:8e:ea:8c:d7:d3:89:b4:32:80:e0:07:
                    34:79:2a:8a:6a:7a:02:75:08:50:1d:6f:54:3d:0c:
                    fa:fd:f8:4e:ee:30:23:9b:6c:20:ad:bd:be:4c:0a:
                    a9:6b:c3:cb:d1:f6:9d:f0:2a:b6:37:e0:bd:1a:a0:
                    70:2e:5b:36:ae:8b:5a:67:9c:cc:2b:4e:86:5b:18:
                    4d:7b:89:43:17:a5:90:6c:41:92:e4:f7:09:30:43:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B3:B7:0F:D3:96:B8:41:70:44:15:CD:E4:7F:F8:9A:C6:E9:83:8F
            X509v3 Authority Key Identifier:
                keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:db:db:18:8d:63:4a:05:ef:ec:21:15:c5:30:70:87:4d:a7:
         b1:4f:e8:1c:58:73:f0:dd:71:a1:bb:5f:72:b0:e4:2c:a0:3f:
         15:6e:c6:9c:19:e4:f1:62:05:84:73:79:1c:7e:a1:1d:5f:6e:
         e7:f3:b9:ae:d9:56:39:37:d3:8e:6f:b3:9f:f1:11:fe:70:54:
         9e:cf:84:1a:87:88:fe:63:33:1e:ab:ef:fe:95:18:2f:34:9a:
         79:0c:f2:60:fe:35:cd:eb:8c:3d:41:b3:28:3d:72:f3:09:90:
         6f:aa:58:9a:3f:1b:4c:8b:fe:3a:eb:8a:5c:ac:9c:dd:9a:45:
         89:eb:c4:bc:eb:30:48:86:5c:13:0e:c9:7b:e8:51:05:0a:7f:
         5c:37:3b:1a:8f:3a:14:ea:9b:75:d8:c6:fa:99:1f:6a:23:52:
         85:04:42:80:f5:97:28:cf:c9:61:f6:60:1d:04:a8:3b:b2:98:
         7a:31:b1:c7:a9:2b:15:ee:ff:51:a7:d1:46:58:ef:a9:4b:2c:
         ef:fc:d0:81:70:b5:24:9c:23:80:58:6c:64:0a:96:9c:20:94:
         c7:8f:54:cf:05:d9:25:23:66:72:17:6a:ff:ea:dd:ef:07:68:
         35:a2:5e:6b:6c:46:f9:14:2b:6f:24:6d:ed:4a:c3:58:86:d9:
         a0:4f:40:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1QPmjTO4wcyfsYRbQzcLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjUxMjA2MjAwMTA3WhcNMjUxMjA3MjAwMTA3WjAzMTEwLwYDVQQD
EyhhNWIzYjcwZmQzOTZiODQxNzA0NDE1Y2RlNDdmZjg5YWM2ZTk4MzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKPrF8SWtJpWrX3Wt+Ye1mH9nvqA
QZGfxxRCosXdtxhGkCAYIk8SivK7udIi4/9IOiGbgc1KVg2Gt8Y3zCYDBz2LxgLC
Z0q3AfNgyoDd+0OCabd2s6CWc9Fmk/9a8MNh/oLJdabVLOwdfFNWXi/QsH7TbCqK
QStje/4qMVKguV67sdgAnJM8PWhcP2ENI3ciJ/9owDZPksG3J01cAqHcTqRrbnlM
46O9juqM19OJtDKA4Ac0eSqKanoCdQhQHW9UPQz6/fhO7jAjm2wgrb2+TAqpa8PL
0fad8Cq2N+C9GqBwLls2rotaZ5zMK06GWxhNe4lDF6WQbEGS5PcJMENAVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWztw/TlrhBcEQVzeR/+JrG6YOPMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtvbGI1j
SgXv7CEVxTBwh02nsU/oHFhz8N1xobtfcrDkLKA/FW7GnBnk8WIFhHN5HH6hHV9u
5/O5rtlWOTfTjm+zn/ER/nBUns+EGoeI/mMzHqvv/pUYLzSaeQzyYP41zeuMPUGz
KD1y8wmQb6pYmj8bTIv+OuuKXKyc3ZpFievEvOswSIZcEw7Je+hRBQp/XDc7Go86
FOqbddjG+pkfaiNShQRCgPWXKM/JYfZgHQSoO7KYejGxx6krFe7/UafRRljvqUss
7/zQgXC1JJwjgFhsZAqWnCCUx49UzwXZJSNmchdq/+rd7wdoNaJea2xG+RQrbyRt
7UrDWIbZoE9AmQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:46 2025 by rpki-client