This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File:                     uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier:          kgdtUxmifBRM9CuLIqx6dpVkRDghS8M8chUF+oywdtA=
Subject key identifier:   33:E3:11:72:EF:10:D3:5D:7F:F5:9D:F9:6B:4D:52:CF:CC:6E:0F:CC
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer:       /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial:       019AF1645B7D5D683145A488173C65219367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 02:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 02:01:17 +0000
Files and hashes:         1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
                          2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
                          3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
                          4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: vGqPhViltgwow6NJ5vzEPlOcTAG3S/jfkCOU4+W/3oU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:5b:7d:5d:68:31:45:a4:88:17:3c:65:21:93:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
        Validity
            Not Before: Dec  6 02:01:17 2025 GMT
            Not After : Dec  7 02:01:17 2025 GMT
        Subject: CN=33e31172ef10d35d7ff59df96b4d52cfcc6e0fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:79:66:b3:f0:30:cc:c7:20:64:35:56:3d:
                    b4:87:2d:1c:51:5a:c1:fe:88:d4:b1:be:87:e8:0d:
                    54:3b:7f:fd:79:60:b2:67:b9:58:8d:e4:40:dd:59:
                    6c:c6:17:84:5e:30:45:ef:ee:b5:92:00:f2:18:9e:
                    70:6d:a6:26:5c:9c:43:77:d4:5b:2a:a5:14:e8:aa:
                    30:6a:db:d8:75:1c:89:81:d0:96:69:38:5b:59:1c:
                    bb:a3:d9:e7:79:a1:30:1d:cb:4d:32:2e:6e:27:18:
                    65:d0:77:24:01:d5:d8:69:56:3d:f3:37:61:ab:e0:
                    14:25:ab:1a:c9:18:cc:a3:af:b0:1f:03:e4:2b:8f:
                    22:1f:ac:1f:08:e4:67:27:f6:a9:50:61:af:dc:72:
                    6c:bc:74:79:60:1c:36:56:2f:b9:5f:5f:4c:47:fb:
                    0d:65:6f:05:b2:e6:9d:63:cd:ef:97:12:65:84:fa:
                    fa:7b:cf:bb:f8:02:20:cb:c9:01:fc:a6:a7:43:8d:
                    d0:99:68:a6:e3:45:99:84:e3:65:40:5e:be:56:2e:
                    77:ed:fd:a7:eb:75:9c:48:c8:18:6c:85:35:05:a6:
                    9a:ab:1b:14:36:3e:91:b4:e2:87:ed:25:3a:8e:ea:
                    48:af:e1:7f:9f:ec:7b:1c:74:86:5f:93:6b:13:50:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E3:11:72:EF:10:D3:5D:7F:F5:9D:F9:6B:4D:52:CF:CC:6E:0F:CC
            X509v3 Authority Key Identifier:
                keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:79:fd:29:d8:4e:a8:91:a6:3b:05:9b:5d:88:19:58:cd:
         d9:69:d3:6b:2c:1f:37:17:24:5e:54:90:4a:3d:2a:4c:d1:24:
         07:07:34:03:df:19:5e:46:d9:4a:76:ad:f8:eb:3c:f1:d9:fb:
         bf:0a:d8:e2:99:2b:29:a2:05:66:84:3b:82:82:51:0c:bb:1d:
         53:08:d6:82:cf:c6:0a:1f:9f:4d:bf:2a:6d:9a:4b:d1:94:cc:
         14:d6:0d:65:40:73:bb:d6:07:d2:e3:93:2d:2b:33:ec:c4:ec:
         94:e2:55:ee:31:ec:94:86:4d:1f:55:b0:e0:c9:d7:bb:d6:b1:
         92:c1:56:b5:75:a3:4b:7e:3e:e7:65:f8:c8:29:0e:c3:fb:08:
         e8:65:5a:ed:67:28:1e:8e:f0:9f:66:51:8d:80:20:b2:b0:f3:
         7e:6a:07:37:67:23:00:d2:2c:6a:63:d4:65:44:48:66:41:d7:
         e9:44:c3:de:9d:35:1a:60:99:88:22:68:0e:81:cf:e3:c6:a6:
         4f:bd:d2:1d:93:65:50:48:1a:e4:92:bc:a4:9f:84:f4:a7:46:
         56:c2:5c:7d:92:f0:a8:60:5e:02:82:08:55:58:c6:24:25:34:
         cc:35:26:78:a5:bf:76:0d:7a:8b:1c:c1:d6:76:d0:56:4b:7b:
         b7:1a:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:40:21 2025 by rpki-client