This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File:                     Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier:          PrbZqszcQmoErmuCokfzacXWHvscXvTV/XdMIy2Yqt0=
Subject key identifier:   A3:15:B2:0B:E6:42:D8:69:92:5C:0C:B6:EF:D0:24:F7:75:91:8F:27
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer:       /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial:       019AF240009091EA6647FB0D7307481478D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 06:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:11 +0000
Files and hashes:         1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
                          2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: U0AMfGJiSGpn4k6aiuLvssv9NLSpevRTq0Y9Dl2S7uY=)
                          3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:00:90:91:ea:66:47:fb:0d:73:07:48:14:78:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
        Validity
            Not Before: Dec  6 06:01:11 2025 GMT
            Not After : Dec  7 06:01:11 2025 GMT
        Subject: CN=a315b20be642d869925c0cb6efd024f775918f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:8a:5b:fc:bc:86:62:d5:2f:6f:40:d3:41:
                    e7:3d:d1:a9:6f:b4:32:bf:cd:38:79:8f:0e:23:17:
                    e4:93:7a:2f:a8:de:3a:69:09:29:88:13:70:77:a2:
                    aa:62:71:91:30:a7:72:b4:a1:fc:bf:a3:93:10:32:
                    10:92:7c:0e:91:d0:f8:09:72:3b:9d:ad:0b:7c:53:
                    f7:e4:b5:89:32:b8:e3:6d:7a:ac:1b:30:4d:59:71:
                    70:f7:87:1a:fe:1d:d9:7a:82:eb:18:a5:da:71:3e:
                    85:05:fd:1e:2b:cd:c6:01:1a:94:a2:8a:bb:9a:4b:
                    67:92:59:6d:d6:71:a9:55:83:67:d3:07:f8:5f:78:
                    da:8e:0d:ec:b9:4d:12:d6:c2:41:e7:f6:d8:e6:84:
                    db:9c:e2:71:89:c6:f1:03:24:65:68:3f:61:02:a0:
                    73:dc:dc:8c:d7:13:6e:d9:9f:3a:81:73:73:20:c7:
                    00:8d:f8:84:3a:c7:ab:e4:da:58:24:c0:a2:16:59:
                    50:be:05:12:f5:00:3b:cc:f7:e7:0a:51:a0:ff:2c:
                    15:77:24:2c:3e:f7:61:11:d2:04:dd:51:fe:49:b0:
                    11:f0:f4:77:18:56:c1:e4:d6:b3:1a:c1:cc:56:9c:
                    0c:a4:66:ce:53:0e:0a:08:23:ea:75:1a:70:af:2a:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:B2:0B:E6:42:D8:69:92:5C:0C:B6:EF:D0:24:F7:75:91:8F:27
            X509v3 Authority Key Identifier:
                keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:88:63:94:df:d0:a8:0b:3e:86:1b:c0:86:73:2b:fe:40:
         ea:92:55:2a:c7:b3:26:14:a5:c6:73:ce:dd:54:d9:c5:46:a9:
         28:e0:78:f1:24:46:24:cc:37:a8:d3:76:81:12:3b:26:c3:2f:
         3e:86:34:5b:35:c6:6d:6e:fe:68:4f:10:b3:3b:92:49:aa:af:
         0a:40:2f:4c:14:a7:bd:0f:e5:68:6a:a9:dd:84:34:a9:9a:63:
         37:de:0b:2b:93:95:c3:69:27:ee:1d:91:c6:5c:ce:29:df:25:
         ee:a1:75:46:57:b1:81:14:d2:91:c6:55:24:74:5d:e9:b5:c4:
         55:cf:07:e8:56:2b:65:37:dd:0b:77:de:e2:01:cf:5a:46:6c:
         17:8c:b0:46:09:c5:6d:7e:85:95:a4:e4:0d:75:5b:55:6c:54:
         e7:a4:a8:37:28:0d:29:b5:3d:f9:89:d2:58:e7:ae:52:c1:cf:
         96:f4:1d:cd:d1:e8:81:cc:4b:c1:f6:62:55:99:df:cf:bf:2e:
         ec:b3:9e:d2:fd:1f:05:6d:61:9e:3e:94:c0:b7:2e:ed:50:df:
         14:0a:65:a3:76:9c:fb:f4:a2:d5:b4:20:13:e7:b0:23:19:66:
         c7:04:b3:48:0b:ef:fb:78:74:bc:2c:63:b1:fb:0b:ad:b6:16:
         71:4d:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:26 2025 by rpki-client