This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File:                     UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier:          EzzrbFA4TnqNb7rhfKmjUq0RVigyY1GFoBKqYK2Exs4=
Subject key identifier:   91:AE:73:D5:99:D5:D0:56:CB:D7:33:96:0D:76:AA:B9:BD:F6:9E:03
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer:       /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial:       019AF24017AA9E199BF6A75DA15F721BA743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 06:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:17 +0000
Files and hashes:         1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
                          2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
                          3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: 8pNLy35UmGhjHph5O4H1a95ei2/6L8hQsUWF/JHpQWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:17:aa:9e:19:9b:f6:a7:5d:a1:5f:72:1b:a7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
        Validity
            Not Before: Dec  6 06:01:17 2025 GMT
            Not After : Dec  7 06:01:17 2025 GMT
        Subject: CN=91ae73d599d5d056cbd733960d76aab9bdf69e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:1e:dc:26:03:1e:20:da:50:c2:b1:2b:20:
                    5c:aa:89:f9:77:ad:98:3e:ce:d8:03:52:8f:16:db:
                    e8:7e:e9:67:2c:13:77:db:35:fa:3a:a7:c0:00:dd:
                    51:46:39:c0:c9:d0:56:c7:ad:ff:02:1c:6a:87:ef:
                    31:6a:18:20:54:82:c0:53:25:da:21:c3:6d:16:2d:
                    14:14:0b:76:2e:97:c9:b6:df:5b:9d:f3:d6:7e:2c:
                    00:f5:9a:68:3d:76:33:35:28:ca:7b:a4:ab:71:60:
                    4c:19:d2:06:73:4d:f7:4d:56:fe:a8:d4:a2:d9:8c:
                    2d:47:36:34:58:32:88:b8:84:8c:44:0a:66:1c:cb:
                    f5:b5:85:6c:c7:41:24:f8:5a:a0:e4:9e:7a:ae:ed:
                    13:1d:61:9c:92:ce:01:0b:13:fe:24:6f:5c:69:2a:
                    5b:88:36:7b:57:45:13:5e:86:6c:f8:30:14:bc:df:
                    39:a0:52:a6:c8:3e:50:37:9a:2b:74:fc:7c:cc:06:
                    19:52:bf:e2:bd:01:4e:dd:28:18:4b:9f:63:5d:91:
                    40:74:7d:7b:92:a9:02:e8:74:cc:e7:b0:78:63:da:
                    8d:95:41:1c:dd:44:4d:d4:0e:7a:c8:4b:28:e9:b0:
                    a7:ef:16:57:74:8d:ed:af:ed:97:c6:c2:d6:9b:47:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AE:73:D5:99:D5:D0:56:CB:D7:33:96:0D:76:AA:B9:BD:F6:9E:03
            X509v3 Authority Key Identifier:
                keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7d:4d:43:de:39:04:12:fe:0f:69:af:f0:7d:2c:ae:b6:c7:
         59:0b:f1:64:bb:b5:0a:2c:e1:fb:f5:22:54:d6:1e:c6:66:8f:
         84:73:5a:a4:34:47:27:1a:04:19:73:61:1e:6f:42:cd:80:46:
         ff:a4:a8:01:37:60:94:97:18:3e:41:c3:c1:53:ce:dd:66:07:
         31:4d:1d:bb:4c:53:1d:6e:be:da:6b:55:b1:e8:3e:dc:d9:c6:
         50:f1:95:f7:b6:65:86:1c:46:d0:cc:01:e8:49:3e:74:f0:dc:
         4c:93:3f:f6:cf:4f:9b:9d:7d:fc:c0:49:b7:89:6c:f3:64:1c:
         24:b8:d8:0b:c3:35:e6:46:67:63:eb:cb:7d:1e:cf:9d:fc:aa:
         8c:f1:1f:67:df:8f:14:ac:14:8b:b4:c8:66:77:e6:0f:96:19:
         b1:89:8b:53:f0:27:84:f6:37:05:fe:3d:f9:06:ca:c8:a8:b1:
         fe:83:32:63:0c:48:01:78:27:37:42:7e:4e:73:28:26:1d:f8:
         bd:c3:cc:74:dc:37:10:a7:6f:18:d2:16:3c:a4:6f:b5:3f:91:
         3f:36:fa:68:77:e9:f6:13:d2:6b:45:d5:63:5c:fa:44:91:8c:
         5b:2e:1e:80:96:c5:a7:a9:96:7c:7f:23:46:49:9a:1a:96:34:
         41:87:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:30 2025 by rpki-client