This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File:                     uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier:          eubhO7GReaG49pd2zhNVOHAU9TAnimskydjznKmrer8=
Subject key identifier:   DF:43:47:9B:AC:F5:92:06:26:28:1F:4A:AD:44:31:94:89:F4:94:68
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer:       /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial:       019AF5AEE7E963CD8FB5DE6B434C1571CAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number:          1764
Signing time:             Sat 06 Dec 2025 22:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 22:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 22:01:11 +0000
Files and hashes:         1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
                          2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: fXNgCKqIhTqOXwi1uA33Ro0+NIOHfIuqHerdgY1O+2A=)
                          3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:ae:e7:e9:63:cd:8f:b5:de:6b:43:4c:15:71:ca:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
        Validity
            Not Before: Dec  6 22:01:11 2025 GMT
            Not After : Dec  7 22:01:11 2025 GMT
        Subject: CN=df43479bacf5920626281f4aad44319489f49468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:97:ef:71:be:41:1e:b0:13:b5:be:3b:75:
                    d4:69:ac:f2:bd:20:94:75:56:c3:01:96:a7:f9:01:
                    26:19:d2:72:8c:61:f7:79:80:c9:6c:b1:01:a8:a7:
                    96:c5:3e:96:d5:de:34:f5:79:9f:93:16:57:95:c6:
                    26:36:e2:7c:a8:95:65:2e:b3:5c:60:9f:bd:0a:6e:
                    f5:1e:4e:a0:98:d3:f7:bb:39:71:af:eb:9d:d9:74:
                    6a:8e:7c:78:be:cd:b3:f9:c7:c2:cc:d7:eb:b5:13:
                    4a:de:f9:4f:10:8e:d6:b5:ce:be:3d:87:b5:28:76:
                    df:f5:b3:11:59:07:7f:de:ad:b8:13:21:95:ab:f4:
                    d7:a6:c8:47:86:91:f4:65:6a:71:0a:fc:b1:44:a2:
                    3f:25:76:71:03:4b:08:f3:55:1c:5f:1c:f8:03:ed:
                    ca:8a:0f:2a:3c:8f:b8:7c:67:43:5a:f0:4e:65:1d:
                    32:61:17:e9:b0:91:fe:be:13:5d:6b:7e:e2:be:ab:
                    8a:00:f9:49:a5:f4:6c:28:d6:72:ea:d3:f3:d6:a2:
                    e9:73:40:1a:ff:4a:e0:c3:fe:75:b8:82:cf:4a:e7:
                    68:0f:56:c4:92:07:2e:41:b1:4d:be:44:f0:84:3e:
                    1d:0f:34:c3:ad:77:47:9a:78:58:92:0b:16:dc:c6:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:47:9B:AC:F5:92:06:26:28:1F:4A:AD:44:31:94:89:F4:94:68
            X509v3 Authority Key Identifier:
                keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:ac:be:b1:7f:ef:d1:5e:06:46:62:f6:7a:cc:0e:82:28:
         79:a7:b2:b5:19:a0:46:33:83:69:dd:82:3a:46:23:e1:3c:1c:
         a5:e8:3e:e5:8c:68:ef:2b:03:f5:d0:9d:e3:65:36:8e:22:27:
         93:ae:f8:21:e6:1c:b8:da:2a:aa:3d:7f:48:45:27:1e:30:39:
         c4:3e:72:0e:06:7e:0b:98:39:34:19:45:0f:c6:eb:8b:09:3b:
         3c:47:0d:a7:f6:c4:6b:1d:ae:9b:51:67:07:29:5c:1f:7e:b1:
         de:2e:85:1b:a5:1f:d1:c5:20:41:bc:ad:8d:ba:e2:40:dc:6d:
         67:ae:ee:b3:78:71:d6:0f:7d:13:29:67:91:c3:c3:e1:d5:79:
         eb:40:f8:dc:f0:21:36:56:50:67:86:88:8d:3a:59:6c:17:28:
         25:42:82:aa:e6:4d:40:a4:9b:f3:a8:d4:cf:b4:6d:12:b7:46:
         bc:88:11:d7:21:e4:5d:18:70:de:88:03:04:31:63:49:ca:3a:
         8a:bd:3e:b4:7d:c4:47:33:82:9c:14:7b:91:af:59:29:1a:cd:
         00:d0:09:1e:bc:d3:d6:1b:f5:20:13:85:9c:93:a0:c9:82:5a:
         eb:63:f7:3c:e3:d8:c3:6b:3d:42:96:93:92:81:39:2f:f5:72:
         78:36:59:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1rufpY82Ptd5rQ0wVccrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZjRiZTQxMDU0ZWFmNzg3ZWFhMzgzM2ZmY2FlOGYxZWQ3
ZmFhODAwHhcNMjUxMjA2MjIwMTExWhcNMjUxMjA3MjIwMTExWjAzMTEwLwYDVQQD
EyhkZjQzNDc5YmFjZjU5MjA2MjYyODFmNGFhZDQ0MzE5NDg5ZjQ5NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEyX73G+QR6wE7W+O3XUaazyvSCU
dVbDAZan+QEmGdJyjGH3eYDJbLEBqKeWxT6W1d409XmfkxZXlcYmNuJ8qJVlLrNc
YJ+9Cm71Hk6gmNP3uzlxr+ud2XRqjnx4vs2z+cfCzNfrtRNK3vlPEI7Wtc6+PYe1
KHbf9bMRWQd/3q24EyGVq/TXpshHhpH0ZWpxCvyxRKI/JXZxA0sI81UcXxz4A+3K
ig8qPI+4fGdDWvBOZR0yYRfpsJH+vhNda37ivquKAPlJpfRsKNZy6tPz1qLpc0Aa
/0rgw/51uILPSudoD1bEkgcuQbFNvkTwhD4dDzTDrXdHmnhYkgsW3MZcNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9DR5us9ZIGJigfSq1EMZSJ9JRoMB8GA1UdIwQY
MBaAFLj0vkEFTq94fqo4M//K6PHtf6qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2Mt
NzFjZDZhZjA3MmE1LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2MtNzFjZDZhZjA3MmE1
LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR6svrF/
79FeBkZi9nrMDoIoeaeytRmgRjODad2COkYj4Twcpeg+5Yxo7ysD9dCd42U2jiIn
k674IeYcuNoqqj1/SEUnHjA5xD5yDgZ+C5g5NBlFD8briwk7PEcNp/bEax2um1Fn
BylcH36x3i6FG6Uf0cUgQbytjbriQNxtZ67us3hx1g99EylnkcPD4dV560D43PAh
NlZQZ4aIjTpZbBcoJUKCquZNQKSb86jUz7RtErdGvIgR1yHkXRhw3ogDBDFjSco6
ir0+tH3ERzOCnBR7ka9ZKRrNANAJHrzT1hv1IBOFnJOgyYJa62P3POPYw2s9QpaT
koE5L/VyeDZZhw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:27 2025 by rpki-client