This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File:                     UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier:          AtWehu0FdNiF3Rrts825qNKTEyirL6QoQGWQNQHsXwA=
Subject key identifier:   9A:0D:A9:91:0E:91:79:ED:3B:47:AF:9A:56:65:69:B9:C3:D3:74:D7
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer:       /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial:       019AF35227DF0B8AA4B7374CB2FEC2027B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number:          10B2
Signing time:             Sat 06 Dec 2025 11:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:38 +0000
Files and hashes:         1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: UiGhWuoNtwTUgXPPYI8PKyeo2zNC1eG6iQsM35wrwKw=)
                          2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:27:df:0b:8a:a4:b7:37:4c:b2:fe:c2:02:7b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
        Validity
            Not Before: Dec  6 11:00:38 2025 GMT
            Not After : Dec  7 11:00:38 2025 GMT
        Subject: CN=9a0da9910e9179ed3b47af9a566569b9c3d374d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:61:64:04:f8:9e:84:b2:a2:63:2d:f1:f3:
                    17:bd:02:b7:74:7e:e2:db:ed:c6:64:5b:5c:3d:f8:
                    63:54:9d:82:1a:4b:aa:f5:22:64:39:8b:d5:44:b5:
                    bc:78:21:04:fd:9e:7c:b0:24:1c:92:b6:bf:02:f6:
                    c2:bf:39:cf:41:b5:7c:ae:dc:8b:e1:90:dd:6c:c3:
                    39:8c:a3:61:b1:c5:60:3d:7e:0d:65:f7:b1:45:c8:
                    8d:99:ff:cf:ee:e3:41:05:a3:74:bf:b8:72:52:9f:
                    13:6d:0d:fe:46:55:18:e4:4d:d3:16:2c:42:5e:aa:
                    82:c9:67:52:0d:ef:9d:cd:8c:8f:38:d5:ad:18:d0:
                    92:e2:84:10:a2:0a:29:ba:3c:9c:61:be:3a:67:8e:
                    dc:03:be:a2:dd:f5:fc:ae:0b:1a:b8:21:9b:d8:f8:
                    9d:8e:11:33:2a:13:d2:c4:85:16:86:c1:3d:cd:5b:
                    f1:b1:b7:1a:a0:e6:57:e6:d5:da:51:b7:4a:c5:e9:
                    ca:e6:1f:de:a7:e5:82:ce:27:17:04:d1:31:69:48:
                    53:d7:f8:bf:a9:70:e0:ee:ad:a1:eb:15:36:a3:f7:
                    f0:47:3e:af:29:0f:4d:21:a9:17:8a:93:3d:88:35:
                    5b:18:97:d7:0a:67:89:89:ef:e5:7c:2d:16:cb:48:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:A9:91:0E:91:79:ED:3B:47:AF:9A:56:65:69:B9:C3:D3:74:D7
            X509v3 Authority Key Identifier:
                keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:50:db:e0:98:e4:20:a0:e5:0c:b8:c4:67:1a:03:86:b7:fd:
         3c:ee:cd:09:04:cc:9e:ad:0f:44:67:82:85:a5:37:1e:bd:f2:
         06:0c:35:e3:5a:3c:4d:d6:73:d4:af:87:f5:98:13:80:d7:35:
         c1:e1:ab:57:e4:b8:88:76:3e:c9:14:d7:c5:a4:8b:40:c9:3c:
         b3:4e:ce:60:a6:ac:c0:db:3d:be:af:bc:c4:8e:2f:f7:57:a0:
         08:33:a9:97:2a:3a:f0:96:dc:2b:cc:ce:55:3f:0e:a6:d9:9f:
         a0:9f:fe:1e:a8:65:97:16:ea:c9:7f:24:bf:6b:50:02:21:7c:
         b2:54:d0:df:40:d0:26:70:d8:3d:42:6f:5f:1a:9a:5e:d2:3c:
         0a:50:c7:81:61:68:78:85:4c:57:0f:c9:74:21:68:b5:db:a1:
         97:ae:71:39:7b:94:7d:85:1b:62:87:0d:bb:18:24:46:91:9a:
         0e:e1:34:95:8c:60:b3:fa:a3:c2:c2:bc:11:0d:ff:9e:5b:12:
         91:52:a1:dd:17:39:b0:ec:46:dc:a7:35:64:0d:0e:70:aa:f7:
         28:e5:e9:b9:37:9a:9e:59:7c:d8:35:6f:db:c7:6c:27:da:f4:
         d5:8d:b6:e1:8d:92:b8:70:c1:9e:88:75:09:85:06:d4:ce:7a:
         71:1f:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:08 2025 by rpki-client